xfs.de

Issued by R10

About this certificate

This digital certificate with serial number 03:0b:7f:8e:0a:e9:67:91:e8:95:13:f9:47:cb:40:52:f8:fc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xfs.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:0b:7f:8e:0a:e9:67:91:e8:95:13:f9:47:cb:40:52:f8:fc
Serial Number (int): 265249513314345970550285619731793645336828
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:f4:34:0b:22:ed:1c:df:10:39:08:80:e8:1b:3c:fe:39:b0:cf:1c
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 4e:9a:fb:30:f8:42:b7:2a:b8:8e:c8:fd:2a:d7:93:33:d7:8b:b3:81
Fingerprint (sha256): 92:dd:d7:2c:c5:8f:78:d6:bc:8e:02:74:09:a5:14:bd:db:f0:c7:93:1a:cd:98:f8:82:60:07:c9:6e:64:9f:59

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate xfs.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xfs.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.30maz.com
*.aqdtv311.com
*.bs382.ch
*.cardoso.eu
*.codewithnizami.com
*.connectingbusinessinitiative.org
*.dreamweaver.de
*.druckerzubehioer.de
*.edusiswa.com
*.expandshowroom.com
*.flipper-univers.com
*.freiburgermuensterminiaturen.com
*.gamewin777.org
*.ginkgo-blatt.de
*.gongbuwarac.com
*.gorbeahr.com
*.grage-souvenir.com
*.ikorot.com
*.induktionsfeld.de
*.jenandstew.com
*.jrmarket.org
*.lapasjelekong.com
*.lartduboeuforiginal.com
*.ljo.de
*.lkb.de
*.llf.de
*.llw.de
*.lnf.de
*.lnu.de
*.masarbeit.de
*.mybirthboutique.com
*.nabalanca.com
*.nationaltodaynews.com
*.nuursi.com
*.officeproperty.com.au
*.officialteatimes.com
*.onlythots.org
*.pimples.de
*.pirulitorosa.com
*.preisvergleixh.de
*.raron.de
*.remediocaseroparalacolitis.com
*.seketaerin.de
*.vocasee.com
*.wolfbilder.de
*.xfs.de
*.xn--fremwrter-47a.de
*.xn--khlpaste-65a.de
*.zeitumrechner.de
*.zenpalgroup.com
30maz.com
aqdtv311.com
bs382.ch
cardoso.eu
codewithnizami.com
connectingbusinessinitiative.org
dreamweaver.de
druckerzubehioer.de
edusiswa.com
expandshowroom.com
flipper-univers.com
freiburgermuensterminiaturen.com
gamewin777.org
ginkgo-blatt.de
gongbuwarac.com
gorbeahr.com
grage-souvenir.com
ikorot.com
induktionsfeld.de
jenandstew.com
jrmarket.org
lapasjelekong.com
lartduboeuforiginal.com
ljo.de
lkb.de
llf.de
llw.de
lnf.de
lnu.de
masarbeit.de
mybirthboutique.com
nabalanca.com
nationaltodaynews.com
nuursi.com
officeproperty.com.au
officialteatimes.com
onlythots.org
pimples.de
pirulitorosa.com
preisvergleixh.de
raron.de
remediocaseroparalacolitis.com
seketaerin.de
vocasee.com
wolfbilder.de
xfs.de
xn--fremwrter-47a.de
xn--khlpaste-65a.de
zeitumrechner.de
zenpalgroup.com

Other certificates including the domain name xfs.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for xfs.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265249513314345970550285619731793645336828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 20:05:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 20:05:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xfs.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670869446335393109997195332042153219008167166822153180828410988911907987688206177859337410776542896544004176946911415611181643155715002623173564447159133982342395401918332323206684593559621422867886558847617185967271666811018568717097554131920823648838833895007942310903631435154050022577140855481308706275109239086758364256628533198576755316643145925385195739425478993764028764695292194871215857421854670656316782293373940936869856149500274898577233076866485064562425603493259724132715701458501272345255193051333680059082088600087076625480204365073543002772759341314304511387162788153864530684546028652488834073660641136625197731625787431579189309477316884377226038592955828559792920702509567866008695048545951438633642546730090212196626719429201728184698357857306469768428639963557828920846135047116793155365174414479460733270603864495412126122415767929765482527015163044387510654304381333995414548471300845059740887502001807140270897582263512687542206249341897396255269558065390726862666409196298753821454135650643703317947670330164889293642221454025544078664217430541770085219972780866218882744970191154765695340092981178820658253874168415847943858569292869052489968712066189169566790622237818302559329742370827432512273139128719
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20f4340b22ed1cdf10390880e81b3cfe39b0cf1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1762 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.30maz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqdtv311.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bs382.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardoso.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codewithnizami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectingbusinessinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamweaver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.druckerzubehioer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edusiswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expandshowroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipper-univers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freiburgermuensterminiaturen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamewin777.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ginkgo-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gongbuwarac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorbeahr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grage-souvenir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikorot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.induktionsfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenandstew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapasjelekong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lartduboeuforiginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ljo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masarbeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybirthboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nabalanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationaltodaynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuursi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officeproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officialteatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlythots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimples.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pirulitorosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preisvergleixh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raron.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remediocaseroparalacolitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seketaerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocasee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremwrter-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--khlpaste-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeitumrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zenpalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '30maz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqdtv311.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bs382.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardoso.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codewithnizami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectingbusinessinitiative.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamweaver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druckerzubehioer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edusiswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expandshowroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipper-univers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freiburgermuensterminiaturen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamewin777.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginkgo-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gongbuwarac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorbeahr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grage-souvenir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikorot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'induktionsfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenandstew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrmarket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapasjelekong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lartduboeuforiginal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masarbeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybirthboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabalanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaltodaynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuursi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officialteatimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlythots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimples.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pirulitorosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preisvergleixh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raron.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remediocaseroparalacolitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seketaerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocasee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremwrter-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--khlpaste-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeitumrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenpalgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff9abbe580000040300473045022100a69976dcda8efebdebc493ed1a4ecdcd36eed249a7c0bc24186f6d59b0c3f93c02207adc499870c5cccfc076c7fff9caff53e80d29ed30e8c2f101d6f5efa766d4e10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff9abbe8c0000040300483046022100cf6d75b3c7cde721209f3dd951ff0080ab18358dc93b0cbf32a4d9adfaff9eb6022100e9fdc2235edfabc163c2f94498cd95c3aa2e9acfda955af06e6ea60c49bbbda6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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