bia2movies1.com

Issued by R3

About this certificate

This digital certificate with serial number 03:be:24:da:04:61:74:b4:a9:e5:91:d2:0c:85:18:2e:b1:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bia2movies1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:24:da:04:61:74:b4:a9:e5:91:d2:0c:85:18:2e:b1:09
Serial Number (int): 326039491727673354410352307198086012121353
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:fb:70:b6:c2:25:f7:9d:a8:6b:73:0d:fb:a7:03:46:b9:7b:05:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:67:f2:46:fa:22:b2:ad:46:19:3f:7e:85:f5:c4:b8:c6:3e:ed:70
Fingerprint (sha256): 85:e7:90:6a:5e:e1:1a:2a:75:e7:8b:54:3b:54:1b:90:3c:21:21:18:61:8a:f9:c7:7b:99:bf:4b:20:d6:6d:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bia2movies1.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bia2movies1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a7n2.com
*.airline-driekt.de
*.ammazone.de
*.anomalyobservatory.net
*.anomalyobservatory.space
*.availabilityservices.com.au
*.bia2movies1.com
*.blutungen-ausserhalb-der-regel.de
*.bugoutexpress.com
*.citihive.net
*.diseasegps.org
*.duncanpublicschools.org
*.electriformance.com
*.firesticktricktricks.com
*.fky.com.au
*.fsctopeka.com
*.haemroiden.de
*.hand-und-fusskrankheit.de
*.hoodtuna.top
*.horseplaynj.com
*.hyr.com.au
*.mcawee.com
*.mirrow.co
*.mund-fuss-hand-krankheit.de
*.mutualseg.cl
*.mymayo.org
*.nlp-bigdatalab.org
*.olive-garden.co.uk
*.originagain.com
*.pakistaniporn.net
*.phusspilz.de
*.prefrag.com
*.proplabs.com
*.roof-revive.co.uk
*.speedwayatoz.co.uk
*.stocktoncycling.co.uk
*.trader.barcelona
*.uplod.it
*.vhk.com.au
*.worlddirectagent.com
*.wusspilz.de
*.wwwvendezvotrevoiture.fr
*.wwwviverosantabarbara.es
*.xn--brustvegrsserung-uwb.de
*.xn--brustvergrrsserung-n3b.de
*.xn--brustvergrsserumg-8zb.de
*.xn--brustvergrsssserung-z6b.de
*.xn--bruszvergrsserung-8zb.de
*.xn--prustvergrsserung-8zb.de
*.zetanex.com
a7n2.com
airline-driekt.de
ammazone.de
anomalyobservatory.net
anomalyobservatory.space
availabilityservices.com.au
bia2movies1.com
blutungen-ausserhalb-der-regel.de
bugoutexpress.com
citihive.net
diseasegps.org
duncanpublicschools.org
electriformance.com
firesticktricktricks.com
fky.com.au
fsctopeka.com
haemroiden.de
hand-und-fusskrankheit.de
hoodtuna.top
horseplaynj.com
hyr.com.au
mcawee.com
mirrow.co
mund-fuss-hand-krankheit.de
mutualseg.cl
mymayo.org
nlp-bigdatalab.org
olive-garden.co.uk
originagain.com
pakistaniporn.net
phusspilz.de
prefrag.com
proplabs.com
roof-revive.co.uk
speedwayatoz.co.uk
stocktoncycling.co.uk
trader.barcelona
uplod.it
vhk.com.au
worlddirectagent.com
wusspilz.de
wwwvendezvotrevoiture.fr
wwwviverosantabarbara.es
xn--brustvegrsserung-uwb.de
xn--brustvergrrsserung-n3b.de
xn--brustvergrsserumg-8zb.de
xn--brustvergrsssserung-z6b.de
xn--bruszvergrsserung-8zb.de
xn--prustvergrsserung-8zb.de
zetanex.com

Other certificates including the domain name bia2movies1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bia2movies1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1xM20ZbOya/oyUNj5CHo
YCBO9ErOPJixlbZ7gvdD4C+k2gCT7EPK+Zi6bFpcAxpBGOIgmT9m/0hx5k26IS8/
nfuTLDwiLegeontkYzT87kXLev2qOE45/Wbyjxm1WAQLC5tGvxIJ5RDX8F9Xjb+7
EnD0g5OK2e4ayTn4FwOALFhjTdnpGRL+ohsVIEBMbUovIidgq7+gRS/4nanvARoM
RqB5VnqEbarDssUe37DomwgLdp/Le5xRBtlC0iwIFnYRhNHu/8x0sMOUQX/Cv4gP
ToPBQAPa5Z48QwKHb9a6jQUQr0xmIAwQwAae2YeQMTP2pYvYuhYI7yHn5MsE7TX3
z/gwy1gSqBmTTPnVFCD3j4fl2W3NztTU8Dm3G4zy0Mx2geNC9ePFprxr+UAtIo3z
1gdJ6bcUBnxtN2BYQNe3pCgJW2wgzv934vrbqkVjGzktUbEfZ9f6re/noJNSoNK5
YGbi4deeNIu/VMo94YXLZ1l1e23AZ+bAbjGdjWlhj40n7DJ6Xv/inhCFwqeLAVGq
SXIjVrgkAxtqswLhuqEoziREclw+WD8lM6u5txJ+17hMOiByBc6W4TbM88KwPHRu
63/ghLea5IzykdbbI3+jtWD+vs70NgCriwqdG1BQlB090sxwyOe8JhD36UU7fQHx
D/qzNeKt83KmALHq8DZtYqkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326039491727673354410352307198086012121353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 06:56:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 06:56:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bia2movies1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877429673195513913265349858412352421362569874886186742712985434446613290580832893860803906844423058958227013984640079967620021084733744515369633002170623926650856712669476739568063449103281366901204058839350593820293349114295742315764694648873052877310940249630943205700849908657063427450035370064982526353480265840132212917293658509015420654651979643310091737501137169449147920758034630472714195879141260563537212002682218889067061368551140648576939747378519223490955139287574383719131538771662760658272629584740389942650460871603556890095001637387710051697688835036005727520873352356886357464951040806856302287217664716608450461536316822217326023749933708885326926628222881034736582355585186747119257109929684091646104317458940929125679283154976239426692926015611784193083451857119519772739195478247349618089231022796374481031494855367756520631926504724960749249153229643694658569383422597828400563405093045749286170400488677525514470246931516132626195494156357307145006599309048898277898495098188241146797819781191282001536384462374955819593067124362614898229224368000556388618648287505494250241370526588761101361649605560801972679260929144710653567062175136953618090591290327355829152254984854237299361039561731971615348342219433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66fb70b6c225f79da86b730dfba70346b97b058a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a7n2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airline-driekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ammazone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anomalyobservatory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anomalyobservatory.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.availabilityservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bia2movies1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blutungen-ausserhalb-der-regel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugoutexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citihive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diseasegps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duncanpublicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electriformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firesticktricktricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fky.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsctopeka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemroiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hand-und-fusskrankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoodtuna.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horseplaynj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcawee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirrow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mund-fuss-hand-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutualseg.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymayo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nlp-bigdatalab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olive-garden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.originagain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistaniporn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prefrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proplabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roof-revive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedwayatoz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocktoncycling.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trader.barcelona'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uplod.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vhk.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worlddirectagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwvendezvotrevoiture.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwviverosantabarbara.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvegrsserung-uwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvergrrsserung-n3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvergrsserumg-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvergrsssserung-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bruszvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--prustvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zetanex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a7n2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airline-driekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammazone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anomalyobservatory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anomalyobservatory.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'availabilityservices.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bia2movies1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blutungen-ausserhalb-der-regel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugoutexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citihive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diseasegps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncanpublicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electriformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firesticktricktricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fky.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsctopeka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemroiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hand-und-fusskrankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodtuna.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horseplaynj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcawee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirrow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mund-fuss-hand-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutualseg.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymayo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlp-bigdatalab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olive-garden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'originagain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistaniporn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proplabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roof-revive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedwayatoz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocktoncycling.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trader.barcelona'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uplod.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhk.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worlddirectagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwvendezvotrevoiture.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwviverosantabarbara.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvegrsserung-uwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvergrrsserung-n3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvergrsserumg-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvergrsssserung-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bruszvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--prustvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zetanex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a97d74f2900000403004630440220726bf3521500c88c0c98733c143702f81ecfc60cbdbabe43152f314b3b505e180220688c20512e17107cfd3168ccc54feb840d439fc2e0d05e3451f7d343d3482c20007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a97d74fc000000403004630440220224c67ab1c7b13264486c41068fb0e87cbfb09a647d9a29fb00653d4b5d0b65602200d109101d0fdb7b49b5821d0aef6ef501da1585b388df76989259596793806d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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