lucn.us

Issued by R3

About this certificate

This digital certificate with serial number 03:4d:e1:cd:67:4b:5b:20:09:92:46:4e:22:f6:1a:ac:64:c6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lucn.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:4d:e1:cd:67:4b:5b:20:09:92:46:4e:22:f6:1a:ac:64:c6
Serial Number (int): 287838742863159110569030186681284575388870
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:6f:a2:15:84:58:da:a2:78:9a:ae:80:23:f5:bb:70:34:0a:ea:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:8d:b6:e4:63:8a:cd:f9:64:0d:bf:69:af:d4:20:d7:aa:5b:64:0a
Fingerprint (sha256): a5:dd:1b:81:93:9f:3f:3d:90:01:62:9e:50:a1:ce:c5:13:b7:39:f4:7e:e7:e5:35:34:1f:d7:45:fb:8e:14:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lucn.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucn.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1300electrician.au
*.affordableautobody.net
*.artist-finder.com
*.babyfun.be
*.black-sex.de
*.blockchaun.info
*.canadapharmcy.com
*.carsm.com
*.clasicmagazines.co.uk
*.consignall.com
*.deautos.org
*.estrenosdoramas.me
*.fanatics.org
*.fernseherzeitung.de
*.finnwale.de
*.fobra.me
*.goldminer.au
*.haircuts.net
*.heritagetoursltd.com
*.herrmansdorfer.de
*.imoilien.de
*.indoorlighting.au
*.jakstollperformance.com
*.lerntippssamlung.de
*.losingisfun.com
*.lucn.us
*.mndriverinfo.org
*.nagelvorlagen.de
*.nzs.de
*.paninionline.it
*.peah.info
*.personalnovelle.de
*.polskacyfrowa.org
*.portapp.io
*.prankcalls.com.au
*.salesforcce.com
*.saves.au
*.skillsession.com
*.sp-ray.co
*.statdtplan.de
*.strohmtarife.de
*.thebasquerestaurant.com
*.touluse.de
*.voluteermatch.org
*.wayscript.io
*.wumeitube.live
*.wwwbiller.de
*.xn--blindenfhrhunde-6vb.de
*.xn--knstlichebrste-gsbk.de
*.xn--tauchkhler-feb.de
1300electrician.au
affordableautobody.net
artist-finder.com
babyfun.be
black-sex.de
blockchaun.info
canadapharmcy.com
carsm.com
clasicmagazines.co.uk
consignall.com
deautos.org
estrenosdoramas.me
fanatics.org
fernseherzeitung.de
finnwale.de
fobra.me
goldminer.au
haircuts.net
heritagetoursltd.com
herrmansdorfer.de
imoilien.de
indoorlighting.au
jakstollperformance.com
lerntippssamlung.de
losingisfun.com
lucn.us
mndriverinfo.org
nagelvorlagen.de
nzs.de
paninionline.it
peah.info
personalnovelle.de
polskacyfrowa.org
portapp.io
prankcalls.com.au
salesforcce.com
saves.au
skillsession.com
sp-ray.co
statdtplan.de
strohmtarife.de
thebasquerestaurant.com
touluse.de
voluteermatch.org
wayscript.io
wumeitube.live
wwwbiller.de
xn--blindenfhrhunde-6vb.de
xn--knstlichebrste-gsbk.de
xn--tauchkhler-feb.de

Other certificates including the domain name lucn.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for lucn.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Aaq1PiWxYomdcrJnRGR
DPLOzWJoOEFEM0Wu8JYIMjqyLyPxoNMcvoTgAvkHfUGj1IV8/BDXiW5NP5lthWQs
i59e0C2+xLS3d2hzhE+qG+xGZ3RS1+HXj5VC/ouXqz8cne8fjwk4P6v69h/t0Fdp
vmtYDIZWw1HdFK1Rleen08W8/y+hWtTBvOAqH2UmcOP5WYvPDOSbVEGsDRDvXibo
3A6U+x2gUOpwkNcEXZGHG6SH/7vM/4GpeM1/A45kAsIg5ao+1rsnVE4SkSqBhDQz
o5+rl60yHS+sqcwfjd0T9bCrLbzlxOJ2kA8LChG1ZfQ1Jn/agPWrMCQvSwa+rf0r
Ie4YQLIUhryV5GRTlFkuw85P+d1lgqrKkcEgcaGC+y1PSFWeKxOe2nAwwuEBPyKa
hQm5b6Dj/WDDg9fmiA0FJJyQE4zxGL+8KfnQRF497f9QntmechdQmLidSwoAC2dT
J9Qq+BSLsXplwfnzveWPVtAjjNrGcTs4L3g3m0GQ2hMsmjA+f9WXQrlJpdaYLJ/y
Fc+V6PEszC3SJQCrB2XAANBt9YPld+MAO7dOaQx0ByQYBpeKQS0snadBtbvvSuw+
5TnQXO/6sknsyHwB4elbLTF8eZTWMdVMUGzoBmJ/sZHg7EarALtP8+i5LHbkQJxv
IKVZPZL16zapTjZVGQ0ZLckCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287838742863159110569030186681284575388870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 16:13:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 16:13:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucn.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864990793438181575316626181610808782819797525949597733933875739986705755173204328906630078894757043705612501101976128053094979495842244951659545914346714112092936760637806769915035748233341366893922016076357377878522522842176561980888569728609700098073409203713198342551242736855036746258991161430768720121181216021175522615333091685934621096302630651684408446305998698775836635901401419320085304618694667728688243413207619222722275777563777678339073731145029429465221013316507037640920311008013337373183438605974264691773256384931242468294505615101435966609415714476392296170442084614113985543078564782323836076573300457130681004190786392176635974403906126981698043090079794009446062283619542393028306875573451351705662312739941145250517895394817300446573626958322787164192337556398846890146884037865058832363459191872279121985371553313480437962255182941647087949582990912882774312705946901508943767989925301654522776006873200203677312703730873519613855710139308606973436514247099680311001495203200040568762411481019995178936070448430388803741105610287359405969748483156495902829574753264312923983870886606924783364007130191681331780542930513095049544793374593702362341299267654738793651209335558278164480954458571264196531262664137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec6fa2158458daa2789aae8023f5bb70340aea55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1800 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1300electrician.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affordableautobody.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artist-finder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babyfun.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.black-sex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockchaun.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadapharmcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clasicmagazines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consignall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deautos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estrenosdoramas.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanatics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fernseherzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finnwale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fobra.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldminer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haircuts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritagetoursltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herrmansdorfer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imoilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indoorlighting.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jakstollperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lerntippssamlung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losingisfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mndriverinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nagelvorlagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paninionline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peah.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalnovelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polskacyfrowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prankcalls.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesforcce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saves.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skillsession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp-ray.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statdtplan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strohmtarife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebasquerestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touluse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voluteermatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayscript.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wumeitube.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbiller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blindenfhrhunde-6vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--knstlichebrste-gsbk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tauchkhler-feb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1300electrician.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordableautobody.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artist-finder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyfun.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'black-sex.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchaun.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadapharmcy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clasicmagazines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consignall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deautos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estrenosdoramas.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernseherzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finnwale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fobra.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldminer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haircuts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritagetoursltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herrmansdorfer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoilien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indoorlighting.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jakstollperformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerntippssamlung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losingisfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mndriverinfo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagelvorlagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paninionline.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peah.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalnovelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polskacyfrowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portapp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prankcalls.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saves.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillsession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp-ray.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statdtplan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strohmtarife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebasquerestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touluse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voluteermatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayscript.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wumeitube.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbiller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blindenfhrhunde-6vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--knstlichebrste-gsbk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tauchkhler-feb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fca7ddd980000040300483046022100c1b5124d59d0f5d7bd7b102f6e204160ecc5a45f4876145f2e0d35e414da9f5d02210094726a0d886b212a3036c2303c7956e1c036db5ae7efe58ff05a2d85360dbd670076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fca7dddc800000403004730450221009a175331c33f2fb6b4d9486f175ca0143e0f7433ee092b12150eea1f1c4b1d9302200a0ac620ac51060a57143ce07ddd873505e095f8675504fdd0f46ee58ce320b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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