leistenbruckh.de

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:8b:18:9b:2b:81:2e:2d:2d:c2:29:56:51:86:43:e4:1b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=leistenbruckh.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:8b:18:9b:2b:81:2e:2d:2d:c2:29:56:51:86:43:e4:1b
Serial Number (int): 358842505188428127576921074182604949021723
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 67:8d:83:47:5d:74:26:e5:58:57:b5:c3:fd:2c:09:b6:91:74:5b:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 27:46:c3:df:6a:80:92:df:dd:05:d7:8f:df:d0:b1:4c:0a:c3:a4:18
Fingerprint (sha256): 9a:8f:e0:b5:8d:cc:e0:ef:37:f2:8b:40:02:9d:a1:32:35:a9:e0:bd:f6:b6:c4:86:42:1d:a5:8d:48:1b:2f:d2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate leistenbruckh.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leistenbruckh.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.30000-euro-kredit.de
*.audibnk.de
*.beermug.com.au
*.beryltime.com
*.billigfluegeg.de
*.catapults.com.au
*.cruiseshipjob.com.au
*.cybersex.eu
*.defibrillathor.de
*.degicht.de
*.denlednangluong.com
*.eisenmangell.de
*.fairycake.com.au
*.fuxs8.cc
*.gehaltrecher.de
*.haemorrhoisen.de
*.haemorrhouden.de
*.herzinfarktd.de
*.hi-passion.net
*.jaemorrhoiden.de
*.jodakne.de
*.karpaltunnelsyndroms.de
*.kontakktlinsen.de
*.legacyboutiquenic.com
*.leistenbruc.de
*.leistenbruckh.de
*.natalviasatelitehughesnet.com.br
*.nervus-ulnaris.de
*.netdoctro.de
*.peku.nl
*.pelis24.tv
*.portesbaratos.com
*.seelische-krankheit.de
*.sharktenk.com
*.simfihnity.de
*.simnfinity.de
*.siumfinity.de
*.skelettdysplasie.de
*.skhwangerschaft.de
*.strptokokken.de
*.sulfitoxidase.de
*.urtikaia.de
*.woningzoekenden.nl
*.xkpfpt.com
*.xn--gynkologischer-stuhl-dzb.de
*.xn--heilkriter-v5a.de
*.xn--kunstschtzer-ncb.de
*.xn--moschuskrbis-klb.de
*.xn--rmersalat-07a.de
*.xn--vorzeitig-kndigen-d3b.de
30000-euro-kredit.de
audibnk.de
beermug.com.au
beryltime.com
billigfluegeg.de
catapults.com.au
cruiseshipjob.com.au
cybersex.eu
defibrillathor.de
degicht.de
denlednangluong.com
eisenmangell.de
fairycake.com.au
fuxs8.cc
gehaltrecher.de
haemorrhoisen.de
haemorrhouden.de
herzinfarktd.de
hi-passion.net
jaemorrhoiden.de
jodakne.de
karpaltunnelsyndroms.de
kontakktlinsen.de
legacyboutiquenic.com
leistenbruc.de
leistenbruckh.de
natalviasatelitehughesnet.com.br
nervus-ulnaris.de
netdoctro.de
peku.nl
pelis24.tv
portesbaratos.com
seelische-krankheit.de
sharktenk.com
simfihnity.de
simnfinity.de
siumfinity.de
skelettdysplasie.de
skhwangerschaft.de
strptokokken.de
sulfitoxidase.de
urtikaia.de
woningzoekenden.nl
xkpfpt.com
xn--gynkologischer-stuhl-dzb.de
xn--heilkriter-v5a.de
xn--kunstschtzer-ncb.de
xn--moschuskrbis-klb.de
xn--rmersalat-07a.de
xn--vorzeitig-kndigen-d3b.de

Other certificates including the domain name leistenbruckh.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for leistenbruckh.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358842505188428127576921074182604949021723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 20:54:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 20:54:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leistenbruckh.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875219021350875961135427237673875944351485152597950934664224405774623498668956445515298405421609009107287862376377249437398225590079370905270124531455257018355357828592745534404419769251005128104721949327287796490584527788158579971116161190695270721521253620541942083243648440981852840812507930133905700155499309528531149909258004261156038005943216215618346212609706519976449399415776847010805063779817781554595500534253067359565977546000224439954189429264988241165607578747838817360192516733466753065375858800338581400720406005332936803180231752917035791109501135713380994696364912167373745082382888747532666732656466098329485019084608678952182509426922401984732547095025407268556867968654250363674390558233888488142440660645600825064163086232614568935250523788351329862698247871627802983772764726561067381809287459068249223343213502783830738523027436806105399809865750524883501856219661882107314239258398664006043903023749391960994481004179874302747845976976845219359075461350920137718853869278518203817245796273039176580506441678893104042696281452861414145416814075402617169572491699344881305844824603699532730042441211004530857793004168262906801348073422232188822240313782177993944543019973823487147197640367874370872286541636619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							678d83475d7426e55857b5c3fd2c09b691745b29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.30000-euro-kredit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audibnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beermug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beryltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigfluegeg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catapults.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruiseshipjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cybersex.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defibrillathor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.degicht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denlednangluong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eisenmangell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairycake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuxs8.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gehaltrecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemorrhoisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemorrhouden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herzinfarktd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hi-passion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaemorrhoiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jodakne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karpaltunnelsyndroms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kontakktlinsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacyboutiquenic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leistenbruc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leistenbruckh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natalviasatelitehughesnet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nervus-ulnaris.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netdoctro.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peku.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelis24.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portesbaratos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seelische-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharktenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simfihnity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simnfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siumfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skelettdysplasie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skhwangerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strptokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sulfitoxidase.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urtikaia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woningzoekenden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xkpfpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gynkologischer-stuhl-dzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--heilkriter-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kunstschtzer-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--moschuskrbis-klb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rmersalat-07a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vorzeitig-kndigen-d3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '30000-euro-kredit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audibnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beermug.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beryltime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigfluegeg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catapults.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruiseshipjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybersex.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defibrillathor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degicht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denlednangluong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenmangell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairycake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuxs8.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gehaltrecher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemorrhoisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemorrhouden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herzinfarktd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi-passion.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaemorrhoiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodakne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karpaltunnelsyndroms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kontakktlinsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyboutiquenic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leistenbruc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leistenbruckh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natalviasatelitehughesnet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nervus-ulnaris.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netdoctro.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peku.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelis24.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portesbaratos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seelische-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharktenk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simfihnity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simnfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siumfinity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skelettdysplasie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skhwangerschaft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strptokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sulfitoxidase.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urtikaia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woningzoekenden.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xkpfpt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gynkologischer-stuhl-dzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--heilkriter-v5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kunstschtzer-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--moschuskrbis-klb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rmersalat-07a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vorzeitig-kndigen-d3b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc5872c410000040300483046022100e42767bb75b4350c140c7e5aa2720584d5418fd2aa7f6b3c3f1058fedace556b022100ec69157ba226c90a85c454dbdf1954d56299015c63016264c4f6a23043075a3f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bc5872c6c0000040300473045022100f189b9a11b0a3c717c423fc1331ee2e397761d6d96749f5e4cb39e2549cf2a310220719c1605a640e116fda6c5c61b86c660343123d1f64c336609f5bf44140ea217
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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