bonafides.eu

Issued by R3

About this certificate

This digital certificate with serial number 03:49:3a:6b:f5:7e:93:9e:28:a0:cf:de:2b:fa:c4:eb:3a:b3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bonafides.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:3a:6b:f5:7e:93:9e:28:a0:cf:de:2b:fa:c4:eb:3a:b3
Serial Number (int): 286255126359247422989923632487441864800947
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:af:7f:5a:12:ad:3e:82:72:db:04:6f:71:87:40:c9:ae:87:d9:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:46:92:a8:b2:96:44:c5:5a:ec:48:47:39:b7:08:be:a1:53:e8:93
Fingerprint (sha256): 6e:05:b9:ba:9d:e1:f4:84:82:7c:62:45:31:13:a8:77:23:89:e7:d6:a7:56:3e:c2:0e:c0:85:36:07:87:e0:07

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bonafides.eu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bonafides.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5c.com.au
*.8673.in
*.analsexpraktiken.de
*.anyadiary.com
*.apnayojna.in
*.arbeitzam.de
*.binterest.de
*.boars.com.au
*.bonafides.eu
*.cloudsquad.in
*.clubfadoqgranby.org
*.cokbaska.org
*.convectionmicrowaves.com.au
*.delaynieshomeinteriors.co.uk
*.delcorighttoeducation.com
*.fahrschulentest.de
*.geeksvg.com
*.gewuerzregale.de
*.kinomnenies.me
*.losmundosdehachero.com
*.maxibutorok.hu
*.mayapbd.com
*.mo-mo.co
*.motivationn.de
*.ntestin.online
*.pilst.de
*.repolarisation.de
*.rubbishcollectionsydney.com.au
*.ruffnex.ca
*.schlabberpulli.de
*.steuerermklaerung.de
*.takemystuff.com.au
*.timesystem.us
*.velo-city2020.com
*.victorianissan.com
*.xn--bauchhhlenschwangerschaft-3rc.de
*.xn--campinpltze-s8a.de
*.xn--ehegelbte-v9a.de
*.xn--fhrerscheingruppen-m6b.de
*.xn--fremdsprachenwrterbuch-7hc.de
*.xn--gnstige-winterreisen-pec.de
*.xn--lkrug-iua.de
*.xn--mdchengames-l8a.de
*.xn--mnnerkorsett-gcb.de
*.xn--msli-selber-machen-m6b.de
*.xn--omaschlpfer-zhb.de
*.xn--osterkrbchen-9ib.de
*.xn--vanillepltzchen-8kb.de
*.xsteuererklaerung.de
*.yphilis.de
5c.com.au
8673.in
analsexpraktiken.de
anyadiary.com
apnayojna.in
arbeitzam.de
binterest.de
boars.com.au
bonafides.eu
cloudsquad.in
clubfadoqgranby.org
cokbaska.org
convectionmicrowaves.com.au
delaynieshomeinteriors.co.uk
delcorighttoeducation.com
fahrschulentest.de
geeksvg.com
gewuerzregale.de
kinomnenies.me
losmundosdehachero.com
maxibutorok.hu
mayapbd.com
mo-mo.co
motivationn.de
ntestin.online
pilst.de
repolarisation.de
rubbishcollectionsydney.com.au
ruffnex.ca
schlabberpulli.de
steuerermklaerung.de
takemystuff.com.au
timesystem.us
velo-city2020.com
victorianissan.com
xn--bauchhhlenschwangerschaft-3rc.de
xn--campinpltze-s8a.de
xn--ehegelbte-v9a.de
xn--fhrerscheingruppen-m6b.de
xn--fremdsprachenwrterbuch-7hc.de
xn--gnstige-winterreisen-pec.de
xn--lkrug-iua.de
xn--mdchengames-l8a.de
xn--mnnerkorsett-gcb.de
xn--msli-selber-machen-m6b.de
xn--omaschlpfer-zhb.de
xn--osterkrbchen-9ib.de
xn--vanillepltzchen-8kb.de
xsteuererklaerung.de
yphilis.de

Other certificates including the domain name bonafides.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for bonafides.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOGTCCDQGgAwIBAgISA0k6a/V+k54ooM/eK/rE6zqzMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTExODQzMzFaFw0yNDA0MTAxODQzMzBaMBcxFTATBgNVBAMT
DGJvbmFmaWRlcy5ldTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKhQ
VMrMnJuO+IcyWEKQmQo9Supy+vUM+6USNrJo5KrhCYqJkQcl5c68ZSzvHCUPPoIx
1dPGxzTfYGFkxurzFeZceNBpaic3cISh371Mb3eBZyyvXwK5j6DzrGcVMvumtO44
u8+Hs58f7+frJrvOUilHLkFxGMw3DexbZLGRICOide0adnPJ/U0bh6BpsPk9/MBv
yexDD60G4i76Ehkl/2yAW/dceUEzaI0EdyTu2EzSnjPloaG3ckbljLeQ5J4tSuW1
1vu0D5oWJ+CAgiI8YtXqBcmFfbAsA4iuqtsSwG6TEoZjY7jT6dyedxNdeDJjUg+e
KMaXAZGdqOrpcAhCye91fh7l4XNaPwCoMxtUSTiGjYeMBvujJa2sjOvFHKKVAeL2
aGPPJxkhNKavN4YBZjbNlPUFyKomRh/7lUftHNarZ6Wf7GswuLQOajbVtP22DG2X
1OITUpLnpkthFAVrQZzV91mGI3cI26TNXgwJ3pJCiSGiiqrFyugKt/hhlmbJXJL8
uPfHY5brZaBez0jzqpC6BMaKk02VwgkR2IUkGfcJNloPtD+2ZFSi6I2KonRVRjlw
7UXkEhX1Sa3UeQq1FiUg2JbrhoUfYqVVHTWo9xgtbvKhH4GvWkw/cD+xJQfamWgq
LDq93wrzuZFWc4W3f5E7/KW97fljN2xa/JSkidrrAgMBAAGjggpCMIIKPjAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFASvf1oSrT6CctsEb3GHQMmuh9ndMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMIIISQYDVR0RBIIIQDCCCDyCCyouNWMuY29tLmF1ggkq
Ljg2NzMuaW6CFSouYW5hbHNleHByYWt0aWtlbi5kZYIPKi5hbnlhZGlhcnkuY29t
gg4qLmFwbmF5b2puYS5pboIOKi5hcmJlaXR6YW0uZGWCDiouYmludGVyZXN0LmRl
gg4qLmJvYXJzLmNvbS5hdYIOKi5ib25hZmlkZXMuZXWCDyouY2xvdWRzcXVhZC5p
boIVKi5jbHViZmFkb3FncmFuYnkub3Jngg4qLmNva2Jhc2thLm9yZ4IdKi5jb252
ZWN0aW9ubWljcm93YXZlcy5jb20uYXWCHiouZGVsYXluaWVzaG9tZWludGVyaW9y
cy5jby51a4IbKi5kZWxjb3JpZ2h0dG9lZHVjYXRpb24uY29tghQqLmZhaHJzY2h1
bGVudGVzdC5kZYINKi5nZWVrc3ZnLmNvbYISKi5nZXd1ZXJ6cmVnYWxlLmRlghAq
Lmtpbm9tbmVuaWVzLm1lghgqLmxvc211bmRvc2RlaGFjaGVyby5jb22CECoubWF4
aWJ1dG9yb2suaHWCDSoubWF5YXBiZC5jb22CCioubW8tbW8uY2+CECoubW90aXZh
dGlvbm4uZGWCECoubnRlc3Rpbi5vbmxpbmWCCioucGlsc3QuZGWCEyoucmVwb2xh
cmlzYXRpb24uZGWCICoucnViYmlzaGNvbGxlY3Rpb25zeWRuZXkuY29tLmF1ggwq
LnJ1ZmZuZXguY2GCEyouc2NobGFiYmVycHVsbGkuZGWCFiouc3RldWVyZXJta2xh
ZXJ1bmcuZGWCFCoudGFrZW15c3R1ZmYuY29tLmF1gg8qLnRpbWVzeXN0ZW0udXOC
EyoudmVsby1jaXR5MjAyMC5jb22CFCoudmljdG9yaWFuaXNzYW4uY29tgiYqLnhu
LS1iYXVjaGhobGVuc2Nod2FuZ2Vyc2NoYWZ0LTNyYy5kZYIYKi54bi0tY2FtcGlu
cGx0emUtczhhLmRlghYqLnhuLS1laGVnZWxidGUtdjlhLmRlgh8qLnhuLS1maHJl
cnNjaGVpbmdydXBwZW4tbTZiLmRlgiMqLnhuLS1mcmVtZHNwcmFjaGVud3J0ZXJi
dWNoLTdoYy5kZYIhKi54bi0tZ25zdGlnZS13aW50ZXJyZWlzZW4tcGVjLmRlghIq
LnhuLS1sa3J1Zy1pdWEuZGWCGCoueG4tLW1kY2hlbmdhbWVzLWw4YS5kZYIZKi54
bi0tbW5uZXJrb3JzZXR0LWdjYi5kZYIfKi54bi0tbXNsaS1zZWxiZXItbWFjaGVu
LW02Yi5kZYIYKi54bi0tb21hc2NobHBmZXItemhiLmRlghkqLnhuLS1vc3Rlcmty
YmNoZW4tOWliLmRlghwqLnhuLS12YW5pbGxlcGx0emNoZW4tOGtiLmRlghYqLnhz
dGV1ZXJlcmtsYWVydW5nLmRlggwqLnlwaGlsaXMuZGWCCTVjLmNvbS5hdYIHODY3
My5pboITYW5hbHNleHByYWt0aWtlbi5kZYINYW55YWRpYXJ5LmNvbYIMYXBuYXlv
am5hLmluggxhcmJlaXR6YW0uZGWCDGJpbnRlcmVzdC5kZYIMYm9hcnMuY29tLmF1
ggxib25hZmlkZXMuZXWCDWNsb3Vkc3F1YWQuaW6CE2NsdWJmYWRvcWdyYW5ieS5v
cmeCDGNva2Jhc2thLm9yZ4IbY29udmVjdGlvbm1pY3Jvd2F2ZXMuY29tLmF1ghxk
ZWxheW5pZXNob21laW50ZXJpb3JzLmNvLnVrghlkZWxjb3JpZ2h0dG9lZHVjYXRp
b24uY29tghJmYWhyc2NodWxlbnRlc3QuZGWCC2dlZWtzdmcuY29tghBnZXd1ZXJ6
cmVnYWxlLmRlgg5raW5vbW5lbmllcy5tZYIWbG9zbXVuZG9zZGVoYWNoZXJvLmNv
bYIObWF4aWJ1dG9yb2suaHWCC21heWFwYmQuY29tgghtby1tby5jb4IObW90aXZh
dGlvbm4uZGWCDm50ZXN0aW4ub25saW5lgghwaWxzdC5kZYIRcmVwb2xhcmlzYXRp
b24uZGWCHnJ1YmJpc2hjb2xsZWN0aW9uc3lkbmV5LmNvbS5hdYIKcnVmZm5leC5j
YYIRc2NobGFiYmVycHVsbGkuZGWCFHN0ZXVlcmVybWtsYWVydW5nLmRlghJ0YWtl
bXlzdHVmZi5jb20uYXWCDXRpbWVzeXN0ZW0udXOCEXZlbG8tY2l0eTIwMjAuY29t
ghJ2aWN0b3JpYW5pc3Nhbi5jb22CJHhuLS1iYXVjaGhobGVuc2Nod2FuZ2Vyc2No
YWZ0LTNyYy5kZYIWeG4tLWNhbXBpbnBsdHplLXM4YS5kZYIUeG4tLWVoZWdlbGJ0
ZS12OWEuZGWCHXhuLS1maHJlcnNjaGVpbmdydXBwZW4tbTZiLmRlgiF4bi0tZnJl
bWRzcHJhY2hlbndydGVyYnVjaC03aGMuZGWCH3huLS1nbnN0aWdlLXdpbnRlcnJl
aXNlbi1wZWMuZGWCEHhuLS1sa3J1Zy1pdWEuZGWCFnhuLS1tZGNoZW5nYW1lcy1s
OGEuZGWCF3huLS1tbm5lcmtvcnNldHQtZ2NiLmRlgh14bi0tbXNsaS1zZWxiZXIt
bWFjaGVuLW02Yi5kZYIWeG4tLW9tYXNjaGxwZmVyLXpoYi5kZYIXeG4tLW9zdGVy
a3JiY2hlbi05aWIuZGWCGnhuLS12YW5pbGxlcGx0emNoZW4tOGtiLmRlghR4c3Rl
dWVyZXJrbGFlcnVuZy5kZYIKeXBoaWxpcy5kZTATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DG
tS6i2reK+Jpt9RfYAAABjPoNGAAAAAQDAEcwRQIgNjMkpx+VNmaUAUr0LqpZyVUN
j3hABciZAavfIgmhrykCIQCy6r4GQa/xeaEaXIdGnybsM/b+/Ru9stlyjpV/W1X3
iQB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjPoNGGkAAAQD
AEcwRQIgPcVL1SPA2cQcs9KnVvc2znt7Xs8QpEz468rOag82VE8CIQDitsIeit6L
B387i6YMbLr/NQi+eBpPIPqdpY1wNkimQDANBgkqhkiG9w0BAQsFAAOCAQEAbKQ2
L0Eq4NDi4w2WfnRP1JShVxzTHaU13TljwW/AkvhVRoUdnmxkxHq9j88qF9Hya5jn
SG7Fq9Fy0cC+nmvnccNR2rCtE09QIWtXc6AS8CbGMncqeYFvDpKjfx4UCrl0xP9o
Ic1k6WXdxrfEioRo9bIld/z7tSqSJOUE73oS0G4tNSEyXC1OE0XeaBAuBwDzy07l
6bEuyP9LtswYFED0Mf5vi9AT4wwU/VfGjurKcx3CoEOekpbHZT7XZ8+u5BNJs1y+
kLclggVajsyMYuIHmMrEC4jFU2j9u4BHjiDBFQObyK5HgqSy3HVlSNn/pAtfimj/
U7QfYAD6bAc/SRHMlA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286255126359247422989923632487441864800947
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 18:43:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 18:43:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonafides.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686660370548445820702180644806378977143680783462865993972775284163768375257877223099185212556903795958283536737406976724044823673352308906385043112953159476712416282354828202416665692557813324330280744081298844695090883057973012501631334954171576701553803684976624216715433926649059905493013996998075583789593189546201078540721269867247173862350198217974639547613774047792554311179781813458637258243864573398184981077030865314568009308744573343197049948149013386140987525447413917723932361767934637673250334670553957981442678355408752305620264796386837347343270128670535901670388303420976477417548889497108344995326630023355710301885486660474345075135334069625625314418044940441926163149060257793228567480778477876513343312653435581313161306812304557160075857886335271258059422205469186179208400386332521717236923992932985450537332723692184943333330490507096314640449697237929541169975559922078725072358684106282812144869073912293224682674160478477990296957998331094450113465721310194190035988585674737796842807920841264455216499514272786673892064328007325502776265465512811815052718000545619276192438188693998028501267646843578152900523074963667082585864486944324007431340541456077005691472971831852015142544613611615477804959390443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04af7f5a12ad3e8272db046f718740c9ae87d9dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8673.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anyadiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apnayojna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudsquad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubfadoqgranby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cokbaska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.convectionmicrowaves.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delcorighttoeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahrschulentest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geeksvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinomnenies.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losmundosdehachero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxibutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayapbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mo-mo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motivationn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntestin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruffnex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlabberpulli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuerermklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takemystuff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timesystem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velo-city2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorianissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bauchhhlenschwangerschaft-3rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--campinpltze-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fhrerscheingruppen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremdsprachenwrterbuch-7hc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gnstige-winterreisen-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lkrug-iua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--msli-selber-machen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--omaschlpfer-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vanillepltzchen-8kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsteuererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yphilis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8673.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyadiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apnayojna.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudsquad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubfadoqgranby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokbaska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convectionmicrowaves.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delcorighttoeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahrschulentest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geeksvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinomnenies.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losmundosdehachero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxibutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayapbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo-mo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motivationn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntestin.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruffnex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlabberpulli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuerermklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takemystuff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesystem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velo-city2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorianissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bauchhhlenschwangerschaft-3rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--campinpltze-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fhrerscheingruppen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremdsprachenwrterbuch-7hc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gnstige-winterreisen-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lkrug-iua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--msli-selber-machen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--omaschlpfer-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vanillepltzchen-8kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsteuererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yphilis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cfa0d180000000403004730450220363324a71f95366694014af42eaa59c9550d8f784005c89901abdf2209a1af29022100b2eabe0641aff179a11a5c87469f26ec33f6fefd1bbdb2d9728e957f5b55f78900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cfa0d1869000004030047304502203dc54bd523c0d9c41cb3d2a756f736ce7b7b5ecf10a44cf8ebcace6a0f36544f022100e2b6c21e8ade8b077f3b8ba60c6cbaff3508be781a4f20fa9da58d703648a640
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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