lib1.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:11:c6:4a:d5:67:af:4c:72:51:25:e7:86:29:1f:a2:0c:77 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lib1.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:c6:4a:d5:67:af:4c:72:51:25:e7:86:29:1f:a2:0c:77
Serial Number (int): 354497519666197883997155181179198477831287
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0c:97:31:d0:05:5c:77:cc:30:13:b6:43:c4:c3:72:40:4d:28:6d:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 14:36:90:22:5e:4f:fe:ad:49:43:9a:b2:c1:59:01:e2:5e:dc:d7:10
Fingerprint (sha256): 7f:5a:01:55:22:23:8d:28:ed:3a:36:2c:dc:9a:1d:27:a8:bb:0b:be:6b:5c:0d:f4:f4:33:82:ae:9f:83:5c:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lib1.eu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lib1.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9junkit.com
*.aktionaer.de
*.ausbildng.de
*.belairestamp.com
*.conjugue.com
*.dealsformenow.com
*.doctor20.com
*.eilpflanzen.de
*.federalgovjobs.us
*.finanuchek.de
*.fortnigeburger.net
*.frca.uk
*.getprotected.com.au
*.glandula-submandibularis.de
*.grippaler-infekt-hausmittel.de
*.infiniauto.eu
*.intantappliances.com
*.ketomeal.com.au
*.leukaeie.de
*.lib1.eu
*.manhun.com
*.msbnasty.com
*.mtfwc.com
*.myghcbenefits.com
*.myjefferson.org
*.naughtyindia.com
*.paalam.com
*.proostata.de
*.rocknrollmarketplace.com.au
*.rolefilm.com
*.scetch.com
*.schuessler-salze-wechseljahre.de
*.scothporter.com
*.sendmedigpigs.com
*.sierrapacificmotgage.com
*.sklepkushi.pl
*.slimlig.com
*.stateofthegreatgame.com
*.stoynev.us
*.vollweibdiaet.de
*.was-hilft-bei-erkaeltung.de
*.wwwfamilyheritagelife.com
*.xn--billigflgea-0hb.de
*.xn--blasenenntzndung-tzb.de
*.xn--brustveegrerung-zib40b.de
*.xn--de-lungenentzndung-y6b.de
*.xn--dkrtze-dua.de
*.xn--mittelohrentzndunga-ibc.de
*.xn--schnelle-mittel-gegen-erkltung-ktc.de
*.xn--tannenbume-w5a.de
9junkit.com
aktionaer.de
ausbildng.de
belairestamp.com
conjugue.com
dealsformenow.com
doctor20.com
eilpflanzen.de
federalgovjobs.us
finanuchek.de
fortnigeburger.net
frca.uk
getprotected.com.au
glandula-submandibularis.de
grippaler-infekt-hausmittel.de
infiniauto.eu
intantappliances.com
ketomeal.com.au
leukaeie.de
lib1.eu
manhun.com
msbnasty.com
mtfwc.com
myghcbenefits.com
myjefferson.org
naughtyindia.com
paalam.com
proostata.de
rocknrollmarketplace.com.au
rolefilm.com
scetch.com
schuessler-salze-wechseljahre.de
scothporter.com
sendmedigpigs.com
sierrapacificmotgage.com
sklepkushi.pl
slimlig.com
stateofthegreatgame.com
stoynev.us
vollweibdiaet.de
was-hilft-bei-erkaeltung.de
wwwfamilyheritagelife.com
xn--billigflgea-0hb.de
xn--blasenenntzndung-tzb.de
xn--brustveegrerung-zib40b.de
xn--de-lungenentzndung-y6b.de
xn--dkrtze-dua.de
xn--mittelohrentzndunga-ibc.de
xn--schnelle-mittel-gegen-erkltung-ktc.de
xn--tannenbume-w5a.de

Other certificates including the domain name lib1.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for lib1.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354497519666197883997155181179198477831287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 08:53:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 08:53:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lib1.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 872348987327959620148030930597424429754349216667283904333819572692468916233602983009813740304734186508834029808212497270694516615941365390845952259261454387644091989537325823291264927937218167132758982603092246778364932241219795258857179782502691601066174048673804555479092458600587423668829427392568316732510244076697932510414803252286522388837048690802556525517306028784377701910777660162794824426047660175907667347573050332634196524854031412431956178882297413048991933935757232714127137800897315207257663934446737975288323949827991098696324568218863226670542982753920779887354723183712687522832517087692661593538556617365898391157686661421633051355420604823754409150010671241564277624786333684431996944339152914342059024687544324660108312394362780256617954495316021833614173837724110494640602397136056506585987083693810564743270040813362500416498224141858307488639139518001432635338918757912690337632478548205024236125371809907240610570460999402239261304856564237176158542740661059857722140060028227861823356002975170098525439061268229011828265246705774098231105735229453430256156559999874316461470511650551459875964785269835375509948181036145271325678207566690812328997720457487688602982585698502603323238486897340841002426064919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c9731d0055c77cc3013b643c4c372404d286daf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2068 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9junkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktionaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ausbildng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belairestamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conjugue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealsformenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctor20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federalgovjobs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finanuchek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortnigeburger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frca.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getprotected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glandula-submandibularis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grippaler-infekt-hausmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infiniauto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intantappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketomeal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leukaeie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lib1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msbnasty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtfwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myghcbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjefferson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naughtyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocknrollmarketplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rolefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scetch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-salze-wechseljahre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scothporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sendmedigpigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierrapacificmotgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sklepkushi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slimlig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stateofthegreatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoynev.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vollweibdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.was-hilft-bei-erkaeltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfamilyheritagelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billigflgea-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blasenenntzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustveegrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--de-lungenentzndung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dkrtze-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mittelohrentzndunga-ibc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnelle-mittel-gegen-erkltung-ktc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tannenbume-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9junkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktionaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ausbildng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belairestamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conjugue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealsformenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eilpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federalgovjobs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finanuchek.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortnigeburger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frca.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getprotected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glandula-submandibularis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grippaler-infekt-hausmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infiniauto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intantappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketomeal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leukaeie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msbnasty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtfwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myghcbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjefferson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naughtyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocknrollmarketplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scetch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-salze-wechseljahre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scothporter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendmedigpigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrapacificmotgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sklepkushi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimlig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateofthegreatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoynev.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vollweibdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'was-hilft-bei-erkaeltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfamilyheritagelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billigflgea-0hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blasenenntzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustveegrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--de-lungenentzndung-y6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dkrtze-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mittelohrentzndunga-ibc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnelle-mittel-gegen-erkltung-ktc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tannenbume-w5a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa28ef6e10000040300473045022100e3824660014b3e8b8c372f54afdd563b3cc0f225f75424a17e96bfbd40d84f760220290d54d89fcaa5ab637d8871da6e49b6c8b0fb224d6134ecb866438e4270ceb5007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa28ef8c5000004030046304402207a246969afb00e07f95752cdbab941690a530a6ebe28526e59b93b2253253efd02207305528028e829bc56a628f565aa9db6818ef2a2143d93e11649eda355b25ef4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae7a8ce2619fe24bd45e192cd671a2aa37ae3d26f9950b518b16f73a17328be1856640fae75121b103b88ed15455dc5ff3cdb3650255442d0354df4fb0e56ee443ce42f317acdc763e234cf2f36b88c934d1e205e35c685731a28638ff2fa10fdb486084039a01c52c92c378ca4c44b104c783864495cfefcc94426211ec09612ba3a0699929265a367722989b5b923497d66956866d556760071b5e4bf3054c11fe738b828f208255f732fa2133d66ca4702ab71ca616cc9dff1b1341f563491796e57a59e4703853e6cbbd219968572ca94ad475ff028176c1724ac3a5a66495f367d9b3ea70e50e1227f1597e3dca5d342313c7353cb0854d29ceb9a25fab