n-zv.de

Issued by R3

About this certificate

This digital certificate with serial number 04:84:80:60:91:7a:97:8b:88:db:76:94:51:97:94:8c:53:5c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=n-zv.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:80:60:91:7a:97:8b:88:db:76:94:51:97:94:8c:53:5c
Serial Number (int): 393537058755225881618539705786602709865308
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cb:18:e4:b8:26:eb:22:2c:ff:0b:0b:88:56:ab:72:be:19:17:8a:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 32:31:bc:99:bf:f3:13:e2:95:d3:e7:5e:21:22:26:e4:ac:d5:4b:04
Fingerprint (sha256): 77:ad:56:2b:ef:01:68:31:82:7e:b2:df:85:36:28:be:85:1f:ec:4e:59:35:12:9b:4c:5d:9f:d1:a3:fb:39:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate n-zv.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for n-zv.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1short.us
*.2faced22.com
*.80eight.com
*.allyfinacial.com
*.amaeicanexpress.com
*.amazoncashmachines.com
*.americasnas.com
*.anahnguera.com
*.apdmyflorida.com
*.austinwild.com
*.candycrushnow.com
*.carterrs.com
*.chicagbears.com
*.eriskhelpline.com
*.fcgranite.com
*.fiviz.com
*.flaschepost.de
*.friendshiphyundaijc.com
*.frigigaire.com
*.gcrossett.com
*.hubertrailer.net
*.imarketingdata.com
*.img4.us
*.inkipixi.com
*.kroggers.com
*.lisahandbags.com
*.longest.com.au
*.manualware.com
*.mastercum.com
*.masteringtheartofpaleocooking.com
*.mbmerit.com
*.my-tao-tao.de
*.n-zv.de
*.nmetflix.com
*.opton.net
*.payp-al.com
*.pennpilot.com
*.perscholars.org
*.rprimeau.com
*.rundfungbeitrag.de
*.sharafdj.com
*.sonicdownloads.net
*.steralite.com
*.tweekdeck.com
*.uspsmi.com
*.utubeporn.com
*.xhg40.com
*.yorkiesandfriendsrescue.com
*.yqahoo.de
*.yyping.com
1short.us
2faced22.com
80eight.com
allyfinacial.com
amaeicanexpress.com
amazoncashmachines.com
americasnas.com
anahnguera.com
apdmyflorida.com
austinwild.com
candycrushnow.com
carterrs.com
chicagbears.com
eriskhelpline.com
fcgranite.com
fiviz.com
flaschepost.de
friendshiphyundaijc.com
frigigaire.com
gcrossett.com
hubertrailer.net
imarketingdata.com
img4.us
inkipixi.com
kroggers.com
lisahandbags.com
longest.com.au
manualware.com
mastercum.com
masteringtheartofpaleocooking.com
mbmerit.com
my-tao-tao.de
n-zv.de
nmetflix.com
opton.net
payp-al.com
pennpilot.com
perscholars.org
rprimeau.com
rundfungbeitrag.de
sharafdj.com
sonicdownloads.net
steralite.com
tweekdeck.com
uspsmi.com
utubeporn.com
xhg40.com
yorkiesandfriendsrescue.com
yqahoo.de
yyping.com

Other certificates including the domain name n-zv.de

(limited to 100 certificates)
n-zv.de
calcoastcreditunion.org
n-zv.de
n-zv.de
premierpublishers.com
buntze.de
n-zv.de
n-zv.de
n-zv.de

Certificate

The complete raw certificate details for n-zv.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393537058755225881618539705786602709865308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 05:17:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 05:17:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'n-zv.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1005604572192973738327085923730187765985450708866644580660549752528637817891252588275492424012199399943896754221967627585150028509298954008623852263623541682942089676302147445269575927177574207455531845770276324783950695382154983545369620415966624609922536910801263121997956208257772519987693343866902441438385399168082028874433735854009173798180079860938884168510957793170798729098277559201324762218642568833405267223407544196773038820637730730497031755258155804256084963105024551897491465326186517192559973803929285573478247617225357274494512729605436317535193215507687216769045878674146525709412839498417999001453745925622002178113878928171649200228903576565328610775872935556476470287022531972368824289724783701450030599327927656711624773276971368229364560695430228022968874405251481519591011829847318442873487611740328014901640093338006288459995411531355920878423936021072006158764759727813608790702243352630473757077383166714901527386452985855535227361921549109994943885409485274920285943990273534546010048728826733539264213647036551796835354770029984830103406810554112528810378803152448353706426896605054045798861917309733234954986644104964560024732043983270899214925506582231123245193881338231625700835992038941909206410504943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb18e4b826eb222cff0b0b8856ab72be19178a12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1short.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2faced22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.80eight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allyfinacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amaeicanexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazoncashmachines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americasnas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anahnguera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apdmyflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candycrushnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carterrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicagbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eriskhelpline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcgranite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiviz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaschepost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendshiphyundaijc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frigigaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcrossett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hubertrailer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imarketingdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.img4.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkipixi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kroggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisahandbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manualware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mastercum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteringtheartofpaleocooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbmerit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my-tao-tao.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n-zv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmetflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payp-al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pennpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rprimeau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rundfungbeitrag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharafdj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonicdownloads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steralite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tweekdeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uspsmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utubeporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xhg40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yorkiesandfriendsrescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yqahoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yyping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1short.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2faced22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '80eight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allyfinacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaeicanexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazoncashmachines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americasnas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anahnguera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apdmyflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candycrushnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carterrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eriskhelpline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcgranite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiviz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaschepost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendshiphyundaijc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frigigaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcrossett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubertrailer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imarketingdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img4.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkipixi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kroggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisahandbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longest.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manualware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastercum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masteringtheartofpaleocooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbmerit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-tao-tao.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n-zv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmetflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payp-al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pennpilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perscholars.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rprimeau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rundfungbeitrag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharafdj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonicdownloads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steralite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tweekdeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspsmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utubeporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhg40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yorkiesandfriendsrescue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yqahoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yyping.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcc7a90e20000040300483046022100dfbe4607374be1c02bec85439457f245aed4e3e7254234696bf63c7895a4cd52022100a0e7ee0119fa0bdc23985b9d21a1f636531dc7b2f85a56b4d09c52d465d7bf6000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcc7a90e5000004030046304402204a42837f582a66e2d99732322ba19ac5e4ca48ad0e2d35b15f940487d86de5910220077b721c9e513f7f522ab5cafcae4772993dd06ecc9265d442f499751fa3208f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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