genema.icu

Issued by R3

About this certificate

This digital certificate with serial number 03:74:ef:c1:f1:fe:55:d5:26:d7:67:6c:27:93:ad:1b:57:4b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=genema.icu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:ef:c1:f1:fe:55:d5:26:d7:67:6c:27:93:ad:1b:57:4b
Serial Number (int): 301128304870607125486113004109677863851851
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:cf:b4:49:e6:5b:b8:85:60:40:3e:2f:94:a6:71:83:3c:6b:d2:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:3e:a1:da:c2:c4:b8:0e:52:50:d8:59:e4:bc:47:70:53:f3:4b:77
Fingerprint (sha256): 6f:b4:dc:76:15:0f:68:0c:d2:a1:6c:69:59:64:de:6c:c6:1a:3a:fb:99:34:c7:3b:95:e9:d3:b4:88:b7:7d:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate genema.icu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for genema.icu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.analny.icu
*.atesl.org
*.corocoro.icu
*.dailytrader.com.au
*.dblbnk.cyou
*.devuqajuqidew.bar
*.diary-workbook-journal.bar
*.eastmarketnoodlehouse.com
*.edition-journal-learn.buzz
*.education-notes-planner.buzz
*.foodprocessor.de
*.fpk.com.pl
*.genema.icu
*.hanmie.tv
*.hardware-versand.net
*.haushaltsbedarf.de
*.journal-learn-guide.buzz
*.ketoisumxsdiet.com
*.legitmateways.com
*.lmstreaming2.com
*.londonslifestyles.com
*.longislandpelletfuel.com
*.loomoviess.com
*.lumiduo.com
*.marynarka.waw.pl
*.novamovies.net
*.nrawning.co.uk
*.nugstv.net
*.nursingschool.de
*.nursinguniform.de
*.petershepherdtyres.co.uk
*.skiffvintageknittingpatterns.co.uk
*.sowmstvdyficyp.com
*.spiceymania.com
*.staygreat2020.com
*.staywindrockpark.com
*.steauamuntilorisverna.com
*.suhutterlfy.com
*.techubly.com
*.timforserenity.com
*.toffeesharw.com
*.trendyrings.net
*.troymobbs.com
*.tutorialcsip.com
*.twa.com.pl
*.twobrotherspa.com
*.typeinggamezone.com
*.writing-pages-world.bar
*.xn--billogflge-heb.de
*.xn--grundsteuererkrung-fuer-privateigentum-3gd.de
analny.icu
atesl.org
corocoro.icu
dailytrader.com.au
dblbnk.cyou
devuqajuqidew.bar
diary-workbook-journal.bar
eastmarketnoodlehouse.com
edition-journal-learn.buzz
education-notes-planner.buzz
foodprocessor.de
fpk.com.pl
genema.icu
hanmie.tv
hardware-versand.net
haushaltsbedarf.de
journal-learn-guide.buzz
ketoisumxsdiet.com
legitmateways.com
lmstreaming2.com
londonslifestyles.com
longislandpelletfuel.com
loomoviess.com
lumiduo.com
marynarka.waw.pl
novamovies.net
nrawning.co.uk
nugstv.net
nursingschool.de
nursinguniform.de
petershepherdtyres.co.uk
skiffvintageknittingpatterns.co.uk
sowmstvdyficyp.com
spiceymania.com
staygreat2020.com
staywindrockpark.com
steauamuntilorisverna.com
suhutterlfy.com
techubly.com
timforserenity.com
toffeesharw.com
trendyrings.net
troymobbs.com
tutorialcsip.com
twa.com.pl
twobrotherspa.com
typeinggamezone.com
writing-pages-world.bar
xn--billogflge-heb.de
xn--grundsteuererkrung-fuer-privateigentum-3gd.de

Other certificates including the domain name genema.icu

(limited to 100 certificates)

Certificate

The complete raw certificate details for genema.icu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAths2dfdy0BvX9HCHA7oV
ecG117xnEx9St9memvgSbocUNhgI75M1dENwx8SzAaf1YgDlmlBJkj0Gc0NmRa0N
Dr5OkMsOTppWyYWF3vA3deQ6ThwdXr+cx+8zmcfgJ40z7yplOSt/mVRWm5hhwoK3
Zh+eNND7gEteuMQGqG20Px9IVZQPbbb6EZjEpdeh3Vtxba30vwTypIFuVLvYb10Q
Us/0DdcQ4tXwRP7NE+8Fu0+1z/fu9sJIdyBRj0v9V6eFVUVqBATiMeap4twnSy4S
+Sbob4G/Zz1xtjEspX7j+yWmiY8wbXuTAnK3/LpDC/+BOgTUbfwwBX08IMcpDeBA
UsF748zaDsJJsfg0g3oK15bAQP9GFevB5q8zQV2LfCWU5qPQt/Q4PqcZPavEDyyk
aI4zY/aaVbZfwnTHoEBc+703TlW9pz2caT2Ao01Thyvpjwlx6S7XJCp/w/BGu1DZ
6ITwQPR24iBsNGko8giFLLmZwE0qY0JISoUfbdgXhEPQgBW/aQ4B4zqBibP9QXAY
J2Y8wlWoCcZDIcHRv1HxRlKcUniVTcMBPWJWaFcarZZcT+yNyTcIHKaa1U0re7z0
LOGEkBNBkbZuqYNlGLJBKpvUQWoPtJa8KrWuLePYw9WFjZARnrSHUggGdB4AY8mH
2HXSuAs/F+kRdLb5hk+07e8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301128304870607125486113004109677863851851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 09:45:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 09:45:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'genema.icu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742928885548523439241142207321946916267489557331017733401661552817685610030061269257856429190599989151092535751209368990233522291431560574403191165568312696941383869398237015371699783783725858290336509503896651080222842206131940033075693987748050506029608393854947785171079574883913336985602500145487045845155119660173664689943208707526132761132599999731759292714436808935644973785766586048595934150498521388879812770480452349971665888128858026063246507061300963957483593215893604888785085379769948347485038718651305362663966590546006759533838917375625814083753737891379816514734771843589834431830755729257109159972610999692504625344591786096641523707231129236256148200716635270965825103968259300368871645551387321056720614882066334223980504944092718619776914891113795637760226456103660053201032753346461613668474620054678566284310167321835714430182826267710199303117953578530814561155471189271210013804173632299768678225430316431172652870108426864838464122676658345711901804874479643387511879504318771144262098439621733480077126434621726375593402944640182430225531411522924227270581769774453012503653595887748341494717427574033825795616591159106512034182642744929076941826556122909770441645841911128932672905630071279397521904168431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37cfb449e65bb88560403e2f94a671833c6bd26c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2090 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analny.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corocoro.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dblbnk.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devuqajuqidew.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diary-workbook-journal.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edition-journal-learn.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.education-notes-planner.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fpk.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genema.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardware-versand.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.journal-learn-guide.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketoisumxsdiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legitmateways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lmstreaming2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londonslifestyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longislandpelletfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loomoviess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumiduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marynarka.waw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sowmstvdyficyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiceymania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staygreat2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staywindrockpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steauamuntilorisverna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suhutterlfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timforserenity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toffeesharw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.troymobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutorialcsip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twobrotherspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.typeinggamezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.writing-pages-world.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--grundsteuererkrung-fuer-privateigentum-3gd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analny.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corocoro.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dblbnk.cyou'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devuqajuqidew.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diary-workbook-journal.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edition-journal-learn.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education-notes-planner.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpk.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genema.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardware-versand.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journal-learn-guide.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketoisumxsdiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legitmateways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmstreaming2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonslifestyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longislandpelletfuel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loomoviess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumiduo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marynarka.waw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sowmstvdyficyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiceymania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staygreat2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staywindrockpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steauamuntilorisverna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suhutterlfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timforserenity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toffeesharw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troymobbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorialcsip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twobrotherspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typeinggamezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writing-pages-world.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--grundsteuererkrung-fuer-privateigentum-3gd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189d4c06b7a0000040300473045022036a3168bcf194459329da47b987e79bb9a2e62c695d8ca9c61dc1bac843061c1022100c04a25877e85d3f2df4e89d049a1f65dd8e6ecccf21736b05c39bf9e9d249a2d007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189d4c06b79000004030046304402200d15c724ac5a958621089cbdf364e15212ca15424890ee30c3bef3bc376f2268022069fe9c1a531e6402d4540a7b6366aac30ed4bba533cba4b84228a6388d788f7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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