wwwvpn.notar-liessem.de

Issued by R3

About this certificate

This digital certificate with serial number 04:57:93:bb:a2:74:a2:4f:59:d6:fb:57:7e:88:0a:18:34:a2 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wwwvpn.notar-liessem.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:93:bb:a2:74:a2:4f:59:d6:fb:57:7e:88:0a:18:34:a2
Serial Number (int): 378250080419046616698104994285234792445090
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1b:5e:c9:30:f5:3d:8f:e9:5b:4c:cd:94:45:28:4e:a3:a0:3d:b3:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:85:62:0a:48:5a:16:e4:87:10:96:3a:32:c0:98:e6:ad:23:1d:40
Fingerprint (sha256): ba:74:be:ce:7b:ca:ff:ff:be:e6:d3:4d:d7:0d:d1:12:e2:31:09:c3:8b:b8:61:f4:a4:70:5e:f4:53:b3:af:45

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wwwvpn.notar-liessem.de

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwwvpn.notar-liessem.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achat-holz.de
*.callboy-felix-tuebingen.de
*.infernalisch.de
*.taikofit.de
*.xn--promedia-kln-ejb.de
achat-holz.de
api.medien-dachsberg.at
backend.antimarder.com
beta.peterschlenker.de
bounce.dt80.net
callboy-felix-tuebingen.de
cart.antimarder.com
gci.antimarder.com
hitmag.wp-testarea.de
infernalisch.de
informatik.moontec.de
internal.fliesen-keil.de
ite.icekey.org
ite.kevinkoziol.com
ite.medien-dachsberg.at
ite.no-key.info
kqrzfzccomukvex.lima-city.eu
lara.fliesen-keil.de
learn.fliesen-keil.de
marken-uhren-billig.de
mysql.antimarder.com
mzcahqmvzchnxfg.lima-city.eu
october.fliesen-keil.de
pjcjnqhunxdril.tjark.pro
review.enjoi-sailing.com
store.antimarder.com
taikofit.de
www.cronjob.dtc-billen-schulz.de
www.dmhd.teamwb.de
www.dslprofis.mediaphono.de
www.familie.berger.io
www.fortunapforte.teamwb.de
www.hitmag.wp-testarea.de
www.info.inet-entwicklung.de
www.la-rosa-groebenzell.foodtasting.de
www.money.tibu.ch
www.sprit.eersink.com
www.tierschutz.erdenfreund.com
www.wettbuden.drjustusadam.de
www.zeiterfassung.kilianseizinger.de
wwwqlxkons.kevinkoziol.com
wwwvpn.notar-liessem.de
wwwyopho9mx.antifax.com
xn--promedia-kln-ejb.de
ykvkycoikrqwbvn.lima-city.eu

Other certificates including the domain name notar-liessem.de

(limited to 100 certificates)
www.eis.playkev.de
www.ff.teamwb.de
*.iris-appartements.at
www.updates.slashadmincms.de
*.markus-bilen.de
pnys.de
lserver.hampoelz.net
*.scarlettsrace.com
e-motorstore.de
*.frei-von--essstoerungen.de
*.heger-bischof.de
*.klaresmarketing.de
www.judo.sg-meerane02.de
*.buchsbaum-atrops.de
*.physik.fun
sebastianvietorrau.spindelberger.com
mediathek.notar-liessem.de
idecministeriosmail.albertus-dienste.de
*.meine-schutzfolie.de
www.ff.teamwb.de
018.icekey.org
*.summerswish.com
*.ciderspider.com
*.parabellum-thriller.de
*.dr-heil-berlin.de
*.xn--gromann-steuerberatung-s1b.de
mail01.p-s-soft.de
sql.icekey.de
2020.woeschka.com
*.gebaeudeservice.nrw
*.gesundheitscampus-herborn.de
mobil.notar-liessem.de
m.kevinkoziol.de
*.moebelundraumberlin.de
www.www.allesnormel.de
www.cloud.lvlinfinity.com
discord.boslev-online.de
mail.moinalex.de
*.musikschule-adlershof.de
www.peru2016-2018.christianvr.de
*.huria-charity.de
www.finca.ferienwohnung-mallorca.de
nlfs1.notar-liessem.de
home.icekey.de
www.schliersee.wachbuch.info
*.unterbuecherhof.it
*.pulseofmd.de
phextempel.de
*.citymusicfm.de
*.weakwillies.de
server2.moinalex.de
*.captain-camper.com
www.weinseminar.tirol
*.pss-technik.de
zzouetcmhzpnnh.tjark.pro
djnqxjszsilyzhq.lima-city.eu
*.feindenken.eu
*.altenhof-fliesen.com
wwwnlwhopm.gullshock.com
o69iay0p.notar-liessem.de
*.betriebsumzug.ch
testing.mokis.de
*.terrasse14.com
smtp2.enjoi-sailing.com
*.pss-technik.de
wap.lima-city.info
verdaechtig-gute-jobs-fm.thenexuscommunity.de
checkout.notar-liessem.de
notar-liessem.de
*.schreck.consulting
abcdefghijklmnop12345.witzepedia.de
aste.spdns.org
hermes.beautyled.com
www.nc.beenaural.de
crrozckzrhbphvf.immo-look.eu
*.biofutter-landshut.de
sdrfgsedgsdf.2icecube.de
mailbox.kevinkoziol.de
old.beautyled.com
pro.panolook.com
*.razeyourgods.com
vire-waggis.de
notar-liessem.de
*.steffenreger.de
pma.kevinkoziol.com
website.peterschlenker.de
wwwolkadmx0.vidpxxel.de
*.mentalstube.at
wwwwwwxbfmq.lima-city.eu
ra.tutorialecke.org
e.wiesi1.de
*.mieten-auf-zeit.berlin
www.couchdealz.de
lows.lima-city.net
www.btlcdoc.ratpool.de
gate.moin-alex.de
*.it-paetrick.de
*.solawi3land.de
pay.2icecube.de
mwukjkuwtyskjrb.lookpool.de

Certificate

The complete raw certificate details for wwwvpn.notar-liessem.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAELzYRrCY2FiUf3+WZMSZ/CAUW1Tnn
0w8nWdqgTN4s++mnH7BDalstsyzAX7CaTIWZksS8HModuPn/UujCbJ1n2w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378250080419046616698104994285234792445090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 14:48:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 14:48:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwwvpn.notar-liessem.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00042f3611ac263616251fdfe59931267f080516d539e7d30f2759daa04cde2cfbe9a71fb0436a5b2db32cc05fb09a4c859992c4bc1cca1db8f9ff52e8c26c9d67db
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b5ec930f53d8fe95b4ccd9445284ea3a03db324
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achat-holz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callboy-felix-tuebingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infernalisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taikofit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--promedia-kln-ejb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achat-holz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.medien-dachsberg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.antimarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.peterschlenker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounce.dt80.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callboy-felix-tuebingen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.antimarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gci.antimarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitmag.wp-testarea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infernalisch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informatik.moontec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ite.icekey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ite.kevinkoziol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ite.medien-dachsberg.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ite.no-key.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kqrzfzccomukvex.lima-city.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lara.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marken-uhren-billig.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysql.antimarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzcahqmvzchnxfg.lima-city.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'october.fliesen-keil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjcjnqhunxdril.tjark.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.antimarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taikofit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cronjob.dtc-billen-schulz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dmhd.teamwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dslprofis.mediaphono.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.familie.berger.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fortunapforte.teamwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hitmag.wp-testarea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info.inet-entwicklung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.la-rosa-groebenzell.foodtasting.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.money.tibu.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprit.eersink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tierschutz.erdenfreund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wettbuden.drjustusadam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeiterfassung.kilianseizinger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwqlxkons.kevinkoziol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwvpn.notar-liessem.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwyopho9mx.antifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--promedia-kln-ejb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ykvkycoikrqwbvn.lima-city.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7b728012000004030047304502206da7333c464b0469ba9e4938f9eb2bc49ec6379fcbcd1ae72f2cc375ff5276da022100f416de4da661456a3982e8a6194578bab05127b0d695be2eb6f9a7e1a3620b7d007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7b728024000004030047304502203d8acfc796c8ae1da74f540daf14b8a6720623998c6644fa190bd809d8c3841c022100a8b2aa5d959dfe89760cdf8d7f0662c6156b1c3a504d6e8124d496d85c8ad380
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088454d4e6c9f3a902b5074a9e72722d7df5d4ba8af8f20f5524a7767a496f1bf402a9b65a44b2ab2324adf47c78675a4d74c4ec0aa1c50b90d62280cce221a10261b5dbf2a383a92ea31ad701ac346c1ad1cb2abfa3fdf629eaab3a4cb4594105cbf612681f24941073acf5936c55fc0c9cc888b60b4820a292245504c5c7b30075e9ef5943d73ce6342b567648038d06201c3e80915873482c8e6db85c1a9359fb925b8f3cd45573126e52b8f1891acea5ecd8d998ab67f39ed5639548c36537eb0c65531c0ca115c89b126fe4c2bd4d89a8ca25475f343ab5137a00262ab1be9fa6bb77f624ce1a0e163fa0621fa8208b4d707d4f7abcf5c08802119c34241