qfl.de

Issued by R3

About this certificate

This digital certificate with serial number 03:73:6f:e9:e2:e8:4d:09:e9:9b:0b:a4:2d:cc:a2:3b:fb:bf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=qfl.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:73:6f:e9:e2:e8:4d:09:e9:9b:0b:a4:2d:cc:a2:3b:fb:bf
Serial Number (int): 300618088706118173972736485473162356325311
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 19:f1:7e:d1:8f:bb:a4:78:f1:ec:40:9a:99:cb:9f:00:0a:a8:9a:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:57:f2:8c:7e:31:ac:d7:f1:8f:e1:57:be:fb:ed:c7:2a:78:5b:c9
Fingerprint (sha256): 9e:97:5b:5b:52:6e:09:8c:17:f1:a1:76:fa:a8:ea:f6:df:e6:f5:94:be:8f:08:90:9d:9d:aa:03:b8:06:58:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate qfl.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qfl.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5goresolve.us
*.accessgoodsamsanjose.org
*.achiev3000.com
*.anastore.us
*.aryabhatta.us
*.bagholics.us
*.bambj.cc
*.bay-area-sports-blog.com
*.bkasen.us
*.bmvj.de
*.buitron.us
*.chainid.us
*.chefmichaelmullen.com
*.christian-cevaer.com
*.citouri.us
*.cleanwithcharlene.us
*.codetalkerworld.net
*.coinbasshelp.us
*.curriculumcorner.com
*.customessayswriting.us
*.dividingbyzero.us
*.dobreoszczedzanie.com
*.erinpadgettevents.com
*.ethopiaairlines.com
*.facfaebook.com
*.fitzssparekeys.com
*.greekgoodies.com.au
*.guncabinets.com.au
*.houseplant.com.au
*.journalistpresslounge.com
*.lapepitadelahuerta.com
*.larbrebizarre.com
*.lefty773.com
*.nakedspice.com.au
*.naturelcakmak.com
*.nikoshean.com
*.oldmastersindex.com
*.phonegear.com.au
*.qfl.de
*.screen.com.au
*.solar-systems-panels-30620.com
*.streamr.cc
*.teamviwwer.com
*.thegalleryat.com
*.whichwebdesign.com.au
*.xn--lateinlsungen-omb.de
*.xn--whrungsrechenr-5hb.de
*.xvq.de
*.ygu.de
*.yvh.de
5goresolve.us
accessgoodsamsanjose.org
achiev3000.com
anastore.us
aryabhatta.us
bagholics.us
bambj.cc
bay-area-sports-blog.com
bkasen.us
bmvj.de
buitron.us
chainid.us
chefmichaelmullen.com
christian-cevaer.com
citouri.us
cleanwithcharlene.us
codetalkerworld.net
coinbasshelp.us
curriculumcorner.com
customessayswriting.us
dividingbyzero.us
dobreoszczedzanie.com
erinpadgettevents.com
ethopiaairlines.com
facfaebook.com
fitzssparekeys.com
greekgoodies.com.au
guncabinets.com.au
houseplant.com.au
journalistpresslounge.com
lapepitadelahuerta.com
larbrebizarre.com
lefty773.com
nakedspice.com.au
naturelcakmak.com
nikoshean.com
oldmastersindex.com
phonegear.com.au
qfl.de
screen.com.au
solar-systems-panels-30620.com
streamr.cc
teamviwwer.com
thegalleryat.com
whichwebdesign.com.au
xn--lateinlsungen-omb.de
xn--whrungsrechenr-5hb.de
xvq.de
ygu.de
yvh.de

Other certificates including the domain name qfl.de

(limited to 100 certificates)
www.qfl.de
qfl.de
qfl.de
qfl.de
www.qfl.de
qfl.de
qfl.de
qfl.de
www.qfl.de

Certificate

The complete raw certificate details for qfl.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300618088706118173972736485473162356325311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 19:58:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 19:58:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qfl.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899448415831199544047487315858327054111450948051603246228057238241176231415381571765131558991869334468156053296578870596381330899839604621915245356045673637338341591585017697375501309524341937724870343198004183873610033512403833413479885169283371612477584652411003463387109350588708599397603251171180434529470562460783073531636943746206483738274548610145987297090848195123306444563386275136429415234099530475873753835595093520764939122415189902464176025818801600939852361471178168701864224108427071637390692837536929791151422074367541642770044124422610677836194187824757602910488511112561530605582135258891760878893075663491633735016878938217268816103652430237293330361960308897795083571931233070642691445105913689773622192546395447449458017016532304430978381093446759154399681664294597749748761339116164498221489308859444163389362564345026735157676622975644505420941263319619174220601787627030988815397639679947631157831845518968991425495068128645144579430533999721848509368439518428647317615104920680388718801083061434286693708766032533772373971042330501662294628205948186494771045951131376770189872864965665458224230132840912330393645972553750650477247554669949090352000356629888781377534098081576467342640311392657185615559709563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19f17ed18fbba478f1ec409a99cb9f000aa89a70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1906 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5goresolve.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accessgoodsamsanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achiev3000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anastore.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aryabhatta.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bagholics.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bambj.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bay-area-sports-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bkasen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmvj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buitron.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chainid.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chefmichaelmullen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christian-cevaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citouri.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleanwithcharlene.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codetalkerworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinbasshelp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curriculumcorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customessayswriting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dividingbyzero.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dobreoszczedzanie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erinpadgettevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethopiaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facfaebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitzssparekeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greekgoodies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guncabinets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houseplant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.journalistpresslounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapepitadelahuerta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larbrebizarre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lefty773.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakedspice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturelcakmak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikoshean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldmastersindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phonegear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qfl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.screen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solar-systems-panels-30620.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamr.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamviwwer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegalleryat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichwebdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lateinlsungen-omb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--whrungsrechenr-5hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ygu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yvh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5goresolve.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessgoodsamsanjose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achiev3000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anastore.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aryabhatta.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagholics.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bambj.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay-area-sports-blog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkasen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmvj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buitron.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainid.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefmichaelmullen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christian-cevaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citouri.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanwithcharlene.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codetalkerworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinbasshelp.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curriculumcorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customessayswriting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dividingbyzero.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dobreoszczedzanie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erinpadgettevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethopiaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facfaebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitzssparekeys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greekgoodies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guncabinets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseplant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalistpresslounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapepitadelahuerta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larbrebizarre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefty773.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakedspice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturelcakmak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikoshean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldmastersindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonegear.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qfl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-systems-panels-30620.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamr.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamviwwer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegalleryat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichwebdesign.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lateinlsungen-omb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--whrungsrechenr-5hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvh.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c6a1f685800000403004730450220049312214e7fe1f5cce68a2f40f5f5cc2712964f7b321cb5187e0c119870da38022100b1d51dbf01ed9e07ab88720c156b1335d52f5f644469c23bb84a93ab63858f350077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c6a1f68910000040300483046022100cc41db651b0f672e298bc986621c747808d923ad958ec16026cba32d69648b7f022100d1ed8b8960540ecbb82148aacc51bcdb928b05f6321353804d256e69c74fb7f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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