faffen.de

Issued by R3

About this certificate

This digital certificate with serial number 03:4b:60:2a:76:37:00:e8:86:53:6e:03:ee:78:fd:6b:0f:5f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=faffen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:4b:60:2a:76:37:00:e8:86:53:6e:03:ee:78:fd:6b:0f:5f
Serial Number (int): 286985861676096698360491872915625312194399
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:ef:96:b9:64:2e:32:88:32:c5:48:2e:de:83:2c:91:a4:1f:95:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:67:60:fa:f7:cd:b0:1f:d7:69:e9:21:0c:f6:a8:3e:b6:08:e1:fe
Fingerprint (sha256): 6d:cc:10:4d:ed:db:2b:23:33:2a:5d:9a:7c:79:68:d5:48:fc:37:8f:bf:70:ce:ce:fa:d1:4e:78:94:91:1d:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate faffen.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faffen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ashersplumbingandheating.com
*.auto247.xyz
*.blessingseatery.com
*.booicasinoplay.net
*.burnscarlton.com
*.car-deals-78566.com
*.coingesture.com
*.cryptocurrencycreditcard.com
*.directdepositauthorizationagreement.com
*.doublestroller.de
*.encutador.com.br
*.faffen.de
*.fevafutbol.com
*.gesticulando.com
*.handelsregisterauszuege.de
*.i-b.be
*.italienfotos.de
*.kaikudesign.com
*.kleiderkoffer.de
*.loteriasdominicanloas.com
*.lotofbooty.com
*.masonandshirley.com
*.medizinschrank.de
*.mittelspitz.de
*.mm2trade.com
*.mpopuler.net
*.naturally-yayou.com
*.number04.com
*.nutritioncompanycolorado.com
*.opticusi.com
*.outstagram.net
*.pnv.de
*.privateinvestment.co.za
*.realbargains.net.au
*.sausershardware.com
*.spayyourpet.org
*.steelseriesgg.com
*.suwatbroker.com
*.templotupi.org
*.thatqiuz.org
*.thebuick55s.com
*.thomaswhitleyrealtor.com
*.tvabierta.net
*.usevial.com
*.waltermacken.com
*.xn--khlkombi-65a.de
*.yardly.au
*.yearnedyouth.com
*.zj97696.com
*.zone-telechargement2023.com
ashersplumbingandheating.com
auto247.xyz
blessingseatery.com
booicasinoplay.net
burnscarlton.com
car-deals-78566.com
coingesture.com
cryptocurrencycreditcard.com
directdepositauthorizationagreement.com
doublestroller.de
encutador.com.br
faffen.de
fevafutbol.com
gesticulando.com
handelsregisterauszuege.de
i-b.be
italienfotos.de
kaikudesign.com
kleiderkoffer.de
loteriasdominicanloas.com
lotofbooty.com
masonandshirley.com
medizinschrank.de
mittelspitz.de
mm2trade.com
mpopuler.net
naturally-yayou.com
number04.com
nutritioncompanycolorado.com
opticusi.com
outstagram.net
pnv.de
privateinvestment.co.za
realbargains.net.au
sausershardware.com
spayyourpet.org
steelseriesgg.com
suwatbroker.com
templotupi.org
thatqiuz.org
thebuick55s.com
thomaswhitleyrealtor.com
tvabierta.net
usevial.com
waltermacken.com
xn--khlkombi-65a.de
yardly.au
yearnedyouth.com
zj97696.com
zone-telechargement2023.com

Other certificates including the domain name faffen.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for faffen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286985861676096698360491872915625312194399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 23:56:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-29 23:56:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faffen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839105217464346480723470417739888339932357426702409231530371020980335876700692020517888017920496795450495615888754945591303569569252736501104046998912934176492807504344997067739211883740073617597947941616547621991032504440656852240394874054201663832740543421181973676693016199819358484275708378129918412512374913537140086335872314186297839584376766976069785618795601299806973708315068777264806545661350829768308807571384546121783907917767317375235425890878860238973255344288492894886471746419361290085522551404421291451282424338516566087471370158784377495295191583889716929032033444571163055714861152733281252855508609598920521844423214145043394054303420094604364672488761168507639241411253475915626836452860745081952915109232917054911654365329964216657738434041473975677436937448111918999263273829909104751452271286992423123719559323381292089169131358969454704867758793307283866033124987007939506463922461996383657197793841892987519727571915623959212073668943351568751773995365049385726477854602999024518172839851825623205107550449497840454996748049375318855752481083131260775777588991352539026586811270858670824386415601621414520044713156715591775328626942019613641208301146704968945582596314433602573976555919785763961925939841347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3ef96b9642e328832c5482ede832c91a41f952c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashersplumbingandheating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto247.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blessingseatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.booicasinoplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burnscarlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.car-deals-78566.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coingesture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptocurrencycreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directdepositauthorizationagreement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doublestroller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encutador.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faffen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fevafutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesticulando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handelsregisterauszuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-b.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.italienfotos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaikudesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleiderkoffer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loteriasdominicanloas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotofbooty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masonandshirley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medizinschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mittelspitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mm2trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpopuler.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturally-yayou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.number04.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutritioncompanycolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opticusi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outstagram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privateinvestment.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realbargains.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sausershardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spayyourpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steelseriesgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suwatbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.templotupi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thatqiuz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebuick55s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thomaswhitleyrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvabierta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usevial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waltermacken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--khlkombi-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yardly.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yearnedyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zj97696.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zone-telechargement2023.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashersplumbingandheating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto247.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessingseatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booicasinoplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnscarlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car-deals-78566.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coingesture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocurrencycreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directdepositauthorizationagreement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doublestroller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encutador.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faffen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fevafutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesticulando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelsregisterauszuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-b.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italienfotos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaikudesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleiderkoffer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loteriasdominicanloas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotofbooty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masonandshirley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medizinschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mittelspitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm2trade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpopuler.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturally-yayou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'number04.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutritioncompanycolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticusi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outstagram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateinvestment.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realbargains.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sausershardware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spayyourpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelseriesgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suwatbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templotupi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatqiuz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebuick55s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thomaswhitleyrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvabierta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usevial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltermacken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--khlkombi-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yardly.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yearnedyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zj97696.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zone-telechargement2023.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fd14c2ae10000040300483046022100c63363cb39e4115bbcc39268321f673703150894266cf6bbd2e6cd004d27a5d30221009dcb6b5031eb9f658737a827ef9472743972c962c5d17eb6f1700813d2d684870075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fd14c31f60000040300463044022022b6892ceea041925596883cba56e6f5cec2ca96019e0f9df673b749c5f12359022069feb829efe0675fef952ccd59d4cd7ef8400df7cd2475c1912ee94c2b880126
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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