twa.com.pl

Issued by R3

About this certificate

This digital certificate with serial number 03:01:4c:2b:ed:02:69:12:b2:65:36:88:dd:c0:45:de:2e:a8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=twa.com.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:4c:2b:ed:02:69:12:b2:65:36:88:dd:c0:45:de:2e:a8
Serial Number (int): 261778389565768299926882487445914375827112
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:52:bb:e6:74:e7:9f:9c:2f:50:7d:30:00:88:cb:5d:c8:c5:5e:c1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:ab:52:9f:7a:a1:5c:62:50:19:55:04:50:03:c3:a0:2e:81:04:f0
Fingerprint (sha256): 8f:21:44:e3:af:f9:c8:47:0b:f3:05:f2:33:72:bf:da:9a:3a:7b:97:bd:75:13:70:54:3b:1a:39:fd:56:45:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate twa.com.pl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twa.com.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aspley.au
*.azg.de
*.blaseninfektion.de
*.carolynamir.com
*.dachbedarf.de
*.dailytrader.com.au
*.eai.de
*.eastmarketnoodlehouse.com
*.essentialpim.de
*.eztc.it
*.googloe.de
*.halenbad.de
*.heyhotflashes.net
*.honeybirdette-rus.com
*.hoteles.com.au
*.iberikopetfood.com
*.iffod.com.br
*.jinrutai.com
*.jlgfitnessclub.com
*.livestrp.de
*.modelhob.com
*.novamovies.net
*.nrawning.co.uk
*.nursingschool.de
*.nursinguniform.de
*.oberschenkelzerrung.de
*.payobeer.com
*.peacedonkeys.com
*.petershepherdtyres.co.uk
*.pumps-kaufen.de
*.renmark.com.au
*.renterversicherung.de
*.ringeltauben.de
*.robertphiliptesttlddomainpurchase2.bio
*.sexmatxa.net
*.skiffvintageknittingpatterns.co.uk
*.smart-receiver.de
*.snowboardinghalloffame.org
*.stuhlbezuege.de
*.techubly.com
*.temaofisi.site
*.topicmarkets.com
*.twa.com.pl
*.wakebord.de
*.xn--druckerztubehr-7pb.de
*.xn--kinderskianzge-rsb.de
*.xn--rinderhrner-xfb.de
*.xport1.de
*.xxnx.nl
*.zyciebezograniczen.com
aspley.au
azg.de
blaseninfektion.de
carolynamir.com
dachbedarf.de
dailytrader.com.au
eai.de
eastmarketnoodlehouse.com
essentialpim.de
eztc.it
googloe.de
halenbad.de
heyhotflashes.net
honeybirdette-rus.com
hoteles.com.au
iberikopetfood.com
iffod.com.br
jinrutai.com
jlgfitnessclub.com
livestrp.de
modelhob.com
novamovies.net
nrawning.co.uk
nursingschool.de
nursinguniform.de
oberschenkelzerrung.de
payobeer.com
peacedonkeys.com
petershepherdtyres.co.uk
pumps-kaufen.de
renmark.com.au
renterversicherung.de
ringeltauben.de
robertphiliptesttlddomainpurchase2.bio
sexmatxa.net
skiffvintageknittingpatterns.co.uk
smart-receiver.de
snowboardinghalloffame.org
stuhlbezuege.de
techubly.com
temaofisi.site
topicmarkets.com
twa.com.pl
wakebord.de
xn--druckerztubehr-7pb.de
xn--kinderskianzge-rsb.de
xn--rinderhrner-xfb.de
xport1.de
xxnx.nl
zyciebezograniczen.com

Other certificates including the domain name twa.com.pl

(limited to 100 certificates)
twa.com.pl
*.alfa.szczecin.pl
fgxdpz.icu
genema.icu
twa.com.pl
twa.com.pl
twa.com.pl
freeadult.cyou
twa.com.pl
genema.icu

Certificate

The complete raw certificate details for twa.com.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261778389565768299926882487445914375827112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-04 08:53:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 08:53:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twa.com.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788131254907671422364324304042993087436037038568575556510308046252573834199720697654222690012371457837411614475838499447789957451377266952421427795783016524784035607176272076173253964907718677062913467519682656329109100321880318727757638408830479844306300046024521164460062602097022932587568284465035997132211164886414316915691738797173071610532407094380524285183921372266257400328151740743395967884467492315467780206029996519317835885039544113915977631834697092606085058744000857953822690365597201579412026531101301382390536500184094473431765073594992681521318924099528316750476880699572281985804556066122770994603457456839952196157717786635310361161943870557334781039679340402321979001600442271186150242591061795101510905445867849380476380714338657404134973495959881294852122422836270312565638778082205335216813767482651833379992058216267809437363857536131559887504563100714466544396068126301250662896737495146351836288090114594701630224753201183311221104405874461044343129374709123492101376540504938744390303271845970717354514191786994196048709702505169268876843380877032247632832275696533432558352402805657745677941209485785757074298066690168614769775580469240990252940815743103376117226868763183085448176241884706906268417717083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af52bbe674e79f9c2f507d300088cb5dc8c55ec1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspley.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaseninfektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carolynamir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googloe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halenbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heyhotflashes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeybirdette-rus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iberikopetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iffod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jinrutai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jlgfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livestrp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modelhob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oberschenkelzerrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payobeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peacedonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ringeltauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smart-receiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuhlbezuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temaofisi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topicmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wakebord.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kinderskianzge-rsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rinderhrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxnx.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zyciebezograniczen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspley.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaseninfektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolynamir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googloe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halenbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyhotflashes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeybirdette-rus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iberikopetfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iffod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinrutai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlgfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestrp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelhob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oberschenkelzerrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payobeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacedonkeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringeltauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-receiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuhlbezuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temaofisi.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topicmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakebord.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kinderskianzge-rsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rinderhrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxnx.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyciebezograniczen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d738955d300000403004730450221008935c5538386158e7f93e1c65ceb500bdaeb00340262b2a51a09919408c607ee0220318a4e26a50879e51797a4445b8601bf57b0e64427b41fcd37552ad41e66620a007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d738955f60000040300463044022072e6a27cb1e3c38832d14e184afd881580484e1070daa51db038c363b689a1cf022047a0fada673be2e952c53529ca45f7b2dbd984bc5ace01439aa4ee59f5c48ecb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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