kockrezepte.de

Issued by R3

About this certificate

This digital certificate with serial number 03:47:12:8f:60:0d:15:d0:2d:c7:d0:43:33:9b:4d:fe:35:d5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kockrezepte.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:12:8f:60:0d:15:d0:2d:c7:d0:43:33:9b:4d:fe:35:d5
Serial Number (int): 285521576397190308733049369895205093651925
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:cd:be:d0:31:5b:b8:b1:02:7f:34:f4:7f:d0:ac:7a:6a:53:22:9e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:73:88:f8:59:88:c3:0d:a3:65:29:0c:e0:9c:f6:f2:2a:64:7d:a2
Fingerprint (sha256): 7c:af:d1:ae:08:07:ad:44:18:4b:f1:c2:12:26:a4:88:fd:a4:c9:18:1b:24:79:f0:32:e6:6a:14:c1:d0:47:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kockrezepte.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kockrezepte.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accesssutterhealth.org
*.acessarlink.online
*.asociaciondemilitaresnuevavision.com
*.bellssouth.net
*.boilingspringspropertymanagement.com
*.cannabisanbau.de
*.cassyphotographie.com
*.centerpieces.de
*.chibistudiovancouver.com
*.dcu.de
*.donsociety.com
*.educating.de
*.embryodonation.net
*.etickets.co.za
*.gebrauchtwagen-privat.de
*.giveawaypicker.net
*.house-prices.de
*.ilgimezat.com
*.iservicemac.com
*.khalijee.com
*.kleinkaliberpistolen.de
*.kockrezepte.de
*.kostenlosespielespielen.de
*.lamadamemr.com
*.legeorgebistro.com
*.maps4.me
*.meckel-divertikel.de
*.moemoerabu.net
*.morgansfund.org
*.myfedlian.org
*.mywifiect.net
*.nautilislive.org
*.noptebooksbilliger.de
*.orixi.me
*.pinapen.com
*.pixelatedpuddings.com
*.playoffs.be
*.pommerschvb.de
*.quartafalchi.net
*.resellprodukdigital.com
*.reyapk.com
*.smiledentistanbul.com
*.spain.co.za
*.spiritualcandleshop.com
*.thoracic-outlet-syndrom.de
*.undeportivopor.com
*.whitefly.org
*.xn--hngerfhrerschein-vnb15b.de
*.xn--methansure-w5a.de
*.zigwedding.com
accesssutterhealth.org
acessarlink.online
asociaciondemilitaresnuevavision.com
bellssouth.net
boilingspringspropertymanagement.com
cannabisanbau.de
cassyphotographie.com
centerpieces.de
chibistudiovancouver.com
dcu.de
donsociety.com
educating.de
embryodonation.net
etickets.co.za
gebrauchtwagen-privat.de
giveawaypicker.net
house-prices.de
ilgimezat.com
iservicemac.com
khalijee.com
kleinkaliberpistolen.de
kockrezepte.de
kostenlosespielespielen.de
lamadamemr.com
legeorgebistro.com
maps4.me
meckel-divertikel.de
moemoerabu.net
morgansfund.org
myfedlian.org
mywifiect.net
nautilislive.org
noptebooksbilliger.de
orixi.me
pinapen.com
pixelatedpuddings.com
playoffs.be
pommerschvb.de
quartafalchi.net
resellprodukdigital.com
reyapk.com
smiledentistanbul.com
spain.co.za
spiritualcandleshop.com
thoracic-outlet-syndrom.de
undeportivopor.com
whitefly.org
xn--hngerfhrerschein-vnb15b.de
xn--methansure-w5a.de
zigwedding.com

Other certificates including the domain name kockrezepte.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kockrezepte.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285521576397190308733049369895205093651925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 19:08:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 19:08:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kockrezepte.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783985794355125514728993299461579288004636554822682128255690014693708442091273871665158001302897556231257136491690644379740556336978709966483167689704026814751276263598472156634078183608307777721733461800977097536038622159632388514602137503672536347513378625252827503914725661804158066590546388638621497428439314495558776871234126971181682720265867822066571707929089903455311511477684837493941908994603507878972187986031392728821108013769458061885253867597553167245202631252468633666007209041050091627720071932621700028688453462311926176047219297618250286575225232993825878752190852487416031095601580394403964899224823321599586172691011038310504250505739654425533839428357843067583133159398612206839428265170772112818542959321956793919776542342760631841171566479602298774993554001918050340832502735252370112151051288182241497288127137120047900111499912268781332079994374906287932732017736067944970646984776190304696169142251397307528571580625021975776102100330730514957981285710214903157451692976687057997975529499132829485598280393589785966679849546837472117771627969522818240492323157950600181346412470648105694419021856325662120863898078040476516115820429883767512340768910972018121597099625237284940074299877794828628491746925217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6cdbed0315bb8b1027f34f47fd0ac7a6a53229e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2040 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesssutterhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acessarlink.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asociaciondemilitaresnuevavision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellssouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boilingspringspropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabisanbau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cassyphotographie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerpieces.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chibistudiovancouver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educating.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embryodonation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etickets.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gebrauchtwagen-privat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giveawaypicker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.house-prices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilgimezat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iservicemac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khalijee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleinkaliberpistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kockrezepte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostenlosespielespielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamadamemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legeorgebistro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maps4.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meckel-divertikel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moemoerabu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgansfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfedlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywifiect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nautilislive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noptebooksbilliger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orixi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinapen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelatedpuddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playoffs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pommerschvb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quartafalchi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resellprodukdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reyapk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smiledentistanbul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spain.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritualcandleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thoracic-outlet-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.undeportivopor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitefly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hngerfhrerschein-vnb15b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--methansure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwedding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accesssutterhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acessarlink.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asociaciondemilitaresnuevavision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellssouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boilingspringspropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisanbau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassyphotographie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerpieces.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chibistudiovancouver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donsociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educating.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embryodonation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etickets.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebrauchtwagen-privat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveawaypicker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'house-prices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilgimezat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iservicemac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khalijee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleinkaliberpistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kockrezepte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostenlosespielespielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamadamemr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legeorgebistro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps4.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meckel-divertikel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moemoerabu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgansfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfedlian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywifiect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nautilislive.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noptebooksbilliger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orixi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinapen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelatedpuddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playoffs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pommerschvb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quartafalchi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resellprodukdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reyapk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiledentistanbul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spain.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualcandleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoracic-outlet-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undeportivopor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitefly.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hngerfhrerschein-vnb15b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--methansure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zigwedding.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ea06d52d3000004030046304402200d4c5e5e8f51518865071ae18a6f1316717f819163103e28c7c70661a3964a70022012b7ec983d7bb2ee58876c91410244dd3087f3bd9914af2982f8bdf1ac68f81b00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ea06d5a240000040300473045022100c436479511fbb607cb5d3676953a6c26a2c3742e0994d3aa0f5d4378c7c8a9ca022025990b08b43c17116469b1d987aac2619e5bfc52c0bed8b8a1c8284cf44c7746
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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