xfs.de

Issued by R3

About this certificate

This digital certificate with serial number 03:81:ef:f2:98:66:3a:48:d0:f1:fc:c2:8f:2e:8a:53:4c:76 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xfs.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:ef:f2:98:66:3a:48:d0:f1:fc:c2:8f:2e:8a:53:4c:76
Serial Number (int): 305552228245939732540010761311548351925366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:91:1b:7d:6e:97:c3:a7:46:20:2a:b4:b3:4a:f7:05:75:26:75:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:e3:86:8e:26:cd:29:61:ff:0b:b4:4f:66:26:fd:87:62:c4:c4:34
Fingerprint (sha256): b5:2e:b3:59:b8:d7:bc:9d:04:04:4c:6b:39:bb:f9:51:fe:c4:eb:09:19:e7:99:51:fc:ea:39:91:3e:77:0b:83

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xfs.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xfs.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adityarajparamedicalcollege.com
*.altanyalitim.com
*.artistiperilmatta.org
*.atrapix.com
*.avainvestmgoal.com
*.bettabd.com
*.cancungob.com
*.cassrooms.com
*.cravefoodhall.com
*.ctdress.com
*.customer-perfectfit.com
*.dayifullfilmizle.com
*.diceheroe.com
*.digibies.com
*.drluizsergiotatsch.com
*.engmohammedhussien.com
*.esloquepasa.com
*.gfs7.com
*.ginkgo-blatt.de
*.haciendalapresita.com
*.induktionsfeld.de
*.ljo.de
*.lkb.de
*.llf.de
*.llw.de
*.lnf.de
*.lnu.de
*.masarbeit.de
*.meummc.com
*.mylawyaracademy.com
*.nationaltodaynews.com
*.nilmovies.com
*.nzeehub.com
*.officeproperty.com.au
*.onlygovtjob.com
*.pakjobcareers.com
*.photoshop-bg.net
*.pimples.de
*.preisvergleixh.de
*.r-sprint.org
*.rowell-glassbottle.com
*.seketaerin.de
*.stuffsports.com
*.toodeloos.com
*.trade-horizon.com
*.vellookunnel.com
*.xfs.de
*.xn--fremwrter-47a.de
*.yaseminkalayci.com
*.zeitumrechner.de
adityarajparamedicalcollege.com
altanyalitim.com
artistiperilmatta.org
atrapix.com
avainvestmgoal.com
bettabd.com
cancungob.com
cassrooms.com
cravefoodhall.com
ctdress.com
customer-perfectfit.com
dayifullfilmizle.com
diceheroe.com
digibies.com
drluizsergiotatsch.com
engmohammedhussien.com
esloquepasa.com
gfs7.com
ginkgo-blatt.de
haciendalapresita.com
induktionsfeld.de
ljo.de
lkb.de
llf.de
llw.de
lnf.de
lnu.de
masarbeit.de
meummc.com
mylawyaracademy.com
nationaltodaynews.com
nilmovies.com
nzeehub.com
officeproperty.com.au
onlygovtjob.com
pakjobcareers.com
photoshop-bg.net
pimples.de
preisvergleixh.de
r-sprint.org
rowell-glassbottle.com
seketaerin.de
stuffsports.com
toodeloos.com
trade-horizon.com
vellookunnel.com
xfs.de
xn--fremwrter-47a.de
yaseminkalayci.com
zeitumrechner.de

Other certificates including the domain name xfs.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for xfs.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxcro2/gAzwr9RPkuynIq
VvgXTCHDSRMsFw1WjpvJYiKxrHuf0wlTMbljwtRCdIHYxQEjo8+TRPnVDiMIaP9X
cB9IOYKdoDkF/XmUA6noYRMxg39oPbgAEu5QyNHo6l1OyCkpTnD5TlkKlvbCgDaf
262bmdwdGsqVIKmClv82d5b4xEmWvaMpfjQYNOs4pKdlqMRCefwBbJeASaeEPGBR
tUzp/s1HJrXr3YyqpLp77SxZLqFexBhbYSSbeBEQXspvuQipodRsey2cvxXN6gzO
QM+cNL7oYoSC1nBIV0hhwfJdKVYfig8TTv0TpORrAsP0kN/K7ntZ2bVwgjdKoeOO
QaCiUdApf7HbKbWDrMENv9pw0GwXXGpKTWUt8VEks3AikJQsf7LCtlFOQk1EuyHh
QC+0rCH9plbY9RleOBYXAKJFUnpb3sXF/airvbakYqcFCnKPpmDLhWMt+cVSaATg
vV/n9qKE6aads5KERmpAba/YJwZejCxThEbjmI+RM/SdWt1lorZLsw/eF0NDVdy6
rA3jfVCHyNDcKz1XnfkBYZzF8BjIrKmCpByDMilHcTPIX82hOQit8XBjJimp6CaT
UbeyMls05Qm9g3Zyk/VbIBPKbzZh7R+SPUDVum2nsALvYAB9X1gvsS4plPK8zy2u
fSEu+ckh2UwvMTOv+QNlWlMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305552228245939732540010761311548351925366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 19:03:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 19:03:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xfs.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806923471135614912183882790186855947645622725723426473305754235092803103783649228076418939941406219860595891195733525252046928026961705008272030082872488011238359758758313983321108569820684530838011407598809319378015611670167540717460987769847316411537510313367588537479628886476694236681028829178855535429135846986187845128739346297670008564165510245923882244874099878667216357794569867394611950776291767525689291518792656863614291170253347734063267385019584131267478969920830968777915129770853435541442158830228731790262632384854363220082613668664768787245496120378554975236424254778017896295227411040490121242478948492558727941206468671920126134108717036571384979310439336370512115404864861079540531814415303867588027960489158672633097270718451736476160864157447698275829337528831794122071793576570123704211495852619925790596732773959662602303106091569251614850315564254291522660612719530788341300635525599198822572933743650148249526285512734764761316078224741835391962656583474961732699897981620633295253579197797324511907421293672074737312309521259142567433029878481168252522594074220359447968215763652924021879599164717240847397047004091995712929722239209997890368050664299286238556419496562680602512075161492345089737202424403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58911b7d6e97c3a746202ab4b34af7057526754c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adityarajparamedicalcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altanyalitim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artistiperilmatta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrapix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avainvestmgoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettabd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancungob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cassrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cravefoodhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctdress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer-perfectfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dayifullfilmizle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diceheroe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digibies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drluizsergiotatsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engmohammedhussien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esloquepasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfs7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ginkgo-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haciendalapresita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.induktionsfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ljo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masarbeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meummc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylawyaracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationaltodaynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzeehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officeproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlygovtjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakjobcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photoshop-bg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimples.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preisvergleixh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r-sprint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rowell-glassbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seketaerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toodeloos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade-horizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vellookunnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremwrter-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaseminkalayci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeitumrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adityarajparamedicalcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altanyalitim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artistiperilmatta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atrapix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avainvestmgoal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettabd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancungob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cravefoodhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctdress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-perfectfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayifullfilmizle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diceheroe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digibies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drluizsergiotatsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engmohammedhussien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esloquepasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfs7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginkgo-blatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haciendalapresita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'induktionsfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masarbeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meummc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylawyaracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaltodaynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzeehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeproperty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlygovtjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakjobcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshop-bg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimples.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preisvergleixh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r-sprint.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowell-glassbottle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seketaerin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuffsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toodeloos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade-horizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vellookunnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremwrter-47a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaseminkalayci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeitumrechner.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5a7aac9d00000403004730450220573a8966d0c99d7a5e44af42ea4ccff0408b6dd13cb8537ed64efeb203fe8ad002210092d010bab9d9b4191a4d6957245b4ffe7723a7ccbb220d3b355b98bf6d8263a700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c5a7aacf30000040300483046022100e142a83f70dbafb264614abf47db27d541d4bfe9df9e2fb82d847f91d3ce62490221008c33b1d098b2fb01919b1bae3e2191f9b606fb439b741349c9384d6c8567af15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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