lib1.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:9a:c0:c5:84:83:eb:1f:ad:bf:f1:d4:a1:ea:01:dc:c6:53 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lib1.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:c0:c5:84:83:eb:1f:ad:bf:f1:d4:a1:ea:01:dc:c6:53
Serial Number (int): 401108865578267069414403342733831577585235
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d1:41:a3:3f:f1:f6:bf:98:df:82:cf:08:be:7f:c2:8d:73:28:50:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:c0:b7:fe:5a:19:da:40:ae:5d:81:ca:ec:82:d2:5f:37:08:49:02
Fingerprint (sha256): 75:d3:5c:8d:37:89:dd:00:ae:98:1a:cd:e7:9c:1d:64:23:b0:a6:1a:1a:cc:b6:e4:71:4c:41:ca:6c:99:66:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lib1.eu

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lib1.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9junkit.com
*.aktionaer.de
*.amazonrthbrbn.top
*.caniusemycommbankcard.in
*.corrierediromagna.it
*.doctor20.com
*.ediba.it
*.eilpflanzen.de
*.erhydraulictools.com
*.escortbakeca.it
*.federalgovjobs.us
*.finanuchek.de
*.fortnigeburger.net
*.frca.uk
*.getprotected.com.au
*.glandula-submandibularis.de
*.homesauna.com.au
*.honolulu.com.au
*.infiniauto.eu
*.intantappliances.com
*.leukaeie.de
*.lib1.eu
*.manhun.com
*.mediatkeout.com
*.mtfwc.com
*.myghcbenefits.com
*.myjefferson.org
*.naughtyindia.com
*.pasqualettoauto.it
*.pbogjzt.cn
*.proostata.de
*.rocknrollmarketplace.com.au
*.rolefilm.com
*.schuessler-salze-wechseljahre.de
*.scothporter.com
*.sendmedigpigs.com
*.sierrapacificmotgage.com
*.sklepkushi.pl
*.slimlig.com
*.stateofthegreatgame.com
*.vollweibdiaet.de
*.was-hilft-bei-erkaeltung.de
*.wwwfamilyheritagelife.com
*.xn--billigflgea-0hb.de
*.xn--brustveegrerung-zib40b.de
*.xn--de-lungenentzndung-y6b.de
*.xn--dkrtze-dua.de
*.xn--schnelle-mittel-gegen-erkltung-ktc.de
*.xn--tannenbume-w5a.de
9junkit.com
aktionaer.de
amazonrthbrbn.top
caniusemycommbankcard.in
corrierediromagna.it
doctor20.com
ediba.it
eilpflanzen.de
erhydraulictools.com
escortbakeca.it
federalgovjobs.us
finanuchek.de
fortnigeburger.net
frca.uk
getprotected.com.au
glandula-submandibularis.de
homesauna.com.au
honolulu.com.au
infiniauto.eu
intantappliances.com
leukaeie.de
lib1.eu
manhun.com
mediatkeout.com
mtfwc.com
myghcbenefits.com
myjefferson.org
naughtyindia.com
pasqualettoauto.it
pbogjzt.cn
proostata.de
rocknrollmarketplace.com.au
rolefilm.com
schuessler-salze-wechseljahre.de
scothporter.com
sendmedigpigs.com
sierrapacificmotgage.com
sklepkushi.pl
slimlig.com
stateofthegreatgame.com
vollweibdiaet.de
was-hilft-bei-erkaeltung.de
wwwfamilyheritagelife.com
xn--billigflgea-0hb.de
xn--brustveegrerung-zib40b.de
xn--de-lungenentzndung-y6b.de
xn--dkrtze-dua.de
xn--schnelle-mittel-gegen-erkltung-ktc.de
xn--tannenbume-w5a.de

Other certificates including the domain name lib1.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for lib1.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401108865578267069414403342733831577585235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 07:56:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 07:56:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lib1.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800218559961991498554556362462501782271898005954766260268489408053948412258454695041558635349288726304546022641041911657902332411424753825487057620157555697060487230644516192109565956479547014145644556704723313259592988277279332130294778671294606525739129277192889906460935223300440165062605891626699041851890963484080918429587934250542899871129224504902481244749514465485029944122493821434262074957664922900714754945937385884190466108845404327647107122008339049906812677246490810883566659906511550240589783520124397898202839906870961487930678798801124897392062614367580993520754680162256897602543694060395972653145347443400549344017062157585649314575907992954978303028062421501795654501985572378612741329091782398108884059601406324943334577422391839301382519024046648483694166391966888247354352367358748294438525488838688887775412210377239916040903833130578169395483318894868483872507836232772784902532860899977200476823951530229861987124028667932526992432127022944253286057213689363630791863951004211669142755320323747394638087108304351100897200840492630820721651511073071492031929404080051333793916894318808161516820229430591951755792845791723475319808799028079417978273521195265502612663854881361104750110112083054549384461366481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d141a33ff1f6bf98df82cf08be7fc28d73285026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9junkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktionaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonrthbrbn.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caniusemycommbankcard.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corrierediromagna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctor20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ediba.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erhydraulictools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escortbakeca.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federalgovjobs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finanuchek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortnigeburger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frca.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getprotected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glandula-submandibularis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homesauna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honolulu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infiniauto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intantappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leukaeie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lib1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediatkeout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtfwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myghcbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjefferson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naughtyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasqualettoauto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pbogjzt.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocknrollmarketplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rolefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-salze-wechseljahre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scothporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sendmedigpigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierrapacificmotgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sklepkushi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slimlig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stateofthegreatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vollweibdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.was-hilft-bei-erkaeltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfamilyheritagelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billigflgea-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustveegrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--de-lungenentzndung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dkrtze-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnelle-mittel-gegen-erkltung-ktc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tannenbume-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9junkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktionaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonrthbrbn.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caniusemycommbankcard.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corrierediromagna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ediba.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erhydraulictools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escortbakeca.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federalgovjobs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finanuchek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortnigeburger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frca.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getprotected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glandula-submandibularis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesauna.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honolulu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infiniauto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intantappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leukaeie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediatkeout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtfwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myghcbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjefferson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naughtyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasqualettoauto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbogjzt.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocknrollmarketplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-salze-wechseljahre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scothporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendmedigpigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrapacificmotgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sklepkushi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimlig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateofthegreatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vollweibdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'was-hilft-bei-erkaeltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfamilyheritagelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billigflgea-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustveegrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--de-lungenentzndung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dkrtze-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnelle-mittel-gegen-erkltung-ktc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tannenbume-w5a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bd7590fae0000040300483046022100e181f451e7ee4ccb9e33a52218b8b7456370bdcc6a8e6c55a73a712f4942a9c9022100bf554376b2b61c428fe736a7c0e54fe92588e8b6c41f83ace86fe99ac3f13ea4007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd7590fca000004030046304402205ac07c8a696bb7ecc98e5d7753c17a8dc0985359e365479efba9a1332a58480e02207be7d1d32532a1e7143c3ae70e52b652979521d5dba020433d836eeccb8c5e83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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