fit-for-life-diaet.de

Issued by R3

About this certificate

This digital certificate with serial number 03:28:e7:77:aa:fd:fb:b1:26:8a:bf:2e:08:89:fd:b1:96:74 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fit-for-life-diaet.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:28:e7:77:aa:fd:fb:b1:26:8a:bf:2e:08:89:fd:b1:96:74
Serial Number (int): 275255825490603012325772689237587201726068
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:fc:f4:d8:7e:71:19:9b:bd:e1:3e:71:3f:12:d1:4c:79:a1:31:23
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:5e:4a:13:7e:7c:ae:f3:30:72:cb:3a:79:bd:31:10:07:8a:57:7e
Fingerprint (sha256): a9:95:8f:7f:85:3b:8e:03:b8:8c:e3:08:8c:7f:e3:c0:2d:9a:ea:58:e4:f8:b3:f3:7a:e5:0a:d2:3b:37:df:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fit-for-life-diaet.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fit-for-life-diaet.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.astrooeogie.de
*.bollywood4u.me
*.chronisches-nasenbluten.de
*.cjlwifi.net
*.creditcardcompanies.au
*.davivinda.com
*.denovo.com.au
*.digiplus.us
*.divertikel-im-darm.de
*.dxf06vo3.xyz
*.dxpo1g3c.xyz
*.fit-for-life-diaet.de
*.fivestardriverapp.com
*.flachruecken.de
*.fmui.xyz
*.funun.tv
*.gliederguerteldystrophie.de
*.gruer-star.de
*.gwepoxy.com.au
*.historywords.com.au
*.k9protraining.com.au
*.karpaltunnelsyndrom-homoeopathie.de
*.kidsshop.com.au
*.kp30j.top
*.mybigpointtennis.de
*.mychartardenhealth.com
*.naturopathcourses.com.au
*.oahu.au
*.pharmacies.au
*.poleiminze.de
*.racingpages.com.au
*.raibatsu.me
*.relationshipbless.com
*.returningtowork.com.au
*.rocketgroup.com.au
*.satisfaction.au
*.stablemate.net.au
*.startoolssupply.com
*.stepsiblinggrab.com
*.tarifchack24.de
*.telephonedictionaries.us
*.televisionstands.com.au
*.unfallversicherun.de
*.up6lv1x.xyz
*.verfaerbte-zaehne.de
*.vob.com.au
*.warehouseoutlet.com.au
*.welche-globuli.de
*.zappelin-globuli.de
*.zwerchfelllaehmung.de
astrooeogie.de
bollywood4u.me
chronisches-nasenbluten.de
cjlwifi.net
creditcardcompanies.au
davivinda.com
denovo.com.au
digiplus.us
divertikel-im-darm.de
dxf06vo3.xyz
dxpo1g3c.xyz
fit-for-life-diaet.de
fivestardriverapp.com
flachruecken.de
fmui.xyz
funun.tv
gliederguerteldystrophie.de
gruer-star.de
gwepoxy.com.au
historywords.com.au
k9protraining.com.au
karpaltunnelsyndrom-homoeopathie.de
kidsshop.com.au
kp30j.top
mybigpointtennis.de
mychartardenhealth.com
naturopathcourses.com.au
oahu.au
pharmacies.au
poleiminze.de
racingpages.com.au
raibatsu.me
relationshipbless.com
returningtowork.com.au
rocketgroup.com.au
satisfaction.au
stablemate.net.au
startoolssupply.com
stepsiblinggrab.com
tarifchack24.de
telephonedictionaries.us
televisionstands.com.au
unfallversicherun.de
up6lv1x.xyz
verfaerbte-zaehne.de
vob.com.au
warehouseoutlet.com.au
welche-globuli.de
zappelin-globuli.de
zwerchfelllaehmung.de

Other certificates including the domain name fit-for-life-diaet.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for fit-for-life-diaet.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw+xrjtGQsMsqTXuNyfEc
dhjBG3TGvRwWxZWb9Ylp1LCS0eEv1tE5JAetajrtvipmhFSLrIULwaL/lViQ39BS
lomHK2pn5hpmNi6maBZanQp0AsIa6/cEisOF4Kyv0HO+e/Sij5WHy2HbsH3NrRMY
tf5dI7AAd7a33bnn9iOodyxauPoILrZYj8c4bf87pB6GwCX4NAMl1ka1XYjr/8VE
dJcIoCPLmQQxb0bAZBWIgW+aPewdEuQ5ve4IOqBaNyZgGJt29xUBpBdEQ7JTncQD
J8o6SVhvapQiEl2stArmnYUoWWSN43hq4m1pv6cO4fMjha0tBnLpsqw7qmdj7oYK
n0yn+83SWtb9zbb9Dc/9A0vtVs1qZL4HRQrhSgA8VRJneZZUtVLH23uF2LTIQmNZ
83nAKQlw1joBhrxE/bMfov1ZV38V1jki7Irp9Up/ks78lZ53ghNTDziMxXs1vNLG
3RZMVY8BpAPQJ3ivxANo8c3QUl5TylRsZG5J8p+k79UOhQnNHouSCgByKv3CIF4R
iDkP2hk2yBuvOblVCLi22yY2cjkGBDTwcDe02RjzAUcsLnR6uH7+HLEjzWbDQj/2
DdBxQBeobgy6+KCGp9fJ0IN70jGs0yyfU5u7p18bWxKYtlclAMTS9s7gOms/Ulea
vjA25+NIoBiwso4Yi/m45icCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275255825490603012325772689237587201726068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 04:04:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 04:04:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fit-for-life-diaet.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799298210663550530497259567866154811179947479004029046771041494749232021434337763418001191523530662077048417590663961891220611487592040545866440117534037963887616355420455714316469801550455041716338917585743769790033885687087095407014357999653043121012079927992368840836179883714863735096889549326897704448148925678702326524887763311192660537803211089968887245017302967956064286513648579274263932793734440895931052806985801300366023756949873895309094947459712543039251608001707076899065728051674537661431986986971299033176938676557665412417147966696235456285122145512917507340617926752911994357496108982022419229879246814836409183386593349807868355598654130165135958599903659229716616206040564227913298877272808551684546086951789798769996449577249690805415815035636552019064720812106883493374994761633912437716271417445746324617762511933698926968187128905238468080450680053429319203051744705615722536085438960972752987230863839349245883909832352654547872198884378881683304418038381078323404366884182305704416143223091382316704023902217467670979932766928252933287420259991631479017224987780968688417955938445196319441136892434376728537023635782247919411018092580876053903969164582423491132027073120098638914165485580542531375581423143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0fcf4d87e71199bbde13e713f12d14c79a13123
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2012 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrooeogie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bollywood4u.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chronisches-nasenbluten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cjlwifi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditcardcompanies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davivinda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denovo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiplus.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divertikel-im-darm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxf06vo3.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxpo1g3c.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fit-for-life-diaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivestardriverapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flachruecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmui.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funun.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gliederguerteldystrophie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruer-star.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwepoxy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historywords.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k9protraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karpaltunnelsyndrom-homoeopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidsshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kp30j.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybigpointtennis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mychartardenhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturopathcourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oahu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmacies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poleiminze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racingpages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raibatsu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relationshipbless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.returningtowork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satisfaction.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stablemate.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startoolssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stepsiblinggrab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarifchack24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telephonedictionaries.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.televisionstands.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unfallversicherun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.up6lv1x.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verfaerbte-zaehne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warehouseoutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welche-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zappelin-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zwerchfelllaehmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrooeogie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bollywood4u.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronisches-nasenbluten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjlwifi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardcompanies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davivinda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denovo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiplus.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divertikel-im-darm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxf06vo3.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxpo1g3c.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fit-for-life-diaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivestardriverapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flachruecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmui.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funun.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gliederguerteldystrophie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruer-star.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwepoxy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historywords.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k9protraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karpaltunnelsyndrom-homoeopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kp30j.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybigpointtennis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychartardenhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturopathcourses.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oahu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacies.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poleiminze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racingpages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raibatsu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relationshipbless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returningtowork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satisfaction.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stablemate.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startoolssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepsiblinggrab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarifchack24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telephonedictionaries.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'televisionstands.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unfallversicherun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up6lv1x.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verfaerbte-zaehne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouseoutlet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welche-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zappelin-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwerchfelllaehmung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6b3032bb0000040300473045022100e7e84992799ee4bef4e1f304adea306849fa558852f433cfdd8595720fcc285602201dc75f546e3c2b2b73dc604ef63e4957ebab840b76d86ebf831255b036124a53007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f6b303383000004030046304402203e6db319d318f3541dbc246ff37552cf5bba4c387801b34bf3aba3f63e2a10770220394844d613af8591d654f527f11c32fba2cebd1257a133fa3ec84d0a065ec2ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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