xfs.de
Issued by R3
About this certificate
This digital certificate with serial number 03:81:ef:f2:98:66:3a:48:d0:f1:fc:c2:8f:2e:8a:53:4c:76 was issued on by Let's Encrypt.
With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=xfs.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:81:ef:f2:98:66:3a:48:d0:f1:fc:c2:8f:2e:8a:53:4c:76Serial Number (int): 305552228245939732540010761311548351925366
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 58:91:1b:7d:6e:97:c3:a7:46:20:2a:b4:b3:4a:f7:05:75:26:75:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7f:e3:86:8e:26:cd:29:61:ff:0b:b4:4f:66:26:fd:87:62:c4:c4:34
Fingerprint (sha256): b5:2e:b3:59:b8:d7:bc:9d:04:04:4c:6b:39:bb:f9:51:fe:c4:eb:09:19:e7:99:51:fc:ea:39:91:3e:77:0b:83
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate xfs.de
100
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xfs.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.adityarajparamedicalcollege.com
*.altanyalitim.com
*.artistiperilmatta.org
*.atrapix.com
*.avainvestmgoal.com
*.bettabd.com
*.cancungob.com
*.cassrooms.com
*.cravefoodhall.com
*.ctdress.com
*.customer-perfectfit.com
*.dayifullfilmizle.com
*.diceheroe.com
*.digibies.com
*.drluizsergiotatsch.com
*.engmohammedhussien.com
*.esloquepasa.com
*.gfs7.com
*.ginkgo-blatt.de
*.haciendalapresita.com
*.induktionsfeld.de
*.ljo.de
*.lkb.de
*.llf.de
*.llw.de
*.lnf.de
*.lnu.de
*.masarbeit.de
*.meummc.com
*.mylawyaracademy.com
*.nationaltodaynews.com
*.nilmovies.com
*.nzeehub.com
*.officeproperty.com.au
*.onlygovtjob.com
*.pakjobcareers.com
*.photoshop-bg.net
*.pimples.de
*.preisvergleixh.de
*.r-sprint.org
*.rowell-glassbottle.com
*.seketaerin.de
*.stuffsports.com
*.toodeloos.com
*.trade-horizon.com
*.vellookunnel.com
*.xfs.de
*.xn--fremwrter-47a.de
*.yaseminkalayci.com
*.zeitumrechner.de
adityarajparamedicalcollege.com
altanyalitim.com
artistiperilmatta.org
atrapix.com
avainvestmgoal.com
bettabd.com
cancungob.com
cassrooms.com
cravefoodhall.com
ctdress.com
customer-perfectfit.com
dayifullfilmizle.com
diceheroe.com
digibies.com
drluizsergiotatsch.com
engmohammedhussien.com
esloquepasa.com
gfs7.com
ginkgo-blatt.de
haciendalapresita.com
induktionsfeld.de
ljo.de
lkb.de
llf.de
llw.de
lnf.de
lnu.de
masarbeit.de
meummc.com
mylawyaracademy.com
nationaltodaynews.com
nilmovies.com
nzeehub.com
officeproperty.com.au
onlygovtjob.com
pakjobcareers.com
photoshop-bg.net
pimples.de
preisvergleixh.de
r-sprint.org
rowell-glassbottle.com
seketaerin.de
stuffsports.com
toodeloos.com
trade-horizon.com
vellookunnel.com
xfs.de
xn--fremwrter-47a.de
yaseminkalayci.com
zeitumrechner.de
*.altanyalitim.com
*.artistiperilmatta.org
*.atrapix.com
*.avainvestmgoal.com
*.bettabd.com
*.cancungob.com
*.cassrooms.com
*.cravefoodhall.com
*.ctdress.com
*.customer-perfectfit.com
*.dayifullfilmizle.com
*.diceheroe.com
*.digibies.com
*.drluizsergiotatsch.com
*.engmohammedhussien.com
*.esloquepasa.com
*.gfs7.com
*.ginkgo-blatt.de
*.haciendalapresita.com
*.induktionsfeld.de
*.ljo.de
*.lkb.de
*.llf.de
*.llw.de
*.lnf.de
*.lnu.de
*.masarbeit.de
*.meummc.com
*.mylawyaracademy.com
*.nationaltodaynews.com
*.nilmovies.com
*.nzeehub.com
*.officeproperty.com.au
*.onlygovtjob.com
*.pakjobcareers.com
*.photoshop-bg.net
*.pimples.de
*.preisvergleixh.de
*.r-sprint.org
*.rowell-glassbottle.com
*.seketaerin.de
*.stuffsports.com
*.toodeloos.com
*.trade-horizon.com
*.vellookunnel.com
*.xfs.de
*.xn--fremwrter-47a.de
*.yaseminkalayci.com
*.zeitumrechner.de
adityarajparamedicalcollege.com
altanyalitim.com
artistiperilmatta.org
atrapix.com
avainvestmgoal.com
bettabd.com
cancungob.com
cassrooms.com
cravefoodhall.com
ctdress.com
customer-perfectfit.com
dayifullfilmizle.com
diceheroe.com
digibies.com
drluizsergiotatsch.com
engmohammedhussien.com
esloquepasa.com
gfs7.com
ginkgo-blatt.de
haciendalapresita.com
induktionsfeld.de
ljo.de
lkb.de
llf.de
llw.de
lnf.de
lnu.de
masarbeit.de
meummc.com
mylawyaracademy.com
nationaltodaynews.com
nilmovies.com
nzeehub.com
officeproperty.com.au
onlygovtjob.com
pakjobcareers.com
photoshop-bg.net
pimples.de
preisvergleixh.de
r-sprint.org
rowell-glassbottle.com
seketaerin.de
stuffsports.com
toodeloos.com
trade-horizon.com
vellookunnel.com
xfs.de
xn--fremwrter-47a.de
yaseminkalayci.com
zeitumrechner.de
Other certificates including the domain name xfs.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for xfs.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMxDCCC6ygAwIBAgISA4Hv8phmOkjQ8fzCjy6KU0x2MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTExOTAzNThaFw0yNDAzMTAxOTAzNTdaMBExDzANBgNVBAMT Bnhmcy5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMXK6Nv4AM8K /UT5LspyKlb4F0whw0kTLBcNVo6byWIisax7n9MJUzG5Y8LUQnSB2MUBI6PPk0T5 1Q4jCGj/V3AfSDmCnaA5Bf15lAOp6GETMYN/aD24ABLuUMjR6OpdTsgpKU5w+U5Z Cpb2woA2n9utm5ncHRrKlSCpgpb/NneW+MRJlr2jKX40GDTrOKSnZajEQnn8AWyX gEmnhDxgUbVM6f7NRya1692MqqS6e+0sWS6hXsQYW2Ekm3gREF7Kb7kIqaHUbHst nL8VzeoMzkDPnDS+6GKEgtZwSFdIYcHyXSlWH4oPE079E6TkawLD9JDfyu57Wdm1 cII3SqHjjkGgolHQKX+x2ym1g6zBDb/acNBsF1xqSk1lLfFRJLNwIpCULH+ywrZR TkJNRLsh4UAvtKwh/aZW2PUZXjgWFwCiRVJ6W97Fxf2oq722pGKnBQpyj6Zgy4Vj LfnFUmgE4L1f5/aihOmmnbOShEZqQG2v2CcGXowsU4RG45iPkTP0nVrdZaK2S7MP 3hdDQ1XcuqwN431Qh8jQ3Cs9V535AWGcxfAYyKypgqQcgzIpR3EzyF/NoTkIrfFw YyYpqegmk1G3sjJbNOUJvYN2cpP1WyATym82Ye0fkj1A1bptp7AC72AAfV9YL7Eu KZTyvM8trn0hLvnJIdlMLzEzr/kDZVpTAgMBAAGjggjzMIII7zAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFFiRG31ul8OnRiAqtLNK9wV1JnVMMB8GA1UdIwQYMBaAFBQu sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s ZW5jci5vcmcvMIIG+QYDVR0RBIIG8DCCBuyCISouYWRpdHlhcmFqcGFyYW1lZGlj YWxjb2xsZWdlLmNvbYISKi5hbHRhbnlhbGl0aW0uY29tghcqLmFydGlzdGlwZXJp bG1hdHRhLm9yZ4INKi5hdHJhcGl4LmNvbYIUKi5hdmFpbnZlc3RtZ29hbC5jb22C DSouYmV0dGFiZC5jb22CDyouY2FuY3VuZ29iLmNvbYIPKi5jYXNzcm9vbXMuY29t ghMqLmNyYXZlZm9vZGhhbGwuY29tgg0qLmN0ZHJlc3MuY29tghkqLmN1c3RvbWVy LXBlcmZlY3RmaXQuY29tghYqLmRheWlmdWxsZmlsbWl6bGUuY29tgg8qLmRpY2Vo ZXJvZS5jb22CDiouZGlnaWJpZXMuY29tghgqLmRybHVpenNlcmdpb3RhdHNjaC5j b22CGCouZW5nbW9oYW1tZWRodXNzaWVuLmNvbYIRKi5lc2xvcXVlcGFzYS5jb22C CiouZ2ZzNy5jb22CESouZ2lua2dvLWJsYXR0LmRlghcqLmhhY2llbmRhbGFwcmVz aXRhLmNvbYITKi5pbmR1a3Rpb25zZmVsZC5kZYIIKi5sam8uZGWCCCoubGtiLmRl gggqLmxsZi5kZYIIKi5sbHcuZGWCCCoubG5mLmRlgggqLmxudS5kZYIOKi5tYXNh cmJlaXQuZGWCDCoubWV1bW1jLmNvbYIVKi5teWxhd3lhcmFjYWRlbXkuY29tghcq Lm5hdGlvbmFsdG9kYXluZXdzLmNvbYIPKi5uaWxtb3ZpZXMuY29tgg0qLm56ZWVo dWIuY29tghcqLm9mZmljZXByb3BlcnR5LmNvbS5hdYIRKi5vbmx5Z292dGpvYi5j b22CEyoucGFram9iY2FyZWVycy5jb22CEioucGhvdG9zaG9wLWJnLm5ldIIMKi5w aW1wbGVzLmRlghMqLnByZWlzdmVyZ2xlaXhoLmRlgg4qLnItc3ByaW50Lm9yZ4IY Ki5yb3dlbGwtZ2xhc3Nib3R0bGUuY29tgg8qLnNla2V0YWVyaW4uZGWCESouc3R1 ZmZzcG9ydHMuY29tgg8qLnRvb2RlbG9vcy5jb22CEyoudHJhZGUtaG9yaXpvbi5j b22CEioudmVsbG9va3VubmVsLmNvbYIIKi54ZnMuZGWCFioueG4tLWZyZW13cnRl ci00N2EuZGWCFCoueWFzZW1pbmthbGF5Y2kuY29tghIqLnplaXR1bXJlY2huZXIu ZGWCH2FkaXR5YXJhanBhcmFtZWRpY2FsY29sbGVnZS5jb22CEGFsdGFueWFsaXRp bS5jb22CFWFydGlzdGlwZXJpbG1hdHRhLm9yZ4ILYXRyYXBpeC5jb22CEmF2YWlu dmVzdG1nb2FsLmNvbYILYmV0dGFiZC5jb22CDWNhbmN1bmdvYi5jb22CDWNhc3Ny b29tcy5jb22CEWNyYXZlZm9vZGhhbGwuY29tggtjdGRyZXNzLmNvbYIXY3VzdG9t ZXItcGVyZmVjdGZpdC5jb22CFGRheWlmdWxsZmlsbWl6bGUuY29tgg1kaWNlaGVy b2UuY29tggxkaWdpYmllcy5jb22CFmRybHVpenNlcmdpb3RhdHNjaC5jb22CFmVu Z21vaGFtbWVkaHVzc2llbi5jb22CD2VzbG9xdWVwYXNhLmNvbYIIZ2ZzNy5jb22C D2dpbmtnby1ibGF0dC5kZYIVaGFjaWVuZGFsYXByZXNpdGEuY29tghFpbmR1a3Rp b25zZmVsZC5kZYIGbGpvLmRlggZsa2IuZGWCBmxsZi5kZYIGbGx3LmRlggZsbmYu ZGWCBmxudS5kZYIMbWFzYXJiZWl0LmRlggptZXVtbWMuY29tghNteWxhd3lhcmFj YWRlbXkuY29tghVuYXRpb25hbHRvZGF5bmV3cy5jb22CDW5pbG1vdmllcy5jb22C C256ZWVodWIuY29tghVvZmZpY2Vwcm9wZXJ0eS5jb20uYXWCD29ubHlnb3Z0am9i LmNvbYIRcGFram9iY2FyZWVycy5jb22CEHBob3Rvc2hvcC1iZy5uZXSCCnBpbXBs ZXMuZGWCEXByZWlzdmVyZ2xlaXhoLmRlggxyLXNwcmludC5vcmeCFnJvd2VsbC1n bGFzc2JvdHRsZS5jb22CDXNla2V0YWVyaW4uZGWCD3N0dWZmc3BvcnRzLmNvbYIN dG9vZGVsb29zLmNvbYIRdHJhZGUtaG9yaXpvbi5jb22CEHZlbGxvb2t1bm5lbC5j b22CBnhmcy5kZYIUeG4tLWZyZW13cnRlci00N2EuZGWCEnlhc2VtaW5rYWxheWNp LmNvbYIQemVpdHVtcmVjaG5lci5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUG CisGAQQB1nkCBAIEgfYEgfMA8QB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0t cm/h+tQXAAABjFp6rJ0AAAQDAEcwRQIgVzqJZtDJnXpeRK9C6kzP8ECLbdE8uFN+ 1k7+sgP+itACIQCS0BC6udm0GRpNaVckW0/+dyOnzLsiDTs1W5i/bYJjpwB3AHb/ iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjFp6rPMAAAQDAEgwRgIh AOFCqD9w26+yZGFKv0fbJ9VB1L/p354vuC2Ef5HTzmJJAiEAjDOx0Jiy+wGRmxuu PiGR+bYG+0ObdBNJyThNbIVnrxUwDQYJKoZIhvcNAQELBQADggEBAGm9APaTikGE /SyuSJy/OwqgnB9m6g8/R0qjLGZqhtUAcAfa0ucKYXK3CPPhYvt2I5+ooT4G53ns Qk6YbIYjuHcZSI1I07A6R9WhRm1ClpwQlK/fwrOndCGksrpnwXtnX+S78+gFW7+0 ryExyBnMGsNcXfb/tqCjItn5bptKYbpyCzUEJ1p9jmFw2OJb2XSpmbHZ+Z0vS+iF dThDMk1j+1ZOfypP6IRB5CVvs6WGtTytGzFGxr/pA1UpFeIcqNqNfVWqSHj9RR1N oUqcd3idU04WWcgbhz5GPbyBOlWv/5XHfAHQhpv2VjZsheAqyPPg4B65p3tMQZk6 b5TrCNhk+UY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxcro2/gAzwr9RPkuynIq VvgXTCHDSRMsFw1WjpvJYiKxrHuf0wlTMbljwtRCdIHYxQEjo8+TRPnVDiMIaP9X cB9IOYKdoDkF/XmUA6noYRMxg39oPbgAEu5QyNHo6l1OyCkpTnD5TlkKlvbCgDaf 262bmdwdGsqVIKmClv82d5b4xEmWvaMpfjQYNOs4pKdlqMRCefwBbJeASaeEPGBR tUzp/s1HJrXr3YyqpLp77SxZLqFexBhbYSSbeBEQXspvuQipodRsey2cvxXN6gzO QM+cNL7oYoSC1nBIV0hhwfJdKVYfig8TTv0TpORrAsP0kN/K7ntZ2bVwgjdKoeOO QaCiUdApf7HbKbWDrMENv9pw0GwXXGpKTWUt8VEks3AikJQsf7LCtlFOQk1EuyHh QC+0rCH9plbY9RleOBYXAKJFUnpb3sXF/airvbakYqcFCnKPpmDLhWMt+cVSaATg vV/n9qKE6aads5KERmpAba/YJwZejCxThEbjmI+RM/SdWt1lorZLsw/eF0NDVdy6 rA3jfVCHyNDcKz1XnfkBYZzF8BjIrKmCpByDMilHcTPIX82hOQit8XBjJimp6CaT UbeyMls05Qm9g3Zyk/VbIBPKbzZh7R+SPUDVum2nsALvYAB9X1gvsS4plPK8zy2u fSEu+ckh2UwvMTOv+QNlWlMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 305552228245939732540010761311548351925366 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 19:03:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 19:03:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xfs.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806923471135614912183882790186855947645622725723426473305754235092803103783649228076418939941406219860595891195733525252046928026961705008272030082872488011238359758758313983321108569820684530838011407598809319378015611670167540717460987769847316411537510313367588537479628886476694236681028829178855535429135846986187845128739346297670008564165510245923882244874099878667216357794569867394611950776291767525689291518792656863614291170253347734063267385019584131267478969920830968777915129770853435541442158830228731790262632384854363220082613668664768787245496120378554975236424254778017896295227411040490121242478948492558727941206468671920126134108717036571384979310439336370512115404864861079540531814415303867588027960489158672633097270718451736476160864157447698275829337528831794122071793576570123704211495852619925790596732773959662602303106091569251614850315564254291522660612719530788341300635525599198822572933743650148249526285512734764761316078224741835391962656583474961732699897981620633295253579197797324511907421293672074737312309521259142567433029878481168252522594074220359447968215763652924021879599164717240847397047004091995712929722239209997890368050664299286238556419496562680602512075161492345089737202424403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 58911b7d6e97c3a746202ab4b34af7057526754c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adityarajparamedicalcollege.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altanyalitim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artistiperilmatta.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrapix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avainvestmgoal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettabd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancungob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cassrooms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cravefoodhall.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctdress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customer-perfectfit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dayifullfilmizle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diceheroe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digibies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drluizsergiotatsch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engmohammedhussien.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esloquepasa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfs7.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ginkgo-blatt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haciendalapresita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.induktionsfeld.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ljo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llf.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llw.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnf.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnu.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masarbeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meummc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylawyaracademy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationaltodaynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nilmovies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzeehub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officeproperty.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlygovtjob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakjobcareers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photoshop-bg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimples.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preisvergleixh.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r-sprint.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rowell-glassbottle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seketaerin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuffsports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toodeloos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trade-horizon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vellookunnel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremwrter-47a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaseminkalayci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeitumrechner.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adityarajparamedicalcollege.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altanyalitim.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artistiperilmatta.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atrapix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avainvestmgoal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettabd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancungob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cassrooms.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cravefoodhall.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctdress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-perfectfit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayifullfilmizle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diceheroe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digibies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drluizsergiotatsch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engmohammedhussien.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esloquepasa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfs7.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginkgo-blatt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haciendalapresita.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'induktionsfeld.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llf.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llw.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnf.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnu.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masarbeit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meummc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylawyaracademy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaltodaynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nilmovies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzeehub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeproperty.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlygovtjob.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakjobcareers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoshop-bg.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimples.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preisvergleixh.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r-sprint.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowell-glassbottle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seketaerin.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuffsports.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toodeloos.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade-horizon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vellookunnel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremwrter-47a.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaseminkalayci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeitumrechner.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5a7aac9d00000403004730450220573a8966d0c99d7a5e44af42ea4ccff0408b6dd13cb8537ed64efeb203fe8ad002210092d010bab9d9b4191a4d6957245b4ffe7723a7ccbb220d3b355b98bf6d8263a700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c5a7aacf30000040300483046022100e142a83f70dbafb264614abf47db27d541d4bfe9df9e2fb82d847f91d3ce62490221008c33b1d098b2fb01919b1bae3e2191f9b606fb439b741349c9384d6c8567af15 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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