u.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number fa:2c:10:67:92:88:18:4b:59:5e:b7:da:f5:96:a1:fe was issued on by Sectigo Limited.

With 104 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=u.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): fa:2c:10:67:92:88:18:4b:59:5e:b7:da:f5:96:a1:fe
Serial Number (int): 332535792732408238109685812869136294398
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5e:ff:a3:50:a4:23:16:c4:49:06:b1:c1:43:bb:99:9c:75:78:70:70
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): f8:51:fd:d8:fc:42:8a:1d:26:a9:72:40:07:4d:b3:ac:a8:c6:45:d2
Fingerprint (sha256): 93:a7:8e:55:8c:0d:32:c6:1b:ec:b8:a0:a0:cc:18:bf:f2:2a:42:cb:b6:da:7d:93:65:4a:51:45:c8:d1:ed:11

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate u.mailkit.com

104

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for u.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

u.mailkit.com
u.akce.rent.cz
u.akce.svet-svitidel.cz
u.akcie.rent.sk
u.akcie.svet-svietidiel.sk
u.akcio.lampak.hu
u.allianz.cz
u.centropol.cz
u.club.rossmann.cz
u.dedoma.ro
u.dedoma.sk
u.dine4fit.hu
u.dine4fit.pl
u.dobryemail.cz
u.email.bezvasport.cz
u.email.bezvasport.sk
u.emaildemos.com
u.energie.centropol.cz
u.homecredit.cz
u.homecredit.sk
u.info.nm.cz
u.kaloricketabulky.cz
u.kaloricketabulky.sk
u.kartavyhod.drmax.cz
u.ketodiet.cz
u.ketodiet.sk
u.kusmitea.cz
u.love.activate.cz
u.mail.key4you.cz
u.malfini.com
u.mesacnyvypis.sk
u.mesicnivypis.cz
u.mimilatky.cz
u.mnd.cz
u.naturamed.cz
u.naturamed.sk
u.nea.frogies.gr
u.news.3dden.com
u.news.e-kondomy.cz
u.news.etneteragroup.cz
u.news.superlove.sk
u.newsletter.drmax.cz
u.newsletter.factcool.com
u.newsletter.rossmann.cz
u.nl.toner.shop
u.nl.tonerpartner.cz
u.nl.tonerpartner.hr
u.nl.tonerpartner.pl
u.nl.tonerpartner.ro
u.nl.tonerpartner.si
u.nl.tonerpartner.sk
u.nl.tonerpartners.hu
u.nl.tptoner.at
u.nl.zmgroup.sk
u.notino.at
u.notino.be
u.notino.bg
u.notino.ch
u.notino.co.uk
u.notino.cz
u.notino.de
u.notino.dk
u.notino.ee
u.notino.es
u.notino.fi
u.notino.fr
u.notino.gr
u.notino.hr
u.notino.hu
u.notino.ie
u.notino.it
u.notino.lt
u.notino.lv
u.notino.nl
u.notino.pl
u.notino.pt
u.notino.ro
u.notino.se
u.notino.si
u.notino.sk
u.notino.ua
u.noutati.frogies.ro
u.novinky.centropol.cz
u.novinky.frogies.cz
u.novinky.frogies.sk
u.novinky.volkswagen.cz
u.novita.frogies.it
u.novosti.frogies.ba
u.novosti.frogies.bg
u.novosti.frogies.hr
u.novosti.frogies.rs
u.offerte.luciamo.it
u.omnivery.com
u.pottenpannen.cz
u.pottenpannen.sk
u.pozvanky.nm.cz
u.prazirna.doubleshot.cz
u.promocje.liderlamp.pl
u.promotii.luminam.ro
u.ru.dine4fit.com
u.sonderangebote.beleuchtung.at
u.sonderangebote.beleuchtung.de
u.tablycjakalorijnosti.com.ua
u.ujdonsagok.frogies.hu

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for u.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGcjC32JLs4oGwRmRSq9
QhHvCxRXiUoosMaZB3MGvkyGo811dKVKdXZlmxHszSUWOmFT1KXILQG4zbe9aVtJ
+K2hfNIZ3wLFZ6aXA7Z5T4bJVIzvSqND+t/B0JiTAH/JXirGScDMxMKsUDj3/Mm4
jQxnjRFFuqUr3mPPnzUvf4MEmDwqtxcHLp92JGk6P5jg4J1DtsIAvgX0QPNo+cyG
MnatvgixI+DwWKHyq54QvD2Pqfk1ZjKp/Y9cYLDO47rbEqV+de7DOjwNKeLJdgkl
3+Q9Vp2ScNTPjlkIaobPB23R7iuANhwxhaOC6IC7cgvldKnKaOOgMakNt7M67RiJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332535792732408238109685812869136294398
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'u.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20753940712433700840126440288149304003354474029868529457445881989701578374053253131867199976222589395802488805391711842359178093034405867070481658271228682267746402344982538340596313441682379931874655678253709934490016708863669652396654095586879184462110121595995702854401130967614384534756257811332271374832982751511779156986662828116900989198826330989497097351874826159168353763143107629145862638294379657861081997716614632635159765558447600843095053947408422520389590160267371689592073730744893322284410484638085781450183569476800734796460235367419439932842164338082910621964526147046121261503480427771408357558641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5effa350a42316c44906b1c143bb999c75787070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1919 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akce.rent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akce.svet-svitidel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcie.rent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcie.svet-svietidiel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcio.lampak.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.allianz.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.email.bezvasport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.email.bezvasport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.energie.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.info.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mail.key4you.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.malfini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nea.frogies.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.3dden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.factcool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tptoner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.zmgroup.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.noutati.frogies.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.frogies.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.frogies.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.volkswagen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novita.frogies.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.offerte.luciamo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.promocje.liderlamp.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.promotii.luminam.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ru.dine4fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.sonderangebote.beleuchtung.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.sonderangebote.beleuchtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.tablycjakalorijnosti.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ujdonsagok.frogies.hu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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