entdecke-scolaris-grundschule.de

Issued by R3

About this certificate

This digital certificate with serial number 04:79:c0:05:6f:5d:3d:e0:70:42:70:58:f4:87:d3:5c:0b:27 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=entdecke-scolaris-grundschule.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:c0:05:6f:5d:3d:e0:70:42:70:58:f4:87:d3:5c:0b:27
Serial Number (int): 389878550119884372221574921977361396927271
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 56:35:7d:cd:61:96:9e:bf:81:fa:29:4a:89:52:74:6c:dc:51:54:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:14:a6:e4:d3:01:5e:d4:a8:b6:92:54:cb:01:74:8e:ca:8b:cf:34
Fingerprint (sha256): 8b:80:cc:0a:a2:fe:db:ce:b7:f9:5c:2b:5e:cb:d2:fb:05:0e:ba:71:46:ae:74:36:56:23:e9:b1:01:80:7a:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate entdecke-scolaris-grundschule.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for entdecke-scolaris-grundschule.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amm.co.in
*.appraisalwizard.com.au
*.atemzeitvolumen.de
*.auctionlosmontesinos.com
*.birthpose.com
*.bluerg.com.au
*.businesschallenge.com.au
*.captialford.com
*.discovee.com
*.donnaslegshow.com
*.elpurete.com
*.employeebridge.com
*.entdecke-scolaris-grundschule.de
*.evionproducts.com
*.extort.me
*.fat-bike.store
*.formsimplicty.com
*.freelanceconsultant.com.au
*.furbid.ws
*.go-gay.com
*.groupmgnt.com
*.halfbakedpowdercoating.com
*.handy-coffee.co
*.icicipruelife.com
*.jcpennsy.com
*.lewingentertainment.com
*.lewy-koerperchen-demenz.de
*.mcdlogin.com
*.microscopy-uk.org
*.mindreaderai.com
*.movietriggers.com
*.nrplade.net
*.potenzgenerika.com
*.rashigroupindia.com
*.rcketmail.com
*.resgofs.co
*.rewardlocal.com.au
*.robloix.com
*.rrather.com
*.samansakorea.co
*.sanaiforthan.com
*.sasktell.net
*.sazitio.co
*.sebecas.com
*.shouldisuejohnnyharris.com
*.sjbrebeuf.co
*.slashbanking.com
*.stevewalllumber.com
*.trackref5b.biz
*.www-steuererklaerungen.de
amm.co.in
appraisalwizard.com.au
atemzeitvolumen.de
auctionlosmontesinos.com
birthpose.com
bluerg.com.au
businesschallenge.com.au
captialford.com
discovee.com
donnaslegshow.com
elpurete.com
employeebridge.com
entdecke-scolaris-grundschule.de
evionproducts.com
extort.me
fat-bike.store
formsimplicty.com
freelanceconsultant.com.au
furbid.ws
go-gay.com
groupmgnt.com
halfbakedpowdercoating.com
handy-coffee.co
icicipruelife.com
jcpennsy.com
lewingentertainment.com
lewy-koerperchen-demenz.de
mcdlogin.com
microscopy-uk.org
mindreaderai.com
movietriggers.com
nrplade.net
potenzgenerika.com
rashigroupindia.com
rcketmail.com
resgofs.co
rewardlocal.com.au
robloix.com
rrather.com
samansakorea.co
sanaiforthan.com
sasktell.net
sazitio.co
sebecas.com
shouldisuejohnnyharris.com
sjbrebeuf.co
slashbanking.com
stevewalllumber.com
trackref5b.biz
www-steuererklaerungen.de

Other certificates including the domain name entdecke-scolaris-grundschule.de

(limited to 100 certificates)
entdecke-scolaris-grundschule.de
handyrakten.de
le-conte.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de
www.scolaris.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de

Certificate

The complete raw certificate details for entdecke-scolaris-grundschule.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0pMbPEguDqJ8ecWD9dGP
lY7VqdSwkT1DdAnNohZHM4WcLYDCMRPiK9qi1SGkbogLla3roZqjd+OYKFKnvtGA
kcjcZ4hsjie9gvfAhd/mj7LjjZBPun0fCINP/hdrSkuBfSWW5dhisZd+wBegzgHE
UQyVHf3iB6OKWolHKRFQnRpaptBRTwRbvYKI55lbGLQ5K9ryJrLOM5bwii+UPBqN
xO8lENMPco8O2saBr78wwLgHLY8jDSAHIlniNqPHrixOTGPJFaVzcauckS/R3A9e
t7BdDEKHyesouzgYrtfdSAZon9bB7oFzoNCHesiXrmtuSJ7Vww1yzPr6Mqigy+8N
VleFGuwG/H991j/3tgiuQkJx/9mRNe7PV5wBhEB0YYEmuBnI2sdoT+f+jzbO7VzX
djQ7GMco67zdbrS/14nEqLOXgKwzhVv10wjj1uWP0Hckv/cTLp3Q0ccJHPkcL14z
tj4zxJZGsx3moGM9sWLhKGid5uVwNPBpp+cKPcTSyIW+3Hp+iv78tiB4wDFe+fYT
kYuzKkjy8fE733Jo/WpZy6Pp2t93QDoZ4sFplZtmVt2AgitBdBu6TicDiFlIc4pB
Uhg4ztvIqjG8dC0hBie5xOBs08N8z0VzrxKWu7gHC9NSHvQV6noHIjDEibwChZHr
x5X5VZT6rXmgMr7PFKMUWs0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389878550119884372221574921977361396927271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 06:13:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 06:13:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'entdecke-scolaris-grundschule.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859069557821479149248896027896649544866809541017081510218272152935937386119619188933074877000170656270139174165342904554050742486185754521565430628832309686981807504875708506154469299995267016603725081716865477673736021144998626080763382961022543556344567123679845449687833462830367778094638999468272906253157187024761751309310087222133379368933088039206944820456858855054811630051151915465207492004663212486573496136003805614093114878407047452818927764635883945603529979205867319874251969072213979242245626601656864418424367781696719651544198024753548934422610490732073009883320883896028613908224392539625998708396420420435498339254298996018373126453748186290076259420556085128949747007676201201826308195324442202192876488552724612248038329131946863429280265260158737782734658404381755500504496656321647246939380482949249748053396211772428709727824078575719898256470000627506557121393922571328483046487369273726754176390955936591377891772149329035577147972279662373893903139928915089728728232819911770677653862738049921715968350934974518106746716317671383044943973919721718633833299780094807553637470603160525128855949116865505348053744177486406347583629328370113315095002792270691433175032748844874381268382091489419984534066453197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56357dcd61969ebf81fa294a8952746cdc5154c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1928 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluerg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpurete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fat-bike.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelanceconsultant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furbid.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewingentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindreaderai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rashigroupindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resgofs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samansakorea.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanaiforthan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sazitio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shouldisuejohnnyharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjbrebeuf.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slashbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevewalllumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackref5b.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-steuererklaerungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerg.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpurete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fat-bike.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelanceconsultant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furbid.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewingentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindreaderai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rashigroupindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resgofs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samansakorea.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanaiforthan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sazitio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shouldisuejohnnyharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjbrebeuf.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slashbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevewalllumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackref5b.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-steuererklaerungen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bccad75e0000004030047304502210091ac2bb768864ab8e459527baadac6b0246c52f66ca471a0fb20b6275c778255022023c81a5f1896851788a11fd73bc447050fa6ed4093aeded4d16365d25028f2e30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bccad77d2000004030047304502210088f07308e8eabdc190a4180fe82509e13e9b5b0a66a4b77cb6c6c75a9f95668a0220472144b74de3b6150ec08f20f3201fa1541f4a418b1a0cb14a550cf2d91da688
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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