bravenet.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:08:dc:97:14:1d:ca:db:bf:e7:a8:c4:1b:5c:3b:08:33 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bravenet.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:08:dc:97:14:1d:ca:db:bf:e7:a8:c4:1b:5c:3b:08:33
Serial Number (int): 428086996780053377733712945919002679117875
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:76:8a:15:fc:4e:0f:da:f6:c9:5b:4d:30:5c:bf:36:dc:62:4e:cc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:fc:5f:bc:fc:62:03:a3:5f:82:84:9d:3e:de:99:c8:28:e9:31:54
Fingerprint (sha256): 8a:13:92:13:98:6d:5d:a8:b2:1c:42:1a:e1:f8:50:6e:52:2d:a0:10:fb:c3:c4:9a:30:c2:b1:a4:8b:de:d7:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bravenet.co.uk

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bravenet.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123movis.com
*.auggiesgamesonline.com
*.avtivaterewards.com
*.blackedecker.com
*.blenderizeddiet.com
*.bmwsterling.com
*.botanicbrasil.com
*.bravenet.co.uk
*.busanuh.com
*.capione.com
*.daisyhillaussies.com
*.dupicolor.com
*.emailsrve.com
*.garminupdates.com
*.gotigergo.com
*.gurneyjourney.com
*.hdwallpaperspage.com
*.healthcareforyou.in
*.heilpflanzenn.de
*.iniden.com
*.jcomcast.net
*.jjcpenneys.com
*.kimberlycapone.com
*.lirio.es
*.luigisdeliconcord.com
*.modularfarms.co
*.nextdoordigest.com
*.nomanchesrestaurant.com
*.ohioottery.com
*.onlineorc.net
*.pegi2.com
*.rarevideosfree.com
*.rastreacelu.com
*.rppurchase.com
*.scc-tds.com
*.termoglas.com
*.tinyuyrl.com
*.tonymac86.com
*.traliexpress.com
*.truly.com.au
*.uhclablocator.com
*.visitcaymanisland.com
*.wenxuevity.com
*.wwellmark.com
*.wwwbexar.org
*.wwwfreestylelibre.com
*.xn--hmroriden-v2a.de
*.xn--s6euererklrung-fib.de
*.yosutube.com
*.youjuz.com
123movis.com
auggiesgamesonline.com
avtivaterewards.com
blackedecker.com
blenderizeddiet.com
bmwsterling.com
botanicbrasil.com
bravenet.co.uk
busanuh.com
capione.com
daisyhillaussies.com
dupicolor.com
emailsrve.com
garminupdates.com
gotigergo.com
gurneyjourney.com
hdwallpaperspage.com
healthcareforyou.in
heilpflanzenn.de
iniden.com
jcomcast.net
jjcpenneys.com
kimberlycapone.com
lirio.es
luigisdeliconcord.com
modularfarms.co
nextdoordigest.com
nomanchesrestaurant.com
ohioottery.com
onlineorc.net
pegi2.com
rarevideosfree.com
rastreacelu.com
rppurchase.com
scc-tds.com
termoglas.com
tinyuyrl.com
tonymac86.com
traliexpress.com
truly.com.au
uhclablocator.com
visitcaymanisland.com
wenxuevity.com
wwellmark.com
wwwbexar.org
wwwfreestylelibre.com
xn--hmroriden-v2a.de
xn--s6euererklrung-fib.de
yosutube.com
youjuz.com

Other certificates including the domain name bravenet.co.uk

(limited to 100 certificates)
bravenet.co.uk
morror.co.uk
news-subcribe.com
lcpdmods.com
morror.co.uk
morror.co.uk
bravenet.co.uk
bravenet.co.uk
lirio.es
walnary.com

Certificate

The complete raw certificate details for bravenet.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkq/Bp8wWNXY7e8SHLuak
WI2qBgFwVfSvNcCdMgIKXgPiEQQgATHYxio2ZXiX/7br7rtAwldcB5cASW5uDas6
9fdrr8Ghat6GB2cHWP7W6ShS0+TGcteaNlzXcCbtWA3a7Mlb/6oXELoq1x6e0mwk
dsLRC1FwB+ok0+rVAma1JuOWbL+AqYI/brVP3wupuD2gQ43zYxdCHZirlWGyhimh
sbM81Y6Dd0/4OXyXKcQ1lZxvMBnpjge9/151NZRcgCNXujhgOSJlPRuBNY0srO0E
nL8hiFMS+xbiendx97cm3LVnf4ucxLzGbwK6QK4moOYA7jYFNIpPKSEI8qSWFpKZ
JB1pnvrEUbAl/8wwpF4xdc20kroBY63OuEZkzaJtk8ydKa4l6hT0T8B7vt4ba9gM
wjcMOlOeKewngG4J+b+w41u9az0soI5untOskAdR3udlO8iJuzwuhClYLDUMQUnA
l/0NOrcZEw/9IHjd0aATK46n7gu3Cah09ZXPrTQBrFIu6y57kuPqkUmGalsQ+v4U
YNGR4wu37xDstmkRV7OOnkWwufUJqJlYgPofE3VHpyAZev1Ofh9Y5rKhbH8um4jq
2ueona6WEaMvGssuaFGyl/N2RibVUxbcgnRskhOtVq+vJvTtB85FjzZb08kvVEdS
q4JoXygNi7o06BBOAlbdNzECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428086996780053377733712945919002679117875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 04:50:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 04:50:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bravenet.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 598428908253253409706227329219420748138716121538686007224060963187857530509000890736352911225437919898470980737577193107576667306259186743431322524893551237989235068187996679730063151439368379993497632942800774670656278168140335832128060518733316582229485760669981328945457776349337704736072363593442894388636677803904213255175732490201220308967419092676246024179336562012190066302703449545819095791578457682681098898079270604045925473238919348667302912235607858986512576823224525523760888698308198094588978371005721382259478517679803331200128056624425521462903598025876799167708690420907017030575319119416894264975119288988624696106096872754162330681049018972521487687816572681627535788119898752421121266824804877251111705355245314031921110351375400909734675202488105510032620181370147531218899905201807149643499878392065721046662820742426878552165171389598553299610864613280544176676055348994065465790209043310724024934073911414981078932891483126355360364720506211124699291767263299871105025017833574466797909641458955788364626540706066470711309905097761188916269044435593022856695469528159904072320388335573913246308513739792459114220290589793691547428654713123428570669152809809475160812130421940826932669921515221677099693455153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d768a15fc4e0fdaf6c95b4d305cbf36dc624ecc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1840 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123movis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auggiesgamesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtivaterewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackedecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blenderizeddiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmwsterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanicbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravenet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.busanuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daisyhillaussies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dupicolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emailsrve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garminupdates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotigergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurneyjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdwallpaperspage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthcareforyou.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heilpflanzenn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iniden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjcpenneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimberlycapone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lirio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luigisdeliconcord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modularfarms.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextdoordigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nomanchesrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohioottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineorc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pegi2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rarevideosfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rastreacelu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rppurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scc-tds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termoglas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinyuyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonymac86.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uhclablocator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitcaymanisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wenxuevity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwellmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbexar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfreestylelibre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmroriden-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--s6euererklrung-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yosutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youjuz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123movis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auggiesgamesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtivaterewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackedecker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenderizeddiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwsterling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravenet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busanuh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capione.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisyhillaussies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupicolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailsrve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garminupdates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotigergo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurneyjourney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdwallpaperspage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcareforyou.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heilpflanzenn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iniden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcomcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjcpenneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberlycapone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lirio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luigisdeliconcord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modularfarms.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextdoordigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomanchesrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohioottery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineorc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegi2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rarevideosfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rastreacelu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rppurchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scc-tds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termoglas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyuyrl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonymac86.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhclablocator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitcaymanisland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenxuevity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwellmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbexar.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfreestylelibre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmroriden-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--s6euererklrung-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yosutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youjuz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcc6128cb000004030047304502202b17ee494440de5da2c3bd12dc66a20220b39f166f7c421f39d36ea82936c38d022100a408f6a953e3ec17fb305ec7eeabcc4c02b8c63d1b603a48e979762fd9114858007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcc6128d4000004030046304402200c928d8ea05028e0f369fe514e69c8939a101eab8f13a2fb5bfddbe06bbe00390220230537d4686dadf7c3600c76eadca8828a544c774c7b29696edf3b7a2e993118
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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