thebaers.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:81:13:79:5e:be:dd:c2:22:c7:38:c7:0b:2d:f8:60:8b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thebaers.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:68:81:13:79:5e:be:dd:c2:22:c7:38:c7:0b:2d:f8:60:8b
Serial Number (int): 296897795481832986008837992716104524914827
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:d6:c4:69:e2:f8:cb:38:40:18:ea:d3:3a:01:bc:45:67:3d:31:da
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:b8:d2:ff:c4:d8:d9:d5:fc:4a:8f:7b:69:84:b5:11:98:eb:eb:2d
Fingerprint (sha256): 91:0f:35:4e:99:80:21:82:44:80:61:2c:d3:ad:87:70:ab:ef:07:03:61:a6:2e:98:0b:44:3d:5a:ec:79:8c:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thebaers.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thebaers.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4wfourclenenerige.de
*.527p9k1m.de
*.77blau.de
*.abo-mvg.de
*.abovrn-online.de
*.agasy.com
*.alertsystemsgroup.com
*.baander.com
*.bdsminsex.com
*.bestoccasion.com
*.bmw-gebrauchtteile24.de
*.carucci.com
*.chuangheng.com
*.cocovote.com
*.communit.com
*.completos.de
*.dallasmedicalmalpracticelawyer.com
*.disfrutame.com
*.donahay.com
*.encuentratucasa.com
*.farmoderm.com
*.fkaa.net
*.fpe-group.de
*.gulus-umzuege.de
*.hairway.org
*.hitobito.net
*.intekma.com
*.interiano.com
*.introductor.com
*.jordancars.com
*.kuara.com
*.lightenterprises.com
*.maccabigames.com
*.mipiel.com
*.natalia-kills.de
*.nexvoid.de
*.niudian.com
*.otorinolaringoiatria.com
*.quangthang.com
*.realestateworkshops.com
*.ruschina.net
*.salon-casa.de
*.schreinerei-stephan.de
*.szbanboo.com
*.thebaers.com
*.vavaburger.com
*.wehrmanns.com
*.wtoq.com
*.yurdanur.com
*.zey-bag.de
4wfourclenenerige.de
527p9k1m.de
77blau.de
abo-mvg.de
abovrn-online.de
agasy.com
alertsystemsgroup.com
baander.com
bdsminsex.com
bestoccasion.com
bmw-gebrauchtteile24.de
carucci.com
chuangheng.com
cocovote.com
communit.com
completos.de
dallasmedicalmalpracticelawyer.com
disfrutame.com
donahay.com
encuentratucasa.com
farmoderm.com
fkaa.net
fpe-group.de
gulus-umzuege.de
hairway.org
hitobito.net
intekma.com
interiano.com
introductor.com
jordancars.com
kuara.com
lightenterprises.com
maccabigames.com
mipiel.com
natalia-kills.de
nexvoid.de
niudian.com
otorinolaringoiatria.com
quangthang.com
realestateworkshops.com
ruschina.net
salon-casa.de
schreinerei-stephan.de
szbanboo.com
thebaers.com
vavaburger.com
wehrmanns.com
wtoq.com
yurdanur.com
zey-bag.de

Other certificates including the domain name thebaers.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for thebaers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAybKzQCpVfQuDiGHIO0zv
hi4tL1UHL1lM6iLxLf2t5kBH0lmDm9DIKAVQ0rPe3agPs3uiHFmOjUYE0U+u4nn2
oKIx5mgm6G1USD+88kuplT7U6mctJkz4JrBQy9U7hfH6w13pPVYun5U7RtWO97p/
QSpjtjcil2fx/qYNG7CnI75RsjKIetfUe+e6dWM4UUDo77rCMWA96rELgh2IB4nq
GSU5aE4jzapDzftsKcbNXKnLjnCUTZ/QxqhZ70zoXl32eqSAY6EeaVIN3jNUpc49
JSdk5b0QuIrVoIfbcX1lhz+zqiNyeXQV/Buql1f/nKcu27J7YETSTQV6zrJFylAw
w5/atvZx3brshwBH92FAji8DyPUCFy/8Q7fmh6ah8tubpvkF3in/68QwC/wv3BIP
yRdXndX+dLHAikBsawpwczSHzO3yuSKG1tBj8nzyT3UYkVIGqFDIT9ndcXGQplpM
pFRhSh3/ijah1/W08zJ79fKvjlQk+dKBLgtwDiiI6EFB5wNSZRANUnoo0bU2rYyd
6tUgdtUeS5u6XynxiIe+mKTv4N3l3QOvzYfeHdMbkzKfQ48lruLAma8l/Nw/ipB+
Uw7rBPKvym3j+FFYwGEuVjTwpklk9/+aePBrp6x8/lRpSZ2T2Xck78QIdWc3wGV9
PhJNqnQL1hNfvsl01f/RNpECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296897795481832986008837992716104524914827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 22:14:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 22:14:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thebaers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822856243617572250209310193906816276779140360791900927289461285077755809212429967091115661963900981662472614963575302873494433057362958164172923909906325693826503891992451835029137430102422256427663276119708227677038073239603627043857726667814885288658771064374825307941542341819648160144000279439766800680829210731376499288581331400518374923608897479715483964467547050247082225419332065971907942366528353403085732513130113721265974961008458709840311822661270539981396272205335391709487166885283017798051089826627271152658066771307974512126449961682407248754427090180670498645253288551371095145666727596211394614866639872225839613213093800737271797964520339845716148287354738379703188402164787264237693062481557781127185728530580369007659422985752754456416316052738335339721094912734975538243452099181459454702064332559833705621381729145558013034432392205273464069608444890339747505442771475690758397984772954375612699302886008323636165096007054843884040443932703506161407166493589931561849084186846594462954572157291504876038879616156309478931679525671429255445460973607311456451129902456933836185677148134153919155090279393782435750010592746540764409584038421393442600163804398806086096720504780425215012809251469459255907939595921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dad6c469e2f8cb384018ead33a01bc45673d31da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4wfourclenenerige.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.527p9k1m.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.77blau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abo-mvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abovrn-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alertsystemsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdsminsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestoccasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmw-gebrauchtteile24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuangheng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocovote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.communit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.completos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dallasmedicalmalpracticelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disfrutame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donahay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encuentratucasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmoderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fkaa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fpe-group.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulus-umzuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitobito.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intekma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.introductor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jordancars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maccabigames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mipiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natalia-kills.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nexvoid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niudian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otorinolaringoiatria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quangthang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestateworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruschina.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salon-casa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schreinerei-stephan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.szbanboo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebaers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vavaburger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wehrmanns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtoq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yurdanur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zey-bag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4wfourclenenerige.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '527p9k1m.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '77blau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abo-mvg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abovrn-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertsystemsgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdsminsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestoccasion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-gebrauchtteile24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuangheng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocovote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasmedicalmalpracticelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disfrutame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donahay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encuentratucasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmoderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkaa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpe-group.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulus-umzuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitobito.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intekma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interiano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introductor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordancars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maccabigames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mipiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natalia-kills.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexvoid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niudian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otorinolaringoiatria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quangthang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateworkshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruschina.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salon-casa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schreinerei-stephan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szbanboo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebaers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vavaburger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wehrmanns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtoq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yurdanur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zey-bag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f7963254d000004030047304502200aacbf2b7fae14f671cd33d6e8573aabccea5b7c2c521989a53c2bfaf8506157022100d5505670c11ef24148431633681cf321b79e4783ed75956b7fe58278a93788e200770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f7963259b0000040300483046022100a6314b3ed6ef5a595a69ec2bf3f6593e91b9812b2ab2b5ba6b5dd04a79a09ded022100850a58252660f26b27a30683988273fdb0fe25ec9f5eb420e533fb3a73efa78c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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