fit-for-life-diaet.de

Issued by R3

About this certificate

This digital certificate with serial number 03:6c:0d:c2:b8:8c:65:95:e1:27:ec:c9:74:89:69:e3:a4:cd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fit-for-life-diaet.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6c:0d:c2:b8:8c:65:95:e1:27:ec:c9:74:89:69:e3:a4:cd
Serial Number (int): 298105644435364602659936228180720741491917
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:51:70:b4:15:74:4f:9a:48:33:aa:37:f5:cf:9c:8b:5f:50:34:d5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:8c:d6:24:c2:5b:86:f7:33:da:77:2e:91:a6:22:00:db:86:7c:4d
Fingerprint (sha256): 95:df:85:62:02:d6:cc:3c:c9:94:2a:1a:f8:46:b5:b8:41:bc:c2:84:65:d6:dc:31:d4:4e:88:9d:d9:06:01:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fit-for-life-diaet.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fit-for-life-diaet.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.153538.com
*.aklmko.com
*.astrooeogie.de
*.betteremployment.com.au
*.bollywood4u.me
*.bundlesjd.com
*.chronisches-nasenbluten.de
*.coin2024.net
*.creditcardcompanies.au
*.davivinda.com
*.denovo.com.au
*.digiplus.us
*.divertikel-im-darm.de
*.dxdzrj5o.xyz
*.fit-for-life-diaet.de
*.flachruecken.de
*.funun.tv
*.gliederguerteldystrophie.de
*.gruer-star.de
*.gwepoxy.com.au
*.historywords.com.au
*.k9protraining.com.au
*.karpaltunnelsyndrom-homoeopathie.de
*.kidsshop.com.au
*.live-baits.net.au
*.mybigpointtennis.de
*.mychartardenhealth.com
*.naturopathcourses.com.au
*.oahu.au
*.pharmacies.au
*.phpotopea.com
*.poleiminze.de
*.returningtowork.com.au
*.satisfaction.au
*.scanies.com
*.stablemate.net.au
*.startoolssupply.com
*.stepsiblinggrab.com
*.sxynode.top
*.tarifchack24.de
*.telephonedictionaries.us
*.televisionstands.com.au
*.unfallversicherun.de
*.verfaerbte-zaehne.de
*.vob.com.au
*.warehouseoutlet.com.au
*.welche-globuli.de
*.willhabe7n.at
*.zappelin-globuli.de
*.zwerchfelllaehmung.de
153538.com
aklmko.com
astrooeogie.de
betteremployment.com.au
bollywood4u.me
bundlesjd.com
chronisches-nasenbluten.de
coin2024.net
creditcardcompanies.au
davivinda.com
denovo.com.au
digiplus.us
divertikel-im-darm.de
dxdzrj5o.xyz
fit-for-life-diaet.de
flachruecken.de
funun.tv
gliederguerteldystrophie.de
gruer-star.de
gwepoxy.com.au
historywords.com.au
k9protraining.com.au
karpaltunnelsyndrom-homoeopathie.de
kidsshop.com.au
live-baits.net.au
mybigpointtennis.de
mychartardenhealth.com
naturopathcourses.com.au
oahu.au
pharmacies.au
phpotopea.com
poleiminze.de
returningtowork.com.au
satisfaction.au
scanies.com
stablemate.net.au
startoolssupply.com
stepsiblinggrab.com
sxynode.top
tarifchack24.de
telephonedictionaries.us
televisionstands.com.au
unfallversicherun.de
verfaerbte-zaehne.de
vob.com.au
warehouseoutlet.com.au
welche-globuli.de
willhabe7n.at
zappelin-globuli.de
zwerchfelllaehmung.de

Other certificates including the domain name fit-for-life-diaet.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for fit-for-life-diaet.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298105644435364602659936228180720741491917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 03:05:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 03:05:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fit-for-life-diaet.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819732338175134321391481778918451190686652074206245898542760959358954668522052165740384462565069274763045043692566523929205749609152165791763415212236292829414743441068218172837027845842569649515896035213572688680168373530448936740879591313137173886526013934066677486915765966845075185460486798688797206930095159063924529587360425397075435801923593188262756361254696622766250352247102747419787793722232995137773138566310571830377373289215579952827050151102468881562978727223488553751158961783729739912987329799430855976951245673839774473845935794921834085621791017745187572224320368883839153121091179005348478585124862196583628642707567065301297599410673950824421042468874217399873472568606066595318085219666705430318346045045149300620414856128356173018148283083453178799455166284930180414732990208417871508227881074794785419125905304981241072362714989477145728402259890468180323600435385547812572932895912201234913598601718879272062728242814849604264048364950296083660194841586053768564390884276702896019725382833089390940932888056855946466122848117525988776027820268485770778807283123764476128855328009308180009291136655666262219905175996128617874243824405935327244546978169502830797321325428562672237642061621457659943283085857677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f5170b415744f9a4833aa37f5cf9c8b5f5034d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1998 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.153538.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aklmko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrooeogie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betteremployment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bollywood4u.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bundlesjd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chronisches-nasenbluten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coin2024.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditcardcompanies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davivinda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denovo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiplus.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divertikel-im-darm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxdzrj5o.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fit-for-life-diaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flachruecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funun.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gliederguerteldystrophie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruer-star.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwepoxy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historywords.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k9protraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karpaltunnelsyndrom-homoeopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidsshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-baits.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybigpointtennis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mychartardenhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturopathcourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oahu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmacies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phpotopea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poleiminze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.returningtowork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satisfaction.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stablemate.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startoolssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stepsiblinggrab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sxynode.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarifchack24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telephonedictionaries.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.televisionstands.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unfallversicherun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verfaerbte-zaehne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warehouseoutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welche-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willhabe7n.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zappelin-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zwerchfelllaehmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '153538.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aklmko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrooeogie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betteremployment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bollywood4u.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundlesjd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronisches-nasenbluten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coin2024.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardcompanies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davivinda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denovo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiplus.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divertikel-im-darm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxdzrj5o.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fit-for-life-diaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flachruecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funun.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gliederguerteldystrophie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruer-star.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwepoxy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historywords.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k9protraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karpaltunnelsyndrom-homoeopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-baits.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybigpointtennis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychartardenhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturopathcourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oahu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpotopea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poleiminze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returningtowork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satisfaction.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stablemate.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startoolssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepsiblinggrab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxynode.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifchack24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telephonedictionaries.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televisionstands.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfallversicherun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verfaerbte-zaehne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouseoutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welche-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willhabe7n.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zappelin-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwerchfelllaehmung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e35fc35430000040300483046022100bf80e8eb844b8b7c40c0dab8c17917f7b7e07b3087ea556a3ff616b55d703ba7022100d922f7d4b3a48e688f71a84ece4d06cb46f11ec454bd265d0053425fcefbb30c007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e35fc355b0000040300483046022100f150cd27647955700569cb4e90d0839c9cc07d4ea4f4624a5798c0436178ca12022100bc09b4712728f2886503b29f47d43cba1773c7e4f85676cc60ee6a13bf1e381d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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