entdecke-scolaris-grundschule.de

Issued by R3

About this certificate

This digital certificate with serial number 03:12:a3:0f:8e:04:4d:ce:1d:c5:1d:16:0d:ab:cc:2c:a3:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=entdecke-scolaris-grundschule.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:12:a3:0f:8e:04:4d:ce:1d:c5:1d:16:0d:ab:cc:2c:a3:15
Serial Number (int): 267678685328066607485564264147874701157141
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:51:57:a2:fb:b2:36:65:ce:2d:96:c2:56:bb:7d:d0:65:3d:10:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fe:b4:bb:21:f0:01:61:28:5e:3d:aa:9f:33:ce:74:d9:27:93:e6:31
Fingerprint (sha256): b1:b8:07:9b:0a:fe:59:41:6e:42:bb:f0:07:c7:02:e5:14:17:39:e9:d7:36:40:5a:2d:50:d9:e9:10:ad:c6:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate entdecke-scolaris-grundschule.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for entdecke-scolaris-grundschule.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amm.co.in
*.appraisalwizard.com.au
*.atemzeitvolumen.de
*.auctionlosmontesinos.com
*.birthpose.com
*.businesschallenge.com.au
*.captialford.com
*.discovee.com
*.donnaslegshow.com
*.dougycenter.org
*.employeebridge.com
*.entdecke-scolaris-grundschule.de
*.evionproducts.com
*.extort.me
*.formsimplicty.com
*.go-gay.com
*.groupmgnt.com
*.halfbakedpowdercoating.com
*.handy-coffee.co
*.icicipruelife.com
*.jcpennsy.com
*.keysvilleflowershop.com
*.lewy-koerperchen-demenz.de
*.mcdlogin.com
*.microscopy-uk.org
*.mlcal.com
*.movietriggers.com
*.needalawyernow.co
*.nrplade.net
*.nsfwmonstwr.co
*.orbitlending.com
*.perfextanal.co
*.potenzgenerika.com
*.prenhallart.com
*.quickfile.net
*.rcketmail.com
*.rewardlocal.com.au
*.robloix.com
*.sasktell.net
*.sebecas.com
*.sinfullcomix.co
*.stepmotherxnxx.co
*.tovarat.co
*.twitwitter.com
*.wking8.com
*.ww2express.com
*.xhamstwe.com
*.yahoioi.com
*.z500.site
*.zonaplex.com
amm.co.in
appraisalwizard.com.au
atemzeitvolumen.de
auctionlosmontesinos.com
birthpose.com
businesschallenge.com.au
captialford.com
discovee.com
donnaslegshow.com
dougycenter.org
employeebridge.com
entdecke-scolaris-grundschule.de
evionproducts.com
extort.me
formsimplicty.com
go-gay.com
groupmgnt.com
halfbakedpowdercoating.com
handy-coffee.co
icicipruelife.com
jcpennsy.com
keysvilleflowershop.com
lewy-koerperchen-demenz.de
mcdlogin.com
microscopy-uk.org
mlcal.com
movietriggers.com
needalawyernow.co
nrplade.net
nsfwmonstwr.co
orbitlending.com
perfextanal.co
potenzgenerika.com
prenhallart.com
quickfile.net
rcketmail.com
rewardlocal.com.au
robloix.com
sasktell.net
sebecas.com
sinfullcomix.co
stepmotherxnxx.co
tovarat.co
twitwitter.com
wking8.com
ww2express.com
xhamstwe.com
yahoioi.com
z500.site
zonaplex.com

Other certificates including the domain name entdecke-scolaris-grundschule.de

(limited to 100 certificates)
entdecke-scolaris-grundschule.de
handyrakten.de
le-conte.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de
www.scolaris.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de

Certificate

The complete raw certificate details for entdecke-scolaris-grundschule.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267678685328066607485564264147874701157141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 07:38:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 07:38:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'entdecke-scolaris-grundschule.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686740971201255927640180560258963579356753959623589463715211777148446372058947159897582023932275851372236152007640095885560153964406894359007715613243768557500726316484510853653125207673525644147838810670112880309935172302431150303828120573783621886115737606134019177283108302147487059692095595731249407883063876825680588634582191722766091613811955784080022996517396128350886793516048759603156540525549931622413735242180501763776929282302350015939746245639128155525346274801379144229123271406626362252222113689481145178010914016810137477426277153595805271067349042956946039815062638991268625454296874531568331740457287294396898330747086235989077235814892197022836387859515880938190439649156631454421997014157266226759691473477429498862415770382814933771313898916835598191547745123540805118547961350481949406266806038991774055479997426653872727657747869942121593401598606391080568773826367296982345953248447766896510601801815654929989541241990393376392755076042869714337450190411943956636835173460724630898584183530756817280103641558676225695125824428315697280430126603451099928936408945864120862259540194729947449454985690641140282618892837001549608840299588820682528783444384727828050054696558512757143401159054868725068927858930081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							415157a2fbb23665ce2d96c256bb7dd0653d10dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1836 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dougycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keysvilleflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlcal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.needalawyernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsfwmonstwr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbitlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfextanal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prenhallart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickfile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinfullcomix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stepmotherxnxx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tovarat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twitwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wking8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ww2express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xhamstwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoioi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z500.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zonaplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvilleflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlcal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needalawyernow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsfwmonstwr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfextanal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenhallart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickfile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinfullcomix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepmotherxnxx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tovarat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wking8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhamstwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoioi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z500.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonaplex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f6bf467a40000040300483046022100b3966f91daecc1f01df46b326b5013ca75b91253a7bdbd9b6c12184521efff40022100b0eee7acec4c6366c09c879a88b84488def208b416dff754fb6b2e720c55d49800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f6bf467cd0000040300473045022009509b7fc4b2035efc89682431a301af0c2c7839fb859f1b9b25480f5e2f3c5c022100981adc05e0423337d1baab2a673ca6c56c4483eed3761dd2bbebbfa8064e668a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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