xn--ttenspender-thb.de

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:13:71:0f:c2:7c:8b:e1:65:08:e3:19:08:0f:07:9b:a1 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xn--ttenspender-thb.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:13:71:0f:c2:7c:8b:e1:65:08:e3:19:08:0f:07:9b:a1
Serial Number (int): 405642423750868529114295059593440946264993
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:b2:5e:9a:36:dc:f8:d5:87:02:c0:85:e0:ee:f9:43:f6:d2:29:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f5:82:e6:d9:de:8d:4d:d1:5a:7c:6d:f2:ab:a6:70:3d:39:86:6a:58
Fingerprint (sha256): 88:a6:55:6d:2e:c1:c1:aa:69:a2:94:4a:e8:5b:8e:e7:f8:71:e1:50:1b:e0:34:08:d0:cd:8c:d5:59:5b:0b:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xn--ttenspender-thb.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--ttenspender-thb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.afbfhaefits.info
*.alteisenpreise.de
*.amater.sk
*.amberleybedandbreakfast.co.uk
*.babykinderzimmer.de
*.bhuonline.co
*.cegla.eu
*.childgroup.org
*.damenfunkuhren.de
*.deepl.com.br
*.desoxythymidin.de
*.duval.es
*.easybok.it
*.echtholzkuechen.de
*.emotrasfusioni.org
*.finazaonline.it
*.ganestop.de
*.genmovies.org
*.glasbodenbeleuchtung.de
*.hasenfreigehege.de
*.hooodboyz.de
*.horrible.com.au
*.ijea.it
*.infantry.com.au
*.izlemac78.xyz
*.kgbank.de
*.kinderarmbanduhren.de
*.kleines-latinum.de
*.laserdruckertest.de
*.livecam.eu
*.metbabes.co
*.mymonstersworld.com
*.pilds.de
*.purposes.org
*.schlabberhosen.de
*.stahlschrottpreise.de
*.tatterlace.co.uk
*.tickermaster.co.uk
*.tischuntersetzer.de
*.transcripts.org
*.trukcs.de
*.xn--alkoholmessgert-elb.de
*.xn--eckbro-6ya.de
*.xn--gnstigster-strom-jzb.de
*.xn--interest-55a.de
*.xn--liebesgtter-xfb.de
*.xn--nchternblutzucker-22b.de
*.xn--papedit-bxa.de
*.xn--ttenspender-thb.de
*.zuidcafe.be
afbfhaefits.info
alteisenpreise.de
amater.sk
amberleybedandbreakfast.co.uk
babykinderzimmer.de
bhuonline.co
cegla.eu
childgroup.org
damenfunkuhren.de
deepl.com.br
desoxythymidin.de
duval.es
easybok.it
echtholzkuechen.de
emotrasfusioni.org
finazaonline.it
ganestop.de
genmovies.org
glasbodenbeleuchtung.de
hasenfreigehege.de
hooodboyz.de
horrible.com.au
ijea.it
infantry.com.au
izlemac78.xyz
kgbank.de
kinderarmbanduhren.de
kleines-latinum.de
laserdruckertest.de
livecam.eu
metbabes.co
mymonstersworld.com
pilds.de
purposes.org
schlabberhosen.de
stahlschrottpreise.de
tatterlace.co.uk
tickermaster.co.uk
tischuntersetzer.de
transcripts.org
trukcs.de
xn--alkoholmessgert-elb.de
xn--eckbro-6ya.de
xn--gnstigster-strom-jzb.de
xn--interest-55a.de
xn--liebesgtter-xfb.de
xn--nchternblutzucker-22b.de
xn--papedit-bxa.de
xn--ttenspender-thb.de
zuidcafe.be

Other certificates including the domain name xn--ttenspender-thb.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for xn--ttenspender-thb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405642423750868529114295059593440946264993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 11:25:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 11:25:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--ttenspender-thb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946876795615196781592742525335915215402571910776462401347054654260361108143538026225285002609650618130642275976340243437417264682720573048755734902971315203475016724923446257182675754914707305097781845120999443257424200006795659175068792705027067296477015691901943323265522653831972191180375721509552434426040707544638140372149750762000497101064557571483983601077338470177423800039420641893678365868865256186822818747370866452705817127905460372627750169531919768520882136238654595979173675610800680620631546841270048067006474926779881059550462862965777236055437968702978015986941266876438936882393429123442192526673923807504477859497076085610425444970112577113890674484462286368143217614699523740780905288995019456540693722321499441563189801539255081599653726215458843425700466559670214769809753708160814297488932726288133648553096528410614719563658157466803295309355665910648651869789117143960796514263273536125890214607487880831168639762300906774964329172537427163308447386767192041378107273408393443415021180491504512371604849133442112380348681459265270271005612732205319513302090635400462266217262646533709716780991611703434168088243434792745858011445566224704866682050760740059403119339166661186311314403306997140407263623991823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20b25e9a36dcf8d58702c085e0eef943f6d229e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afbfhaefits.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alteisenpreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amater.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amberleybedandbreakfast.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babykinderzimmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhuonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cegla.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damenfunkuhren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desoxythymidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duval.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easybok.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echtholzkuechen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emotrasfusioni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finazaonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganestop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genmovies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glasbodenbeleuchtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasenfreigehege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hooodboyz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horrible.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infantry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izlemac78.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinderarmbanduhren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleines-latinum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserdruckertest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livecam.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metbabes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymonstersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purposes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlabberhosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stahlschrottpreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tatterlace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tickermaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tischuntersetzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transcripts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trukcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--alkoholmessgert-elb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--eckbro-6ya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gnstigster-strom-jzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--interest-55a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--liebesgtter-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nchternblutzucker-22b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--papedit-bxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ttenspender-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuidcafe.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbfhaefits.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alteisenpreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amater.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amberleybedandbreakfast.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babykinderzimmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhuonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cegla.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damenfunkuhren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desoxythymidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duval.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easybok.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echtholzkuechen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emotrasfusioni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finazaonline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganestop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genmovies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glasbodenbeleuchtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasenfreigehege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooodboyz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horrible.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infantry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izlemac78.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinderarmbanduhren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleines-latinum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserdruckertest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livecam.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metbabes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymonstersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilds.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlabberhosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stahlschrottpreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatterlace.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickermaster.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tischuntersetzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transcripts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trukcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--alkoholmessgert-elb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--eckbro-6ya.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gnstigster-strom-jzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--interest-55a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--liebesgtter-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nchternblutzucker-22b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--papedit-bxa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ttenspender-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuidcafe.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf87bae6d000004030048304602210091c31ad192cc9d368d068b08029f7a91c211006e5954dfe07d38bf4cfb25f37602210097ee4650942e516ccf99b1d22802b87b9212758357e2e33d981725fa42e215d1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf87bae760000040300483046022100b16bc175f849b5213588d602a09f4357f085e646165a5a340d8f6e2c11ee7363022100894bb6812466919763cf1793dc525231ba1278584a92cf43951a422a89bf48f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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