xfs.de

Issued by R3

About this certificate

This digital certificate with serial number 03:43:fc:79:4b:07:f6:97:e2:d3:3d:56:69:b6:71:b5:b6:8e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xfs.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:fc:79:4b:07:f6:97:e2:d3:3d:56:69:b6:71:b5:b6:8e
Serial Number (int): 284471371623652932848874061594292427011726
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:c2:6d:32:4b:c8:2e:e7:47:eb:f5:db:f5:46:16:a8:9a:28:13:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:1a:fc:2a:9e:41:65:e9:92:08:3a:93:61:ac:3a:ed:07:44:2c:e0
Fingerprint (sha256): a3:3a:53:38:6a:1d:1c:9b:b5:f1:08:06:d2:83:be:0d:84:6e:2b:e8:df:7c:a4:23:25:82:3e:db:dd:71:91:7c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xfs.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xfs.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adictoaldeporte.com
*.altanyalitim.com
*.atlasbrainspinecr.com
*.baskentyenimahalleveteriner.com
*.bourrsodomaine.com
*.cafemayakovsky.com
*.carpinteriahernandez.com
*.cpl33.org
*.customer-perfectfit.com
*.digibies.com
*.digitaltechnie.com
*.drluizsergiotatsch.com
*.egitimsokagi.com
*.erdoganonal.com
*.eruditecollections.net
*.fireflybrigade.org
*.fortunexchangetrade.com
*.ginkgo-blatt.de
*.gma-foodhuggers.com
*.gstpractice.com
*.induktionsfeld.de
*.keylimetree.com
*.kierstenluisrealtor.com
*.ljo.de
*.lkb.de
*.llf.de
*.llw.de
*.lnf.de
*.lnu.de
*.manawatumotors.com
*.masarbeit.de
*.myhindidigital.com
*.nextgenerationaffiliate.com
*.nilmovies.com
*.officeproperty.com.au
*.onlysahres.net
*.papanjayaraya.com
*.photoshop-bg.net
*.pimples.de
*.preisvergleixh.de
*.seketaerin.de
*.soguge.com
*.stuffsports.com
*.trade-horizon.com
*.uploadmydoc.com
*.viposhop.com
*.what-a.info
*.xfs.de
*.xn--fremwrter-47a.de
*.zeitumrechner.de
adictoaldeporte.com
altanyalitim.com
atlasbrainspinecr.com
baskentyenimahalleveteriner.com
bourrsodomaine.com
cafemayakovsky.com
carpinteriahernandez.com
cpl33.org
customer-perfectfit.com
digibies.com
digitaltechnie.com
drluizsergiotatsch.com
egitimsokagi.com
erdoganonal.com
eruditecollections.net
fireflybrigade.org
fortunexchangetrade.com
ginkgo-blatt.de
gma-foodhuggers.com
gstpractice.com
induktionsfeld.de
keylimetree.com
kierstenluisrealtor.com
ljo.de
lkb.de
llf.de
llw.de
lnf.de
lnu.de
manawatumotors.com
masarbeit.de
myhindidigital.com
nextgenerationaffiliate.com
nilmovies.com
officeproperty.com.au
onlysahres.net
papanjayaraya.com
photoshop-bg.net
pimples.de
preisvergleixh.de
seketaerin.de
soguge.com
stuffsports.com
trade-horizon.com
uploadmydoc.com
viposhop.com
what-a.info
xfs.de
xn--fremwrter-47a.de
zeitumrechner.de

Other certificates including the domain name xfs.de

(limited to 100 certificates)
guwan.icu
xfs.de
xfs.de
allergies.com.au
xfs.de
xfs.de
thecountryhouse.com.au
xfs.de
xfs.de
zd.co.za
xfs.de
mariott.com.br
xfs.de

Certificate

The complete raw certificate details for xfs.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284471371623652932848874061594292427011726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 19:03:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 19:03:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xfs.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881662936865878746847909431110259095265840625667597615922904002973020071364818383746176582530403451010695488019450121946618848720288599804242170429267504604077855450361574989857563566717284082749779898062788407064566614317092394892733175936823496588052041801302162528622745459439198570560788336774792111405355627220065421700778237686497443845108284723949782813570319908963309237221144526714152694939294169878406167511159781018667912689735803602385022754860570900565918388952043335499239778363611439875347989783491987457323736182643147106064959616820364285460353467084732562163601203996091328752554636365098324088589401171482726202513081716817313327729585816222237851804677900139671918457320714437773181866575641754862772650417488453922307403157069509990138767460881160599798261483861614824131629573789066171802665923680859590861609644561671022575590697645637417829580876854180347827802737699252509220952717497648710172810855694141637550654330512364492962218043667069323530819362333592168931639625242099532944898389089334739408210453454471999476382215218646104885993746346393715442204274410050146285115202083090558069925512481297491734550037151018765450274593928180824698912319190778102080495140314376187946957135938872980090851297737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fc26d324bc82ee747ebf5dbf54616a89a28133e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1870 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adictoaldeporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altanyalitim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlasbrainspinecr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baskentyenimahalleveteriner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bourrsodomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafemayakovsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carpinteriahernandez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpl33.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer-perfectfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digibies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitaltechnie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drluizsergiotatsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egitimsokagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erdoganonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eruditecollections.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fireflybrigade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortunexchangetrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ginkgo-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gma-foodhuggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gstpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.induktionsfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keylimetree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kierstenluisrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ljo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manawatumotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masarbeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhindidigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextgenerationaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officeproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlysahres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papanjayaraya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photoshop-bg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimples.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preisvergleixh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seketaerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soguge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade-horizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uploadmydoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viposhop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.what-a.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremwrter-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeitumrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adictoaldeporte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altanyalitim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlasbrainspinecr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baskentyenimahalleveteriner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourrsodomaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafemayakovsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpinteriahernandez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpl33.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-perfectfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digibies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaltechnie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drluizsergiotatsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egitimsokagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erdoganonal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eruditecollections.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fireflybrigade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortunexchangetrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginkgo-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gma-foodhuggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gstpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'induktionsfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keylimetree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kierstenluisrealtor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatumotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masarbeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhindidigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextgenerationaffiliate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlysahres.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanjayaraya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshop-bg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimples.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preisvergleixh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seketaerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soguge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuffsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade-horizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploadmydoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viposhop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'what-a.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremwrter-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeitumrechner.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b257cd46a0000040300473045022011392a37d2df331007447a3d152dd3f6f843c6f528d5753e8cffd0b5aa19030e022100c7c347fea72903f6bbfcba8480bf1aad4ce5990c28bff8d52a84b69864383379007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b257cd45e0000040300473045022036e450e7f1a6f988affffd7047fce1fb021831e4698842b2bedf1b2cd4f4529f022100e6df035347c24b4fef1ba64448e58c28ea561586e4871ce4d8e028970ba347eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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