xn--bliigflge-w9a.de
Issued by R3
About this certificate
This digital certificate with serial number 03:41:73:a4:08:2a:f4:18:2d:6c:bd:0b:a4:34:92:2f:4c:e6 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=xn--bliigflge-w9a.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:41:73:a4:08:2a:f4:18:2d:6c:bd:0b:a4:34:92:2f:4c:e6Serial Number (int): 283608924567004208328046971573507323808998
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 75:59:97:71:29:5f:10:d2:f0:a8:da:64:ad:eb:43:40:84:23:0d:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 76:7f:5d:6d:8a:72:6d:3d:ac:1e:8f:b7:6d:16:27:a7:23:a6:8f:56
Fingerprint (sha256): 99:a2:9f:40:3a:83:34:79:31:2e:51:ad:38:9f:cf:8b:ca:1a:94:4f:1f:85:43:f7:26:d8:4b:72:bd:46:51:5b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate xn--bliigflge-w9a.de
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xn--bliigflge-w9a.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.3dexcellent.com
*.4120weddings.com
*.action.com.br
*.administracionparatodos.com
*.affyield.com
*.applyforloans.com.au
*.aqc.de
*.bb1.co
*.bedfordtx.org
*.breast-cancer-treatment-47033.com
*.buy-supplement.online
*.cakepopmaker.com
*.covid19kmchallenge.com
*.ezx.de
*.frauentage.de
*.fresnoheights.com
*.fsychurchofjesuschrist.org
*.gamesun.cc
*.ganetwist.de
*.grand-mal-anfall.de
*.haardhout-stroe.com
*.habibullahestate.com
*.hausfrauengeschichten.de
*.inkbank.it
*.noon10.net
*.paradiesbilder.de
*.pissoar.de
*.polenporno.de
*.preissuchmaschime.de
*.project-free-tv.ch
*.promptcurl.com
*.santoshproperty.com
*.shreenathtravels.com
*.sixtyfourbit.org
*.teaspoons.de
*.telltaleheartbeat.com
*.tr35brasil.com
*.transfermaarkt.de
*.ttd.com.au
*.ufermatten.de
*.washingtonians.org
*.wesleyblankmohel.com
*.wwwcrowdfunder.co.uk
*.wwwwertgarantie.de
*.xn--bliigflge-w9a.de
*.xn--cckh2d3csn.net
*.xn--grkrbe-bua0m.de
*.xn--solarkhlschrank-4vb.de
*.xn--www-fhre-4za.de
*.xn--zahnbrstenhalter-nzb.de
3dexcellent.com
4120weddings.com
action.com.br
administracionparatodos.com
affyield.com
applyforloans.com.au
aqc.de
bb1.co
bedfordtx.org
breast-cancer-treatment-47033.com
buy-supplement.online
cakepopmaker.com
covid19kmchallenge.com
ezx.de
frauentage.de
fresnoheights.com
fsychurchofjesuschrist.org
gamesun.cc
ganetwist.de
grand-mal-anfall.de
haardhout-stroe.com
habibullahestate.com
hausfrauengeschichten.de
inkbank.it
noon10.net
paradiesbilder.de
pissoar.de
polenporno.de
preissuchmaschime.de
project-free-tv.ch
promptcurl.com
santoshproperty.com
shreenathtravels.com
sixtyfourbit.org
teaspoons.de
telltaleheartbeat.com
tr35brasil.com
transfermaarkt.de
ttd.com.au
ufermatten.de
washingtonians.org
wesleyblankmohel.com
wwwcrowdfunder.co.uk
wwwwertgarantie.de
xn--bliigflge-w9a.de
xn--cckh2d3csn.net
xn--grkrbe-bua0m.de
xn--solarkhlschrank-4vb.de
xn--www-fhre-4za.de
xn--zahnbrstenhalter-nzb.de
*.4120weddings.com
*.action.com.br
*.administracionparatodos.com
*.affyield.com
*.applyforloans.com.au
*.aqc.de
*.bb1.co
*.bedfordtx.org
*.breast-cancer-treatment-47033.com
*.buy-supplement.online
*.cakepopmaker.com
*.covid19kmchallenge.com
*.ezx.de
*.frauentage.de
*.fresnoheights.com
*.fsychurchofjesuschrist.org
*.gamesun.cc
*.ganetwist.de
*.grand-mal-anfall.de
*.haardhout-stroe.com
*.habibullahestate.com
*.hausfrauengeschichten.de
*.inkbank.it
*.noon10.net
*.paradiesbilder.de
*.pissoar.de
*.polenporno.de
*.preissuchmaschime.de
*.project-free-tv.ch
*.promptcurl.com
*.santoshproperty.com
*.shreenathtravels.com
*.sixtyfourbit.org
*.teaspoons.de
*.telltaleheartbeat.com
*.tr35brasil.com
*.transfermaarkt.de
*.ttd.com.au
*.ufermatten.de
*.washingtonians.org
*.wesleyblankmohel.com
*.wwwcrowdfunder.co.uk
*.wwwwertgarantie.de
*.xn--bliigflge-w9a.de
*.xn--cckh2d3csn.net
*.xn--grkrbe-bua0m.de
*.xn--solarkhlschrank-4vb.de
*.xn--www-fhre-4za.de
*.xn--zahnbrstenhalter-nzb.de
3dexcellent.com
4120weddings.com
action.com.br
administracionparatodos.com
affyield.com
applyforloans.com.au
aqc.de
bb1.co
bedfordtx.org
breast-cancer-treatment-47033.com
buy-supplement.online
cakepopmaker.com
covid19kmchallenge.com
ezx.de
frauentage.de
fresnoheights.com
fsychurchofjesuschrist.org
gamesun.cc
ganetwist.de
grand-mal-anfall.de
haardhout-stroe.com
habibullahestate.com
hausfrauengeschichten.de
inkbank.it
noon10.net
paradiesbilder.de
pissoar.de
polenporno.de
preissuchmaschime.de
project-free-tv.ch
promptcurl.com
santoshproperty.com
shreenathtravels.com
sixtyfourbit.org
teaspoons.de
telltaleheartbeat.com
tr35brasil.com
transfermaarkt.de
ttd.com.au
ufermatten.de
washingtonians.org
wesleyblankmohel.com
wwwcrowdfunder.co.uk
wwwwertgarantie.de
xn--bliigflge-w9a.de
xn--cckh2d3csn.net
xn--grkrbe-bua0m.de
xn--solarkhlschrank-4vb.de
xn--www-fhre-4za.de
xn--zahnbrstenhalter-nzb.de
Other certificates including the domain name xn--bliigflge-w9a.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for xn--bliigflge-w9a.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINqzCCDJOgAwIBAgISA0FzpAgq9BgtbL0LpDSSL0zmMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDIyMjE3MDFaFw0yNDA3MDEyMjE3MDBaMB8xHTAbBgNVBAMT FHhuLS1ibGlpZ2ZsZ2UtdzlhLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEArDRh4p3GL2FH5HVjO2a1DkDXk01QdHEm7YkmGWKr+/vhql/zGVwq+xqw DBO5DpLWNBTB/GJUQDmNSlzIDU8/Fn78hSXCNsBiwaJxUIYvfdOlY4AjjwK80F96 skytJ6TVOPSFlaPA6zkDTHyWJsxeB2oaHi1e3pNSZDNjkiVxgSOMZffoPytR6LrA m9rb7wjHhJONvG+rufhRLDN6Y0c6ryIOguwN/vfilYzmw1K7Ic8VIRaOtcHZjc1d QG6N0nsBuynoWItgPfGTvp4XN9C2vcQryhlmtTgY2npiv7zgloD3oXzBOwAcCA5H gnNMzEk8my+z4JvBhfjCBXWanjcXoXgxU/TAXDc1o0tT0gabk5PClFHcc+eGLlDw 0ic6mcLbPSfjvgsGFsMq5x+NMz397XVkp8QXB16653EnJ6wX8TJxcj33O8LYZ9GC Z1vubIeplllhoW5f9Kk4QU44iSxanrvY5G6zlkRhOUzQMWpzf/KgD0KQozNhL8go l7WYR2avrz3UsD3DtvJJQg12HWOGyFs/ab6bQRwsdxLKTeT+n9/54fM6OBXsFtWw xzX6rZcZ1xgynZO4neLREo9WISXR10eHlbBQAhOEyKL1OA7YZGjBLgYX/FWN5ulD IZP7dI6iZcrJ+b4l+seonkR0EGemBtg6Ii3Nli6X+slTzxGyZ/ECAwEAAaOCCcww ggnIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUdVmXcSlfENLwqNpkretDQIQjDVUw HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggfTBgNVHREEggfKMIIHxoIRKi4zZGV4 Y2VsbGVudC5jb22CEiouNDEyMHdlZGRpbmdzLmNvbYIPKi5hY3Rpb24uY29tLmJy gh0qLmFkbWluaXN0cmFjaW9ucGFyYXRvZG9zLmNvbYIOKi5hZmZ5aWVsZC5jb22C FiouYXBwbHlmb3Jsb2Fucy5jb20uYXWCCCouYXFjLmRlgggqLmJiMS5jb4IPKi5i ZWRmb3JkdHgub3JngiMqLmJyZWFzdC1jYW5jZXItdHJlYXRtZW50LTQ3MDMzLmNv bYIXKi5idXktc3VwcGxlbWVudC5vbmxpbmWCEiouY2FrZXBvcG1ha2VyLmNvbYIY Ki5jb3ZpZDE5a21jaGFsbGVuZ2UuY29tgggqLmV6eC5kZYIPKi5mcmF1ZW50YWdl LmRlghMqLmZyZXNub2hlaWdodHMuY29tghwqLmZzeWNodXJjaG9mamVzdXNjaHJp c3Qub3JnggwqLmdhbWVzdW4uY2OCDiouZ2FuZXR3aXN0LmRlghUqLmdyYW5kLW1h bC1hbmZhbGwuZGWCFSouaGFhcmRob3V0LXN0cm9lLmNvbYIWKi5oYWJpYnVsbGFo ZXN0YXRlLmNvbYIaKi5oYXVzZnJhdWVuZ2VzY2hpY2h0ZW4uZGWCDCouaW5rYmFu ay5pdIIMKi5ub29uMTAubmV0ghMqLnBhcmFkaWVzYmlsZGVyLmRlggwqLnBpc3Nv YXIuZGWCDyoucG9sZW5wb3Juby5kZYIWKi5wcmVpc3N1Y2htYXNjaGltZS5kZYIU Ki5wcm9qZWN0LWZyZWUtdHYuY2iCECoucHJvbXB0Y3VybC5jb22CFSouc2FudG9z aHByb3BlcnR5LmNvbYIWKi5zaHJlZW5hdGh0cmF2ZWxzLmNvbYISKi5zaXh0eWZv dXJiaXQub3Jngg4qLnRlYXNwb29ucy5kZYIXKi50ZWxsdGFsZWhlYXJ0YmVhdC5j b22CECoudHIzNWJyYXNpbC5jb22CEyoudHJhbnNmZXJtYWFya3QuZGWCDCoudHRk LmNvbS5hdYIPKi51ZmVybWF0dGVuLmRlghQqLndhc2hpbmd0b25pYW5zLm9yZ4IW Ki53ZXNsZXlibGFua21vaGVsLmNvbYIWKi53d3djcm93ZGZ1bmRlci5jby51a4IU Ki53d3d3ZXJ0Z2FyYW50aWUuZGWCFioueG4tLWJsaWlnZmxnZS13OWEuZGWCFCou eG4tLWNja2gyZDNjc24ubmV0ghUqLnhuLS1ncmtyYmUtYnVhMG0uZGWCHCoueG4t LXNvbGFya2hsc2NocmFuay00dmIuZGWCFSoueG4tLXd3dy1maHJlLTR6YS5kZYId Ki54bi0temFobmJyc3RlbmhhbHRlci1uemIuZGWCDzNkZXhjZWxsZW50LmNvbYIQ NDEyMHdlZGRpbmdzLmNvbYINYWN0aW9uLmNvbS5icoIbYWRtaW5pc3RyYWNpb25w YXJhdG9kb3MuY29tggxhZmZ5aWVsZC5jb22CFGFwcGx5Zm9ybG9hbnMuY29tLmF1 ggZhcWMuZGWCBmJiMS5jb4INYmVkZm9yZHR4Lm9yZ4IhYnJlYXN0LWNhbmNlci10 cmVhdG1lbnQtNDcwMzMuY29tghVidXktc3VwcGxlbWVudC5vbmxpbmWCEGNha2Vw b3BtYWtlci5jb22CFmNvdmlkMTlrbWNoYWxsZW5nZS5jb22CBmV6eC5kZYINZnJh dWVudGFnZS5kZYIRZnJlc25vaGVpZ2h0cy5jb22CGmZzeWNodXJjaG9mamVzdXNj aHJpc3Qub3JnggpnYW1lc3VuLmNjggxnYW5ldHdpc3QuZGWCE2dyYW5kLW1hbC1h bmZhbGwuZGWCE2hhYXJkaG91dC1zdHJvZS5jb22CFGhhYmlidWxsYWhlc3RhdGUu Y29tghhoYXVzZnJhdWVuZ2VzY2hpY2h0ZW4uZGWCCmlua2JhbmsuaXSCCm5vb24x MC5uZXSCEXBhcmFkaWVzYmlsZGVyLmRlggpwaXNzb2FyLmRlgg1wb2xlbnBvcm5v LmRlghRwcmVpc3N1Y2htYXNjaGltZS5kZYIScHJvamVjdC1mcmVlLXR2LmNogg5w cm9tcHRjdXJsLmNvbYITc2FudG9zaHByb3BlcnR5LmNvbYIUc2hyZWVuYXRodHJh dmVscy5jb22CEHNpeHR5Zm91cmJpdC5vcmeCDHRlYXNwb29ucy5kZYIVdGVsbHRh bGVoZWFydGJlYXQuY29tgg50cjM1YnJhc2lsLmNvbYIRdHJhbnNmZXJtYWFya3Qu ZGWCCnR0ZC5jb20uYXWCDXVmZXJtYXR0ZW4uZGWCEndhc2hpbmd0b25pYW5zLm9y Z4IUd2VzbGV5Ymxhbmttb2hlbC5jb22CFHd3d2Nyb3dkZnVuZGVyLmNvLnVrghJ3 d3d3ZXJ0Z2FyYW50aWUuZGWCFHhuLS1ibGlpZ2ZsZ2UtdzlhLmRlghJ4bi0tY2Nr aDJkM2Nzbi5uZXSCE3huLS1ncmtyYmUtYnVhMG0uZGWCGnhuLS1zb2xhcmtobHNj aHJhbmstNHZiLmRlghN4bi0td3d3LWZocmUtNHphLmRlght4bi0temFobmJyc3Rl bmhhbHRlci1uemIuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5 AgQCBIH1BIHyAPAAdQAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAA AY6hGgkNAAAEAwBGMEQCIH6gawB39UTXsOjCwYdwMZocIsy6qd1vlNQoe66YMZ48 AiAzHK5ugpep4f1BdHM3LTB3+e4hT3KTTf3DTgC4kgGZbAB3AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjqEaCPoAAAQDAEgwRgIhAKWN3pUyl5D1 wuKvYQUGIyuqFiJ9SfWCPOJhXtlEPivcAiEAra9wbkZjEqyXIs32A9Xfe/ilcovY GVmWWkYFC4st+bAwDQYJKoZIhvcNAQELBQADggEBAKCr6EaD9z/Ne9xhbe/A4/I0 Qk1k+IXsPYHELHcYknwG1vChKlJtCdR0VJH3l6HkEZlE2U4SGy+FUW7UsyYFDrwz DQI32pB0R/wXOMNOh2mFOOUW6hE9ONa7M8vI2rnsQcUFRYHmRXs0f33YuRFI8JxN 7PjTneIdAYr8rawIQjiRHNXrhvsbuPpQVFlhqTSJDbK420CJCxGA513lli6pLGMS n5J9llm7iyYUZul60x+99Tl8hgJQw7+alU0fcvRRCVs+44rEvuxxJ6OdFN7OP6Nh jewN1HhyDnnmfiyve0un6xjW4iJGEDpDA7qMOxYu0UUwZYYPuMmpLlpba2gRmS4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArDRh4p3GL2FH5HVjO2a1 DkDXk01QdHEm7YkmGWKr+/vhql/zGVwq+xqwDBO5DpLWNBTB/GJUQDmNSlzIDU8/ Fn78hSXCNsBiwaJxUIYvfdOlY4AjjwK80F96skytJ6TVOPSFlaPA6zkDTHyWJsxe B2oaHi1e3pNSZDNjkiVxgSOMZffoPytR6LrAm9rb7wjHhJONvG+rufhRLDN6Y0c6 ryIOguwN/vfilYzmw1K7Ic8VIRaOtcHZjc1dQG6N0nsBuynoWItgPfGTvp4XN9C2 vcQryhlmtTgY2npiv7zgloD3oXzBOwAcCA5HgnNMzEk8my+z4JvBhfjCBXWanjcX oXgxU/TAXDc1o0tT0gabk5PClFHcc+eGLlDw0ic6mcLbPSfjvgsGFsMq5x+NMz39 7XVkp8QXB16653EnJ6wX8TJxcj33O8LYZ9GCZ1vubIeplllhoW5f9Kk4QU44iSxa nrvY5G6zlkRhOUzQMWpzf/KgD0KQozNhL8gol7WYR2avrz3UsD3DtvJJQg12HWOG yFs/ab6bQRwsdxLKTeT+n9/54fM6OBXsFtWwxzX6rZcZ1xgynZO4neLREo9WISXR 10eHlbBQAhOEyKL1OA7YZGjBLgYX/FWN5ulDIZP7dI6iZcrJ+b4l+seonkR0EGem Btg6Ii3Nli6X+slTzxGyZ/ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 283608924567004208328046971573507323808998 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 22:17:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 22:17:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--bliigflge-w9a.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702533550797642531085353136365385353868110176219222466437727038005693332016798333025083862042061394653449805127874064046947863847417741282634538139910308107476728820178723444556531533378967667205605761704152737257442133923757609405584249816898560892929687290056680943463651872312718860735147176908692032640509602191317985200307857563473707317314448954429498501497169844999942623541722001384150950957762988524428994964842337228725085941873981903265453974076942216879238386901708779190991671747612956257314428107825573820304873784355879365892033674944719995870391035237730603198622259313314662103421606879378831330493462079355688490237486570526252593692108597181738390456194671268887688373268050742135509451419661574819442619234998828849314479677363173752375212960195147725490445076415149701722108950367814245257432825587460306679141227694750020103544523994803098035880096678568496409323910429265871627748681207920421586859096793083584639345446822535366909049076778755789599210641854030547371459354887434844427912425486286054296265356635242816246529611639586419550241751952180374799839718013251858985008364894572811371065084346924842669367378606573033046560118809865849248895489060472765052903952781161387742146319119665325982904117233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 75599771295f10d2f0a8da64adeb434084230d55 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1994 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dexcellent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4120weddings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.action.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.administracionparatodos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affyield.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applyforloans.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bb1.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedfordtx.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breast-cancer-treatment-47033.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buy-supplement.online' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cakepopmaker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covid19kmchallenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezx.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frauentage.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fresnoheights.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fsychurchofjesuschrist.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamesun.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganetwist.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grand-mal-anfall.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haardhout-stroe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habibullahestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hausfrauengeschichten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkbank.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noon10.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paradiesbilder.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pissoar.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polenporno.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preissuchmaschime.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-free-tv.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promptcurl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santoshproperty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shreenathtravels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixtyfourbit.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teaspoons.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telltaleheartbeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tr35brasil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transfermaarkt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttd.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ufermatten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.washingtonians.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wesleyblankmohel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcrowdfunder.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwertgarantie.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bliigflge-w9a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--cckh2d3csn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--grkrbe-bua0m.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--solarkhlschrank-4vb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--www-fhre-4za.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--zahnbrstenhalter-nzb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dexcellent.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4120weddings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'administracionparatodos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affyield.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applyforloans.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqc.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bb1.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedfordtx.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breast-cancer-treatment-47033.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy-supplement.online' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cakepopmaker.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19kmchallenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezx.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frauentage.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresnoheights.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsychurchofjesuschrist.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamesun.cc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganetwist.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grand-mal-anfall.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haardhout-stroe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habibullahestate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hausfrauengeschichten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkbank.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noon10.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradiesbilder.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pissoar.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polenporno.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preissuchmaschime.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project-free-tv.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promptcurl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santoshproperty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreenathtravels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixtyfourbit.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaspoons.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telltaleheartbeat.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr35brasil.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfermaarkt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttd.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufermatten.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonians.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesleyblankmohel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcrowdfunder.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwertgarantie.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bliigflge-w9a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cckh2d3csn.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--grkrbe-bua0m.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--solarkhlschrank-4vb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--www-fhre-4za.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--zahnbrstenhalter-nzb.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ea11a090d000004030046304402207ea06b0077f544d7b0e8c2c18770319a1c22ccbaa9dd6f94d4287bae98319e3c0220331cae6e8297a9e1fd417473372d3077f9ee214f72934dfdc34e00b89201996c00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea11a08fa0000040300483046022100a58dde95329790f5c2e2af610506232baa16227d49f5823ce2615ed9443e2bdc022100adaf706e466312ac9722cdf603d5df7bf8a5728bd81959965a46050b8b2df9b0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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