modtivation.de

Issued by R3

About this certificate

This digital certificate with serial number 03:8a:a2:82:09:fe:da:57:17:7f:26:63:3f:c9:07:6c:d8:08 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=modtivation.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:a2:82:09:fe:da:57:17:7f:26:63:3f:c9:07:6c:d8:08
Serial Number (int): 308511834567012226527954987031567574816776
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:da:8c:57:4e:9a:3e:8b:b9:63:da:fd:e3:73:0c:51:70:db:0d:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 99:d0:1f:32:50:ab:07:85:29:be:c7:39:4a:a9:de:09:1a:dc:70:3d
Fingerprint (sha256): 72:fa:dc:c1:33:74:4c:db:7f:14:9f:e0:04:6a:a6:b3:76:cf:b4:e7:88:c7:21:67:b9:4a:f6:56:23:f3:dd:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate modtivation.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for modtivation.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abhappybooks.com
*.aconitum-globuli.de
*.allordinaries.com.au
*.anisechinese.com
*.australianwebsitesurvey.com.au
*.birdnetting.com.au
*.borreliosede.de
*.cateringsupply.com.au
*.dakarswagg.net
*.de-hautkrebs.de
*.de-steuererklaerungen.de
*.ergotherapieg.de
*.exercising.com.au
*.fibromylgie.de
*.haartransplanntation.de
*.hallux-varus.de
*.hautverduennung.de
*.hawthornsuites.net
*.heilpflanzenh.de
*.kardyologie.de
*.modtivation.de
*.mygamingsetup.com
*.physiotherappie.de
*.podologieg.de
*.polyneuropathied.de
*.portoliobox.net
*.raising.com.au
*.sblasenentzuendung.de
*.smukoviszidose.de
*.stott.net.au
*.tennsarm.de
*.thuberkulose.de
*.trichophyton-mentagrophytes.de
*.ufk.com.au
*.underconstructionband.com
*.vats.com.au
*.windpocken-de.de
*.xn--bcherpapier-thb.de
*.xn--bindehautetzndung-e3b.de
*.xn--de-heilkruter-jfb.de
*.xn--gluse-hra.de
*.xn--grner-str-r9a.de
*.xn--hausmittel-gegen-mcken-9lc.de
*.xn--hypoproteinmie-gib.de
*.xn--ortthopdie-w5a.de
*.xn--saures-aufstoen-2ib.de
*.xn--schssler-salze-12-42b.de
*.xn--steuererklrumng-9kb.de
*.xn--trkischer-drachenkopf-8hc.de
*.xylophone.com.au
abhappybooks.com
aconitum-globuli.de
allordinaries.com.au
anisechinese.com
australianwebsitesurvey.com.au
birdnetting.com.au
borreliosede.de
cateringsupply.com.au
dakarswagg.net
de-hautkrebs.de
de-steuererklaerungen.de
ergotherapieg.de
exercising.com.au
fibromylgie.de
haartransplanntation.de
hallux-varus.de
hautverduennung.de
hawthornsuites.net
heilpflanzenh.de
kardyologie.de
modtivation.de
mygamingsetup.com
physiotherappie.de
podologieg.de
polyneuropathied.de
portoliobox.net
raising.com.au
sblasenentzuendung.de
smukoviszidose.de
stott.net.au
tennsarm.de
thuberkulose.de
trichophyton-mentagrophytes.de
ufk.com.au
underconstructionband.com
vats.com.au
windpocken-de.de
xn--bcherpapier-thb.de
xn--bindehautetzndung-e3b.de
xn--de-heilkruter-jfb.de
xn--gluse-hra.de
xn--grner-str-r9a.de
xn--hausmittel-gegen-mcken-9lc.de
xn--hypoproteinmie-gib.de
xn--ortthopdie-w5a.de
xn--saures-aufstoen-2ib.de
xn--schssler-salze-12-42b.de
xn--steuererklrumng-9kb.de
xn--trkischer-drachenkopf-8hc.de
xylophone.com.au

Other certificates including the domain name modtivation.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for modtivation.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwJbYoBIbIPMgxtXnya7s
UO7KAgPIl37/5Q33hj6COzkaYSybuUmmGAwcl4n53Mw83ydEeCi5drfVjIc+4oPS
umL98jy47yAxiY+s4OFAtsXrcsK5qLV8NLQYMv/uKlckjm0KmErmClP5TNsY8T1W
VtoXs5YlvjOdx/t/B6dlEIEdNaGwpz5vkmnQCZDHWC9TGWDf4sGnc5drgxlQK7MP
YQkMCOeqXRfHXQBOHH0opQ3XYPgbFmfomoJBxbJXRzn5pQd8iartqm7zg81ZgsuS
awPASrcVokpiOSIDIL/iBnIxn8yazE6AuHfUvQj4aBcXVzfcHAQUmj6R5kWtXkGZ
EerG1Jpsat8bb6XjmjJZ66xDOoD3vYJaOUpzAayMp2uSMjoWI6RqJ7AzJhUwqlod
KxH9ekgqza2EerwCfPCOT/P8aWh30MxTPIp8Szg95zo7GWux1H6wqbfKdbWrKKo+
J2wHe6Uz9BqdA72UpxO3Saf7sCNFDGBIGS8BrrrfukKsfzvqiQNOcuBiqapkkKHF
wbMEzaHovVM8JYbE4ksp4UQ5fLFNSbyzEbDnstVAdi7+BceQtup8HkDLw77/11Lg
nO/0XNu8z9RMqUyCO7VxX4K4hgQFmKo6QPBl1S+2AvxRDXZMSLOBdc0D/f7ObH/h
dhamZ9yvonTQsMnUaSI4ypUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308511834567012226527954987031567574816776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 21:15:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 21:15:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'modtivation.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785695562522195193889106521653666044023131241354585664270760740818179392866304848067187945723313911540973759689844013223499270711325933558891858183913549470252307026914896383121416861865770159214631412084576264382308433826944712997611254126165672022067289697310843783007549559440985982514593096020038993422762588516331291140235351053003602034674625498204818513875918932606673076059359716954242104883708595250779760261072249157137347675060996436081944908518621894623478665196272438514223544279595054781027983257748636302984326319680414681215557751051796001574168257485391565804179731500000762197923495991294777446253015840572649616018872058371001812858014156120929859111990962114606509263579340473400261110820967874984722903626654366683278938101649411204483258582450862495115988313627848503193690744310948873068541743155973362904767675438869941412168807136436518985330000576545053619492586136091931569953523739534922006891990688591202103142946195836426616324782755693819205152932090841717239537992518255439864987900138106963588966300789334224955846382316853234073085400385733760532652083752023961588671769810059359507117586757804235970886139367686197483602701103198934874686901483504596795245851892628841145118897872761882161433856661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1dda8c574e9a3e8bb963dafde3730c5170db0d99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abhappybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aconitum-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allordinaries.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anisechinese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australianwebsitesurvey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birdnetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borreliosede.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cateringsupply.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dakarswagg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-hautkrebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de-steuererklaerungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ergotherapieg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exercising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fibromylgie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haartransplanntation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hallux-varus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hautverduennung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawthornsuites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heilpflanzenh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kardyologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modtivation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mygamingsetup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physiotherappie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podologieg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polyneuropathied.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portoliobox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sblasenentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smukoviszidose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stott.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennsarm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thuberkulose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trichophyton-mentagrophytes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ufk.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.underconstructionband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vats.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windpocken-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bcherpapier-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bindehautetzndung-e3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--de-heilkruter-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gluse-hra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--grner-str-r9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hausmittel-gegen-mcken-9lc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hypoproteinmie-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ortthopdie-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--saures-aufstoen-2ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schssler-salze-12-42b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuererklrumng-9kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--trkischer-drachenkopf-8hc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xylophone.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abhappybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aconitum-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allordinaries.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anisechinese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianwebsitesurvey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birdnetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borreliosede.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cateringsupply.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakarswagg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-hautkrebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-steuererklaerungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ergotherapieg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exercising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibromylgie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haartransplanntation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallux-varus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hautverduennung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawthornsuites.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heilpflanzenh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kardyologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modtivation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygamingsetup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physiotherappie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podologieg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyneuropathied.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portoliobox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sblasenentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smukoviszidose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stott.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennsarm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thuberkulose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trichophyton-mentagrophytes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufk.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underconstructionband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vats.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windpocken-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bcherpapier-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bindehautetzndung-e3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--de-heilkruter-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gluse-hra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--grner-str-r9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hausmittel-gegen-mcken-9lc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hypoproteinmie-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ortthopdie-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--saures-aufstoen-2ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schssler-salze-12-42b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuererklrumng-9kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--trkischer-drachenkopf-8hc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xylophone.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc59a4e090000040300473045022100b1b2c0332dd415a8a1351f57c748cf54905e215c329963d3dbd6619854f8bce3022063eea2650b40724c75c8c1d46d5f6be8184f7bfc505122fad7cc60d44325ce0a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bc59a4e620000040300463044022039a24c60c7cda5de04c98fa60a7abe635f617680deca535b9303f21fea66dba302202d1f3bca6208ebe389601d902364952b8e902ede0080b440aeae6231b45c203f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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