*.nicolasgail.de

Issued by R3

About this certificate

This digital certificate with serial number 04:fe:66:a0:02:59:65:b0:67:db:c5:a6:a5:39:c2:b4:84:7d was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.nicolasgail.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fe:66:a0:02:59:65:b0:67:db:c5:a6:a5:39:c2:b4:84:7d
Serial Number (int): 435017276995674380216116403358011862844541
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4b:28:a3:8c:aa:30:ba:fb:64:b0:49:81:0f:40:a3:97:26:90:05:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:3d:e7:cf:9f:00:ef:28:35:7e:c3:57:6c:de:c9:71:35:90:d8:f3
Fingerprint (sha256): 93:7a:fb:9a:a9:b5:66:1a:16:ea:da:de:b6:2e:3b:93:11:3e:0f:b6:72:28:aa:48:e5:a5:be:66:80:06:ef:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.nicolasgail.de

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nicolasgail.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.biankeunecke.de
*.fiskor.de
*.klueger-essen.de
*.nataroot.com
*.nicolasgail.de
*.reenvisioncreativity.com
*.rosasysal.com
*.xn--rechtsanwltin-pabst-owb.de
2016.enjoi-sailing.com
admin.lima-city.net
biankeunecke.de
fiskor.de
k.dlrg-jugend-rhein-neckar.de
klueger-essen.de
lime.hypnobirthing-vinschgau.it
lime.rotglut.net
m.jaegerhof-schneider.at
media.peterschlenker.de
michael.cluesmann.de
mx2.moin-alex.de
myoffice.lima-city.net
myoffice.tutorialecke.org
nataroot.com
nicolasgail.de
nten.eishorn.de
old.kevinkoziol.de
pvitu.woeschka.com
reenvisioncreativity.com
rettet-mein-barmbek.lima-city.info
rosasysal.com
rowcycle.de
scheidungrechteinfastat.woeschka.com
shop.wot-clan.de
srv.kevinkoziol.de
test.icekey.de
thisisdmg.liveyourproject.com
thoughts-become-true.de
version-aoe2g.chaosheroes.ch
vn.enjoi-sailing.com
www.bodensee-gastronomie.de
www.docu.nuppi.pikot.de
www.mardex.eu
www.michaelpfeiffer.net
www.neu.halle-hettstedter-eisenbahn.de
www.panel.matuschek.systems
www.qanela.de
www.rabatteria.de
www.vms.info4coins.de
www1.vidpxxel.de
xn--rechtsanwltin-pabst-owb.de

Other certificates including the domain name nicolasgail.de

(limited to 100 certificates)
*.nicolasgail.de

Certificate

The complete raw certificate details for *.nicolasgail.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIfTCCB2WgAwIBAgISBP5moAJZZbBn28WmpTnCtIR9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTMwOTU0MjZaFw0yNDA0MTIwOTU0MjVaMBsxGTAXBgNVBAMM
ECoubmljb2xhc2dhaWwuZGUwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARz33Pk
GIbXTylIUF9nYXR4mg4jk6iLmvNtBpokUFTEekMMYTrwGNsMoXq7Pr0uw7HzEraM
o6Zgw7qxZvx9R2q/o4IGbTCCBmkwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRLKKOM
qjC6+2SwSYEPQKOXJpAFXzAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTC
xjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNy
Lm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCBHQGA1Ud
EQSCBGswggRnghEqLmJpYW5rZXVuZWNrZS5kZYILKi5maXNrb3IuZGWCEioua2x1
ZWdlci1lc3Nlbi5kZYIOKi5uYXRhcm9vdC5jb22CECoubmljb2xhc2dhaWwuZGWC
GioucmVlbnZpc2lvbmNyZWF0aXZpdHkuY29tgg8qLnJvc2FzeXNhbC5jb22CICou
eG4tLXJlY2h0c2Fud2x0aW4tcGFic3Qtb3diLmRlghYyMDE2LmVuam9pLXNhaWxp
bmcuY29tghNhZG1pbi5saW1hLWNpdHkubmV0gg9iaWFua2V1bmVja2UuZGWCCWZp
c2tvci5kZYIday5kbHJnLWp1Z2VuZC1yaGVpbi1uZWNrYXIuZGWCEGtsdWVnZXIt
ZXNzZW4uZGWCH2xpbWUuaHlwbm9iaXJ0aGluZy12aW5zY2hnYXUuaXSCEGxpbWUu
cm90Z2x1dC5uZXSCGG0uamFlZ2VyaG9mLXNjaG5laWRlci5hdIIXbWVkaWEucGV0
ZXJzY2hsZW5rZXIuZGWCFG1pY2hhZWwuY2x1ZXNtYW5uLmRlghBteDIubW9pbi1h
bGV4LmRlghZteW9mZmljZS5saW1hLWNpdHkubmV0ghlteW9mZmljZS50dXRvcmlh
bGVja2Uub3JnggxuYXRhcm9vdC5jb22CDm5pY29sYXNnYWlsLmRlgg9udGVuLmVp
c2hvcm4uZGWCEm9sZC5rZXZpbmtvemlvbC5kZYIScHZpdHUud29lc2Noa2EuY29t
ghhyZWVudmlzaW9uY3JlYXRpdml0eS5jb22CInJldHRldC1tZWluLWJhcm1iZWsu
bGltYS1jaXR5LmluZm+CDXJvc2FzeXNhbC5jb22CC3Jvd2N5Y2xlLmRlgiRzY2hl
aWR1bmdyZWNodGVpbmZhc3RhdC53b2VzY2hrYS5jb22CEHNob3Aud290LWNsYW4u
ZGWCEnNydi5rZXZpbmtvemlvbC5kZYIOdGVzdC5pY2VrZXkuZGWCHXRoaXNpc2Rt
Zy5saXZleW91cnByb2plY3QuY29tghd0aG91Z2h0cy1iZWNvbWUtdHJ1ZS5kZYIc
dmVyc2lvbi1hb2UyZy5jaGFvc2hlcm9lcy5jaIIUdm4uZW5qb2ktc2FpbGluZy5j
b22CG3d3dy5ib2RlbnNlZS1nYXN0cm9ub21pZS5kZYIXd3d3LmRvY3UubnVwcGku
cGlrb3QuZGWCDXd3dy5tYXJkZXguZXWCF3d3dy5taWNoYWVscGZlaWZmZXIubmV0
giZ3d3cubmV1LmhhbGxlLWhldHRzdGVkdGVyLWVpc2VuYmFobi5kZYIbd3d3LnBh
bmVsLm1hdHVzY2hlay5zeXN0ZW1zgg13d3cucWFuZWxhLmRlghF3d3cucmFiYXR0
ZXJpYS5kZYIVd3d3LnZtcy5pbmZvNGNvaW5zLmRlghB3d3cxLnZpZHB4eGVsLmRl
gh54bi0tcmVjaHRzYW53bHRpbi1wYWJzdC1vd2IuZGUwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBIsONr2qZHNA/lagL6nTDr
HFIBy1bdLIHZu7+rOdiEcwAAAY0CdWxhAAAEAwBHMEUCIGrBBx1SgRoKXqA7KTst
YmtsrGNyX2eEODXeHRGLyb5WAiEA4uzDiUROIf7L0bTNPPoIUBR6unQ4p5LyQShr
SlAd39YAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY0CdWy6
AAAEAwBHMEUCIHmHrNPNpLwDYWY7TDXtBV1DwQ6KEpKa+uqQGWLgL2MPAiEArwQe
2OibKjdbOS8xDy/2A3Szuwtg2wUROWw6wyZb84EwDQYJKoZIhvcNAQELBQADggEB
AI8y6oC2zFgRCMsx6pXkVz3+oKRuACcmWiLwOr3ma7S+qxyESwEJnhyZo43Zgx+6
CEx2h6W7TJbDi7mDa6jEod2DFLk5dR0+/gtm8PGXTrwp2o+ONQYH4cs8za49MKS3
DxWfL+2SMsBLxv5smsk8aXnJ3kCmRMl0xpBioxaR8LpRq5JWfEsqhehU8WFUV3QK
Bp4UJ3EnKTogHwH9MS2l3u1ScwRaVCZXpas7H05fxTATRYh6A5t+h56JySCpY95J
+Msnvzny6Eoyi73FChNjSgxkjViOVD+linpxt/U6zcBvT3nClZOCQ+qN8WO+bnlp
ovESme0ViHzBaoEMvvCMKNg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEc99z5BiG108pSFBfZ2F0eJoOI5Oo
i5rzbQaaJFBUxHpDDGE68BjbDKF6uz69LsOx8xK2jKOmYMO6sWb8fUdqvw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435017276995674380216116403358011862844541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 09:54:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 09:54:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nicolasgail.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000473df73e41886d74f2948505f676174789a0e2393a88b9af36d069a245054c47a430c613af018db0ca17abb3ebd2ec3b1f312b68ca3a660c3bab166fc7d476abf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b28a38caa30bafb64b049810f40a3972690055f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biankeunecke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiskor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klueger-essen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nataroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicolasgail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reenvisioncreativity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosasysal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rechtsanwltin-pabst-owb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2016.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.lima-city.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biankeunecke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiskor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k.dlrg-jugend-rhein-neckar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klueger-essen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lime.hypnobirthing-vinschgau.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lime.rotglut.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.jaegerhof-schneider.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.peterschlenker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michael.cluesmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2.moin-alex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myoffice.lima-city.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myoffice.tutorialecke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nataroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicolasgail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nten.eishorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.kevinkoziol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvitu.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reenvisioncreativity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rettet-mein-barmbek.lima-city.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosasysal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowcycle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheidungrechteinfastat.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wot-clan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv.kevinkoziol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisisdmg.liveyourproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughts-become-true.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'version-aoe2g.chaosheroes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vn.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodensee-gastronomie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docu.nuppi.pikot.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mardex.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michaelpfeiffer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neu.halle-hettstedter-eisenbahn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.panel.matuschek.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qanela.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rabatteria.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vms.info4coins.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.vidpxxel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rechtsanwltin-pabst-owb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d02756c61000004030047304502206ac1071d52811a0a5ea03b293b2d626b6cac63725f67843835de1d118bc9be56022100e2ecc389444e21fecbd1b4cd3cfa0850147aba7438a792f241286b4a501ddfd600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d02756cba000004030047304502207987acd3cda4bc0361663b4c35ed055d43c10e8a12929afaea901962e02f630f022100af041ed8e89b2a375b392f310f2ff60374b3bb0b60db0511396c3ac3265bf381
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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