reiterkappen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:6f:49:51:01:97:a0:a7:32:ab:7e:44:86:74:cf:4b:30:05 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reiterkappen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6f:49:51:01:97:a0:a7:32:ab:7e:44:86:74:cf:4b:30:05
Serial Number (int): 386317940707298578085460760500370622066693
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3b:9b:b6:16:db:bf:f1:8a:a0:44:5a:7e:75:26:ce:e4:97:9f:68:6c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:83:8b:e6:6a:12:cd:5c:f5:12:f7:90:b0:31:db:26:44:03:f1:fd
Fingerprint (sha256): b7:56:83:c9:bc:db:25:c2:32:ad:ad:a7:9b:5a:f9:01:ca:99:1a:7d:f3:a8:90:77:c2:71:d9:5f:91:65:01:f9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate reiterkappen.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reiterkappen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adrija.de
*.aquaterrapark.ru
*.auskultation.de
*.autoskolatesty.cz
*.biospw.org
*.bth.us
*.businessandeconomy.biz
*.cairnsrentalcars.com.au
*.com-indexxq.info
*.cosmeticsurgeons.de
*.dangerousdecibles.org
*.e-x.de
*.elitetechsolutions.com.au
*.epxress.de
*.gesund-und-vitalkost.me
*.hochzeitstaggedichte.de
*.hqx.com.au
*.jazzacademie.be
*.keratoakanthom.de
*.kfz-versicerung.de
*.laserskin.com.au
*.learningspot.com.au
*.luwthansa.de
*.merceds-benz.it
*.mundodafantasia.com.br
*.optikusatrophie.de
*.perfectportraits.com.au
*.reiterkappen.de
*.relogiosantigos.com.br
*.renin-angiotensin-aldosteron-system.de
*.sciology.org
*.sleepersofa.de
*.snippers.be
*.sustainables.net
*.sustaining.net
*.teachtotravel.co
*.teddyri.co
*.teuton.net
*.turnbilder.de
*.uio.de
*.vzr.com.au
*.wassermarken.de
*.wra.in
*.wwwcommenity.net
*.xn--bipolar-strung-4pb.de
*.xn--einkommenssteuererklrung-9bc.de
*.xn--fitnessvertrge-hib.de
*.xn--kochbuchstnder-fib.de
*.xn--sprachgerte-t8a.de
*.xn--wwwleukmie-w5a.de
adrija.de
aquaterrapark.ru
auskultation.de
autoskolatesty.cz
biospw.org
bth.us
businessandeconomy.biz
cairnsrentalcars.com.au
com-indexxq.info
cosmeticsurgeons.de
dangerousdecibles.org
e-x.de
elitetechsolutions.com.au
epxress.de
gesund-und-vitalkost.me
hochzeitstaggedichte.de
hqx.com.au
jazzacademie.be
keratoakanthom.de
kfz-versicerung.de
laserskin.com.au
learningspot.com.au
luwthansa.de
merceds-benz.it
mundodafantasia.com.br
optikusatrophie.de
perfectportraits.com.au
reiterkappen.de
relogiosantigos.com.br
renin-angiotensin-aldosteron-system.de
sciology.org
sleepersofa.de
snippers.be
sustainables.net
sustaining.net
teachtotravel.co
teddyri.co
teuton.net
turnbilder.de
uio.de
vzr.com.au
wassermarken.de
wra.in
wwwcommenity.net
xn--bipolar-strung-4pb.de
xn--einkommenssteuererklrung-9bc.de
xn--fitnessvertrge-hib.de
xn--kochbuchstnder-fib.de
xn--sprachgerte-t8a.de
xn--wwwleukmie-w5a.de

Other certificates including the domain name reiterkappen.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for reiterkappen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINojCCDIqgAwIBAgISBG9JUQGXoKcyq35EhnTPSzAFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTExMDI5NTZaFw0yNDA0MTAxMDI5NTVaMBoxGDAWBgNVBAMT
D3JlaXRlcmthcHBlbi5kZTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
APHsaoN2uKGZYccSv0lHq1cknHw4IAx+xZ04hBiWgiglEdBZmphrt5W328s3p0pd
7c+uNWl8p/6FQJRSLF61Fm+ybhZSa1u+ka+zRZ//pxiBNxuWBRDsAoMPMwUMA9/s
89/LrJrByfJyJFvm5wV8OUkQ7pi/9wHQwbvOZFlW6ka+Vjt6YeyBd9rC7WZEeBDs
mQZ1nHZXXoUakuxD1DNZxGwrU5x5SO98wZS7I8Y4B+vjLgo2si0ZJphbIYf99oMS
4856NDhy9zK4U0NM+i8owkF4EqhTbEsBtMoMfM99DzpO50MNHetchjrKX3JcdHJX
WYjje2X+OgJec+9AS0RXFpaWW9JiWiGcNPoohASQAmuJ18XYfJB1LwANXxG1lD7E
Mdyavbrl5121hc9agD0+0EXTCp2wzYFzyKxDDTA3BR7n+0Em+pI7Nz0W2bk8hu5y
DXdbR+aUrY15cIs7Q9Tc00z7Qa2D2H6vdMXL0cdomDaWgP44G6HHHgOx29rvjt+5
HMP/yQP9gx6KGWd/mzWhb0wzaq1oqEiFhuaiDFKPWWqSmrLAtvp/66wzsQzztutu
tjWV7jYMe48DlZxCc0VEU61ThEI0BTtKW38PyaXbNTMm+rvDbY6b1RId78S8lrPW
zlo9XWSzFSd1nLLdBjQPZ6YHknWrgWBLWt/G4cYJwravAgMBAAGjggnIMIIJxDAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFDubthbbv/GKoERafnUmzuSXn2hsMB8GA1Ud
IwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggr
BgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRw
Oi8vcjMuaS5sZW5jci5vcmcvMIIHzwYDVR0RBIIHxjCCB8KCCyouYWRyaWphLmRl
ghIqLmFxdWF0ZXJyYXBhcmsucnWCESouYXVza3VsdGF0aW9uLmRlghMqLmF1dG9z
a29sYXRlc3R5LmN6ggwqLmJpb3Nwdy5vcmeCCCouYnRoLnVzghgqLmJ1c2luZXNz
YW5kZWNvbm9teS5iaXqCGSouY2Fpcm5zcmVudGFsY2Fycy5jb20uYXWCEiouY29t
LWluZGV4eHEuaW5mb4IVKi5jb3NtZXRpY3N1cmdlb25zLmRlghcqLmRhbmdlcm91
c2RlY2libGVzLm9yZ4IIKi5lLXguZGWCGyouZWxpdGV0ZWNoc29sdXRpb25zLmNv
bS5hdYIMKi5lcHhyZXNzLmRlghkqLmdlc3VuZC11bmQtdml0YWxrb3N0Lm1lghkq
LmhvY2h6ZWl0c3RhZ2dlZGljaHRlLmRlggwqLmhxeC5jb20uYXWCESouamF6emFj
YWRlbWllLmJlghMqLmtlcmF0b2FrYW50aG9tLmRlghQqLmtmei12ZXJzaWNlcnVu
Zy5kZYISKi5sYXNlcnNraW4uY29tLmF1ghUqLmxlYXJuaW5nc3BvdC5jb20uYXWC
DioubHV3dGhhbnNhLmRlghEqLm1lcmNlZHMtYmVuei5pdIIYKi5tdW5kb2RhZmFu
dGFzaWEuY29tLmJyghQqLm9wdGlrdXNhdHJvcGhpZS5kZYIZKi5wZXJmZWN0cG9y
dHJhaXRzLmNvbS5hdYIRKi5yZWl0ZXJrYXBwZW4uZGWCGCoucmVsb2dpb3NhbnRp
Z29zLmNvbS5icoIoKi5yZW5pbi1hbmdpb3RlbnNpbi1hbGRvc3Rlcm9uLXN5c3Rl
bS5kZYIOKi5zY2lvbG9neS5vcmeCECouc2xlZXBlcnNvZmEuZGWCDSouc25pcHBl
cnMuYmWCEiouc3VzdGFpbmFibGVzLm5ldIIQKi5zdXN0YWluaW5nLm5ldIISKi50
ZWFjaHRvdHJhdmVsLmNvggwqLnRlZGR5cmkuY2+CDCoudGV1dG9uLm5ldIIPKi50
dXJuYmlsZGVyLmRlgggqLnVpby5kZYIMKi52enIuY29tLmF1ghEqLndhc3Nlcm1h
cmtlbi5kZYIIKi53cmEuaW6CEioud3d3Y29tbWVuaXR5Lm5ldIIbKi54bi0tYmlw
b2xhci1zdHJ1bmctNHBiLmRlgiUqLnhuLS1laW5rb21tZW5zc3RldWVyZXJrbHJ1
bmctOWJjLmRlghsqLnhuLS1maXRuZXNzdmVydHJnZS1oaWIuZGWCGyoueG4tLWtv
Y2hidWNoc3RuZGVyLWZpYi5kZYIYKi54bi0tc3ByYWNoZ2VydGUtdDhhLmRlghcq
LnhuLS13d3dsZXVrbWllLXc1YS5kZYIJYWRyaWphLmRlghBhcXVhdGVycmFwYXJr
LnJ1gg9hdXNrdWx0YXRpb24uZGWCEWF1dG9za29sYXRlc3R5LmN6ggpiaW9zcHcu
b3JnggZidGgudXOCFmJ1c2luZXNzYW5kZWNvbm9teS5iaXqCF2NhaXJuc3JlbnRh
bGNhcnMuY29tLmF1ghBjb20taW5kZXh4cS5pbmZvghNjb3NtZXRpY3N1cmdlb25z
LmRlghVkYW5nZXJvdXNkZWNpYmxlcy5vcmeCBmUteC5kZYIZZWxpdGV0ZWNoc29s
dXRpb25zLmNvbS5hdYIKZXB4cmVzcy5kZYIXZ2VzdW5kLXVuZC12aXRhbGtvc3Qu
bWWCF2hvY2h6ZWl0c3RhZ2dlZGljaHRlLmRlggpocXguY29tLmF1gg9qYXp6YWNh
ZGVtaWUuYmWCEWtlcmF0b2FrYW50aG9tLmRlghJrZnotdmVyc2ljZXJ1bmcuZGWC
EGxhc2Vyc2tpbi5jb20uYXWCE2xlYXJuaW5nc3BvdC5jb20uYXWCDGx1d3RoYW5z
YS5kZYIPbWVyY2Vkcy1iZW56Lml0ghZtdW5kb2RhZmFudGFzaWEuY29tLmJyghJv
cHRpa3VzYXRyb3BoaWUuZGWCF3BlcmZlY3Rwb3J0cmFpdHMuY29tLmF1gg9yZWl0
ZXJrYXBwZW4uZGWCFnJlbG9naW9zYW50aWdvcy5jb20uYnKCJnJlbmluLWFuZ2lv
dGVuc2luLWFsZG9zdGVyb24tc3lzdGVtLmRlggxzY2lvbG9neS5vcmeCDnNsZWVw
ZXJzb2ZhLmRlggtzbmlwcGVycy5iZYIQc3VzdGFpbmFibGVzLm5ldIIOc3VzdGFp
bmluZy5uZXSCEHRlYWNodG90cmF2ZWwuY2+CCnRlZGR5cmkuY2+CCnRldXRvbi5u
ZXSCDXR1cm5iaWxkZXIuZGWCBnVpby5kZYIKdnpyLmNvbS5hdYIPd2Fzc2VybWFy
a2VuLmRlggZ3cmEuaW6CEHd3d2NvbW1lbml0eS5uZXSCGXhuLS1iaXBvbGFyLXN0
cnVuZy00cGIuZGWCI3huLS1laW5rb21tZW5zc3RldWVyZXJrbHJ1bmctOWJjLmRl
ghl4bi0tZml0bmVzc3ZlcnRyZ2UtaGliLmRlghl4bi0ta29jaGJ1Y2hzdG5kZXIt
ZmliLmRlghZ4bi0tc3ByYWNoZ2VydGUtdDhhLmRlghV4bi0td3d3bGV1a21pZS13
NWEuZGUwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYz4STfwAAAE
AwBHMEUCIHzsnqEgjuU3SsnP2+5fsbyFoRHIfsL4B8VhUd6VOeLjAiEAnxYa1tAb
EwqW9piO1o7L3U2asVYTNgEMaqJvLzYR2JQAdgCi4r/WHt4vLweg1k5tN6fcZUOw
xrUuotq3iviabfUX2AAAAYz4STf4AAAEAwBHMEUCIQCQZjnDfhWRpEbd810htzA7
jxUB6ZxE5L3/2zafrrfFWQIgRj2WGgsuJNheE0uX4bbEj/s+oplWoryNUAt7xFX+
0dYwDQYJKoZIhvcNAQELBQADggEBAHxmZiLvSuBOZcXhFMOhoKhER6p7a9KSirW0
s7e1V4GFgT7BjLAzgZUP4gtoLH9zo6fPhWbOxEBLDa6Ypn2pGCfHqWKETIJ126wT
CcVkdIndwVoevgvGJ/tlvN2npDwwGatNILzbYP8f/gde6y9grpkd1blMIcOHhShf
0O3Zy7BNYHB2hhnpf3JVKEzhhDK1DxyIE6nGaiTQwaYGn4UneSt2Ca0sXv0NwDK8
rMvdZu+U9n3iVszTCYSjZ8ibtyYNamvjz4NWOMq8AmvVeeWtrL4lPBMOiM7O1gj5
hlRD9QMBp606IYafjF3r0dYGoBbj+67Di16H5jxDD+Zrvjxwd/4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386317940707298578085460760500370622066693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 10:29:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 10:29:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reiterkappen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 986961772780935373542330607351597442978862945284060876177982695775215353767641886509932070067609629886630225697148862528047519584084959212274010536069076476722741865942567211324044530879975178858945482433097472071035945287089273887174376401408887629204576197885966384508975547077312033019577825901884171680182509759415558971754975509631552007694651260487020609708344094566761280202808205923881378398352605597699679222890442241515299682767003995577482352908181454285585031985737238978446569463033978931542704714896685078304956711781817415472852798903631577415235943882188444883281955181989176836358530665427169081938172199672682456574358711334715447747085042860944210379878815774401935150497808238581765843308224188919683310960503877638052225562082776118104651773367754070081988366029204237334416285579851783156066691520179991085109236740161572661517233924430761165885181487137301153441041290603256708329134724483094692756549971365317468101756768954691907937662593066647070350785528350522374210344992315844120449871554556082517032962400756311779771728535227968758527419400588234412297811998489430517501845905534272461628823962407298616638319654530743188102140631624200739254151607957802509998487444878694447798804366388886074695005871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b9bb616dbbff18aa0445a7e7526cee4979f686c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrija.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquaterrapark.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auskultation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biospw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessandeconomy.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cairnsrentalcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.com-indexxq.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmeticsurgeons.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-x.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitetechsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epxress.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesund-und-vitalkost.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hochzeitstaggedichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jazzacademie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keratoakanthom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfz-versicerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merceds-benz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundodafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optikusatrophie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectportraits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relogiosantigos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snippers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustainables.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustaining.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachtotravel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teddyri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teuton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turnbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vzr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wra.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcommenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bipolar-strung-4pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fitnessvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kochbuchstnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sprachgerte-t8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wwwleukmie-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adrija.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaterrapark.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auskultation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoskolatesty.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biospw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bth.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessandeconomy.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cairnsrentalcars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com-indexxq.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmeticsurgeons.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangerousdecibles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-x.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitetechsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epxress.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesund-und-vitalkost.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hochzeitstaggedichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazzacademie.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keratoakanthom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfz-versicerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningspot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luwthansa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merceds-benz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundodafantasia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optikusatrophie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectportraits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reiterkappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relogiosantigos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renin-angiotensin-aldosteron-system.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciology.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleepersofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snippers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainables.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustaining.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachtotravel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teddyri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teuton.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vzr.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wassermarken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wra.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcommenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bipolar-strung-4pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--einkommenssteuererklrung-9bc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fitnessvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kochbuchstnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sprachgerte-t8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wwwleukmie-w5a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf84937f0000004030047304502207cec9ea1208ee5374ac9cfdbee5fb1bc85a111c87ec2f807c56151de9539e2e30221009f161ad6d01b130a96f6988ed68ecbdd4d9ab1561336010c6aa26f2f3611d894007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf84937f80000040300473045022100906639c37e1591a446ddf35d21b7303b8f1501e99c44e4bdffdb369faeb7c5590220463d961a0b2e24d85e134b97e1b6c48ffb3ea29956a2bc8d500b7bc455fed1d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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