twa.com.pl

Issued by R3

About this certificate

This digital certificate with serial number 03:94:ea:1a:ef:e0:be:18:07:00:e7:0b:1a:51:84:db:57:cf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=twa.com.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:ea:1a:ef:e0:be:18:07:00:e7:0b:1a:51:84:db:57:cf
Serial Number (int): 312009827315613459627332356120487090935759
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:aa:77:df:3c:0f:f0:15:66:89:00:8b:68:39:53:d7:c9:7a:d7:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:37:f4:47:3a:b9:4c:06:6b:17:f9:ab:b0:0f:fb:2a:d8:38:36:76
Fingerprint (sha256): 74:ee:cb:6d:45:3c:1f:c1:41:d1:7a:02:1d:64:9a:e3:ba:7a:72:78:f2:97:06:81:61:5f:d4:33:a5:a5:8e:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate twa.com.pl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twa.com.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aspley.au
*.azg.de
*.blaseninfektion.de
*.carolynamir.com
*.dachbedarf.de
*.dailytrader.com.au
*.eai.de
*.eastmarketnoodlehouse.com
*.espatyanhealth.co
*.essentialpim.de
*.eztc.it
*.googloe.de
*.halenbad.de
*.honeybirdette-rus.com
*.iffod.com.br
*.livestrp.de
*.modelhob.com
*.nih4d.me
*.novamovies.net
*.nrawning.co.uk
*.nursingschool.de
*.nursinguniform.de
*.oberschenkelzerrung.de
*.painterilliteracy.top
*.payobeer.com
*.peacedonkeys.com
*.petershepherdtyres.co.uk
*.pumps-kaufen.de
*.renmark.com.au
*.renterversicherung.de
*.ringeltauben.de
*.robertphiliptesttlddomainpurchase2.bio
*.sexmatxa.net
*.skiffvintageknittingpatterns.co.uk
*.smart-receiver.de
*.snowboardinghalloffame.org
*.stuhlbezuege.de
*.sundr8vecars.com
*.sunnyleonfuckxnxx.com
*.swissfotoballdata.com
*.tandrandi.com
*.techubly.com
*.topicmarkets.com
*.twa.com.pl
*.wakebord.de
*.xn--druckerztubehr-7pb.de
*.xn--kinderskianzge-rsb.de
*.xn--rinderhrner-xfb.de
*.xport1.de
*.xxnx.nl
aspley.au
azg.de
blaseninfektion.de
carolynamir.com
dachbedarf.de
dailytrader.com.au
eai.de
eastmarketnoodlehouse.com
espatyanhealth.co
essentialpim.de
eztc.it
googloe.de
halenbad.de
honeybirdette-rus.com
iffod.com.br
livestrp.de
modelhob.com
nih4d.me
novamovies.net
nrawning.co.uk
nursingschool.de
nursinguniform.de
oberschenkelzerrung.de
painterilliteracy.top
payobeer.com
peacedonkeys.com
petershepherdtyres.co.uk
pumps-kaufen.de
renmark.com.au
renterversicherung.de
ringeltauben.de
robertphiliptesttlddomainpurchase2.bio
sexmatxa.net
skiffvintageknittingpatterns.co.uk
smart-receiver.de
snowboardinghalloffame.org
stuhlbezuege.de
sundr8vecars.com
sunnyleonfuckxnxx.com
swissfotoballdata.com
tandrandi.com
techubly.com
topicmarkets.com
twa.com.pl
wakebord.de
xn--druckerztubehr-7pb.de
xn--kinderskianzge-rsb.de
xn--rinderhrner-xfb.de
xport1.de
xxnx.nl

Other certificates including the domain name twa.com.pl

(limited to 100 certificates)
twa.com.pl
*.alfa.szczecin.pl
fgxdpz.icu
genema.icu
twa.com.pl
twa.com.pl
twa.com.pl
freeadult.cyou
twa.com.pl
genema.icu

Certificate

The complete raw certificate details for twa.com.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312009827315613459627332356120487090935759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 08:52:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 08:52:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twa.com.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775370731555208371297460143922044305578859535913619662232379692490402251393413575114177018397571003205457203241596082678494133682710794834569137491414124045945374086983807815164141290567148665826485599322038441809444414915584450420007592473666438084827016640681882971315228822199769123688446637139342934711828073558575711893022698782246484156524712735809206777929637040092568021770682081299443961157022305309534751435068024481000469339934262071137628968062670197141881239557054735065850377683267275236569726983105877046879788615723257455090767262502801532000362810095766801017640861353106054410117000778670495040480494823304964692717465963327733953255528487889002828929192870048771225535018421520960777396593221436255229880983428646712026015954167820136103258314378885658196894501936625986796235199170401584483978167164869225306335212580501797379611963236123538903518372017584482338171993712858451474570296322603613423273955504563127863717444971675507350384454510662710516608132398596928884162035866025553020131885384742424125813798843570052536000661845667906426227116870685801699184358879957694468171536761858059789537563233096241793141212825730752891231483381989561714165348116761072840255390723795623981069930764642354628267296389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0aa77df3c0ff0156689008b683953d7c97ad721
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspley.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaseninfektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carolynamir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espatyanhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googloe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halenbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeybirdette-rus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iffod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livestrp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modelhob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nih4d.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oberschenkelzerrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.painterilliteracy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payobeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peacedonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ringeltauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smart-receiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuhlbezuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sundr8vecars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunnyleonfuckxnxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swissfotoballdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tandrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topicmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wakebord.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kinderskianzge-rsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rinderhrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxnx.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspley.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaseninfektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolynamir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espatyanhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googloe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halenbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeybirdette-rus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iffod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestrp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelhob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nih4d.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oberschenkelzerrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painterilliteracy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payobeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacedonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringeltauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-receiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuhlbezuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sundr8vecars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnyleonfuckxnxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissfotoballdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandrandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topicmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakebord.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kinderskianzge-rsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rinderhrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxnx.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3e8b3acf0000040300473045022100dd475f0d523d6a71f97f65d7c7b5d3d6295d16e336e991e74565ef4e81459aa002204fcc20724fceeb6925b0510b4c63184d83aa09024f2f9ca0ec437cae17337dca007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c3e8b3b0d0000040300483046022100876b8a21f4699e2d01fb5de386585d4fcaa32b6ff7f7376678a05159b9136736022100cc6a29d935871fcd6ffcf276005fc752295ea9a122a2a0b4ccd3727b85a406bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a45352769dd115441172e25d029e60810aaa62da85efce4d101cab7babd1bedf9333124556f80e7f0b196e89d581375a3322564e5f60f096d26d05ea0cf1a54fe5dc43f089f5bfd9bae93d3ef02cd1fd5af93e1aeb499b274bda04cc8a0a5a122f572c28c052e222933ee6e36463939643884ef43803ad3e3c9f9966141a490b0f590b6df52ed1064a19419236200300c999430110d63dbf576aaf32f06e0ad49fc21a2fe8e0d93daf6340f6fc7e33ac1c741b4d69ea403773ad617734382d59e7c05ab3ff990d4d75881ae2ee06cf380d7e3ef35aa0edc709fd59397ac280ebf5b2b7e8e21b8cba3abffced6c9b5378e4998b0437a0d06787ba116e2c5b249d