kockrezepte.de

Issued by R3

About this certificate

This digital certificate with serial number 04:2d:e8:0a:b0:c9:42:b1:59:59:9c:9f:d4:97:a4:30:ef:16 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kockrezepte.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2d:e8:0a:b0:c9:42:b1:59:59:9c:9f:d4:97:a4:30:ef:16
Serial Number (int): 364070286642123494593660494093324416773910
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:7b:06:56:7b:1a:9b:26:f7:50:d8:f0:74:07:33:b5:bd:13:61:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:25:44:c8:9e:f9:d0:29:77:b0:01:f8:eb:04:48:af:ab:7e:43:96
Fingerprint (sha256): c1:ca:6a:46:76:ed:70:aa:0f:ad:a5:1b:88:68:b0:1b:8c:b1:25:35:6e:79:f7:d6:24:09:d2:83:f3:7f:19:05

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kockrezepte.de

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kockrezepte.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adamraeburn.com
*.anisonbiyori.com
*.anytymfly.com
*.auburnparkandsell.com
*.avlorenfe.co
*.bellssouth.net
*.bolzanomeats.com
*.breonnataylor.com
*.buby.com.au
*.cannabisanbau.de
*.centerpieces.de
*.cero.me
*.dcu.de
*.downroms.com
*.ecc2022.org
*.educating.de
*.embryodonation.net
*.enitanassociates.com
*.etickets.co.za
*.federbestimmung.de
*.fortframes.com
*.futballjersey.com
*.ganaconkalley.com
*.gebrauchtwagen-privat.de
*.gsm-city.com
*.hawaii-event.com
*.indiyastudychannel.com
*.jesusbelovedsaviour.com
*.kleinkaliberpistolen.de
*.kockrezepte.de
*.kostenlosespielespielen.de
*.livesports-streaming.com
*.meckel-divertikel.de
*.mengfoot.com
*.moyaua.com
*.noptebooksbilliger.de
*.playoffs.be
*.productsaccountsmy.com
*.rachelakerley.com
*.saloumi.com
*.saruei.com
*.silvastattoo.com
*.spain.co.za
*.targetpanik.de
*.transportesnuevatijuana.com
*.trishgayle.com
*.wudo.net
*.xn--hngerfhrerschein-vnb15b.de
*.zzh000.com
adamraeburn.com
anisonbiyori.com
anytymfly.com
auburnparkandsell.com
avlorenfe.co
bellssouth.net
bolzanomeats.com
breonnataylor.com
buby.com.au
cannabisanbau.de
centerpieces.de
cero.me
dcu.de
downroms.com
ecc2022.org
educating.de
embryodonation.net
enitanassociates.com
etickets.co.za
federbestimmung.de
fortframes.com
futballjersey.com
ganaconkalley.com
gebrauchtwagen-privat.de
gsm-city.com
hawaii-event.com
indiyastudychannel.com
jesusbelovedsaviour.com
kleinkaliberpistolen.de
kockrezepte.de
kostenlosespielespielen.de
livesports-streaming.com
meckel-divertikel.de
mengfoot.com
moyaua.com
noptebooksbilliger.de
playoffs.be
productsaccountsmy.com
rachelakerley.com
saloumi.com
saruei.com
silvastattoo.com
spain.co.za
targetpanik.de
transportesnuevatijuana.com
trishgayle.com
wudo.net
xn--hngerfhrerschein-vnb15b.de
zzh000.com

Other certificates including the domain name kockrezepte.de

(limited to 100 certificates)
soonenklar.tv
nautilislive.org
kockrezepte.de
kockrezepte.de
kockrezepte.de
kockrezepte.de
mywifiect.net
kockrezepte.de
kockrezepte.de
khushinetwork.net
mypsc.org
kockrezepte.de
kockrezepte.de

Certificate

The complete raw certificate details for kockrezepte.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHjCCDAagAwIBAgISBC3oCrDJQrFZWZyf1JekMO8WMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDIxOTA2NDdaFw0yNDA1MDIxOTA2NDZaMBkxFzAVBgNVBAMT
DmtvY2tyZXplcHRlLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
zGgV5dyke8+16YnI0lZ0XK7lm1qIyGZFrGPGNleOkvN4o8jekNUZrNkwTjVeUHNC
N4H+499va82dv1XhfGVdqrYy8274vz9X8thfDxr2K3f3PifyxWCZZyCCyIPBGMcu
rFqkxtL5vfu27ZdEmkuK2njFirhRwlCIdCFgg9VdrTakHfCTbHZp3WLhX/TecI4A
qT4Ff7GLv41JeoiP3v92nkPHJ/FpVomoum0RWsS5FiOx31xPQYBP3AGVwrxpLFx1
4fTZtMPQ6AuXdMLmcyyo/4equccVwmzVpsZ7jouCiBuHQ1JzDoUXwlkapPYZWCOS
tkg8yJY5odJdfr4R4AeaRzZZ+mZJA8l7mDI3tYUemoWBWMH3MFwQCNnDs83KKetC
IH2TDIjiHM4UIfYicQfTHjUtik93FOwR8xA/x1SzYkfvP9c17YK/leaobp9g3eiD
MYVF35r1UJGd5uicNtrnwklTOKAxDi61dD069smiT/VH/qkc4BsEZu8G7vsgUW4Y
84o4kkAfd8p5U/Bh1+MFuMI1QLlHbH0xBOiZyUYAVnIIGrLJekQloSD57P3hPXoF
mWdMzqni7bzfVkJE0tBEdlFIcrVeskx/Sxe7PbHTOejTFoh3zfw3GeIUtgrAtDm6
7SfZ4Cc64tQxJ18KqL9aseD/0BtfZNgWqP1NDDgrEB0CAwEAAaOCCUUwgglBMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUYXsGVnsamyb3UNjwdAcztb0TYScwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wggdLBgNVHREEggdCMIIHPoIRKi5hZGFtcmFlYnVy
bi5jb22CEiouYW5pc29uYml5b3JpLmNvbYIPKi5hbnl0eW1mbHkuY29tghcqLmF1
YnVybnBhcmthbmRzZWxsLmNvbYIOKi5hdmxvcmVuZmUuY2+CECouYmVsbHNzb3V0
aC5uZXSCEiouYm9semFub21lYXRzLmNvbYITKi5icmVvbm5hdGF5bG9yLmNvbYIN
Ki5idWJ5LmNvbS5hdYISKi5jYW5uYWJpc2FuYmF1LmRlghEqLmNlbnRlcnBpZWNl
cy5kZYIJKi5jZXJvLm1lgggqLmRjdS5kZYIOKi5kb3ducm9tcy5jb22CDSouZWNj
MjAyMi5vcmeCDiouZWR1Y2F0aW5nLmRlghQqLmVtYnJ5b2RvbmF0aW9uLm5ldIIW
Ki5lbml0YW5hc3NvY2lhdGVzLmNvbYIQKi5ldGlja2V0cy5jby56YYIUKi5mZWRl
cmJlc3RpbW11bmcuZGWCECouZm9ydGZyYW1lcy5jb22CEyouZnV0YmFsbGplcnNl
eS5jb22CEyouZ2FuYWNvbmthbGxleS5jb22CGiouZ2VicmF1Y2h0d2FnZW4tcHJp
dmF0LmRlgg4qLmdzbS1jaXR5LmNvbYISKi5oYXdhaWktZXZlbnQuY29tghgqLmlu
ZGl5YXN0dWR5Y2hhbm5lbC5jb22CGSouamVzdXNiZWxvdmVkc2F2aW91ci5jb22C
GSoua2xlaW5rYWxpYmVycGlzdG9sZW4uZGWCECoua29ja3JlemVwdGUuZGWCHCou
a29zdGVubG9zZXNwaWVsZXNwaWVsZW4uZGWCGioubGl2ZXNwb3J0cy1zdHJlYW1p
bmcuY29tghYqLm1lY2tlbC1kaXZlcnRpa2VsLmRlgg4qLm1lbmdmb290LmNvbYIM
Ki5tb3lhdWEuY29tghcqLm5vcHRlYm9va3NiaWxsaWdlci5kZYINKi5wbGF5b2Zm
cy5iZYIYKi5wcm9kdWN0c2FjY291bnRzbXkuY29tghMqLnJhY2hlbGFrZXJsZXku
Y29tgg0qLnNhbG91bWkuY29tggwqLnNhcnVlaS5jb22CEiouc2lsdmFzdGF0dG9v
LmNvbYINKi5zcGFpbi5jby56YYIQKi50YXJnZXRwYW5pay5kZYIdKi50cmFuc3Bv
cnRlc251ZXZhdGlqdWFuYS5jb22CECoudHJpc2hnYXlsZS5jb22CCioud3Vkby5u
ZXSCICoueG4tLWhuZ2VyZmhyZXJzY2hlaW4tdm5iMTViLmRlggwqLnp6aDAwMC5j
b22CD2FkYW1yYWVidXJuLmNvbYIQYW5pc29uYml5b3JpLmNvbYINYW55dHltZmx5
LmNvbYIVYXVidXJucGFya2FuZHNlbGwuY29tggxhdmxvcmVuZmUuY2+CDmJlbGxz
c291dGgubmV0ghBib2x6YW5vbWVhdHMuY29tghFicmVvbm5hdGF5bG9yLmNvbYIL
YnVieS5jb20uYXWCEGNhbm5hYmlzYW5iYXUuZGWCD2NlbnRlcnBpZWNlcy5kZYIH
Y2Vyby5tZYIGZGN1LmRlggxkb3ducm9tcy5jb22CC2VjYzIwMjIub3JnggxlZHVj
YXRpbmcuZGWCEmVtYnJ5b2RvbmF0aW9uLm5ldIIUZW5pdGFuYXNzb2NpYXRlcy5j
b22CDmV0aWNrZXRzLmNvLnphghJmZWRlcmJlc3RpbW11bmcuZGWCDmZvcnRmcmFt
ZXMuY29tghFmdXRiYWxsamVyc2V5LmNvbYIRZ2FuYWNvbmthbGxleS5jb22CGGdl
YnJhdWNodHdhZ2VuLXByaXZhdC5kZYIMZ3NtLWNpdHkuY29tghBoYXdhaWktZXZl
bnQuY29tghZpbmRpeWFzdHVkeWNoYW5uZWwuY29tghdqZXN1c2JlbG92ZWRzYXZp
b3VyLmNvbYIXa2xlaW5rYWxpYmVycGlzdG9sZW4uZGWCDmtvY2tyZXplcHRlLmRl
ghprb3N0ZW5sb3Nlc3BpZWxlc3BpZWxlbi5kZYIYbGl2ZXNwb3J0cy1zdHJlYW1p
bmcuY29tghRtZWNrZWwtZGl2ZXJ0aWtlbC5kZYIMbWVuZ2Zvb3QuY29tggptb3lh
dWEuY29tghVub3B0ZWJvb2tzYmlsbGlnZXIuZGWCC3BsYXlvZmZzLmJlghZwcm9k
dWN0c2FjY291bnRzbXkuY29tghFyYWNoZWxha2VybGV5LmNvbYILc2Fsb3VtaS5j
b22CCnNhcnVlaS5jb22CEHNpbHZhc3RhdHRvby5jb22CC3NwYWluLmNvLnphgg50
YXJnZXRwYW5pay5kZYIbdHJhbnNwb3J0ZXNudWV2YXRpanVhbmEuY29tgg50cmlz
aGdheWxlLmNvbYIId3Vkby5uZXSCHnhuLS1obmdlcmZocmVyc2NoZWluLXZuYjE1
Yi5kZYIKenpoMDAwLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABjWtuTvAAAAQDAEcwRQIgHuI8eOUKnAQniOmACzGG4t76ywoPf6DA34T6Xj+S
4CICIQDuZMP/+z8fnCuy4cYX0kp/kxMmO9au/WRS0bqQvLR4OgB3ADtTd3U+LbmA
ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjWtuTvAAAAQDAEgwRgIhAOkjWYog
X1daechUqnqocdcLKul6pcC0CR9QthicvH8bAiEA+Z2pyM5G80YXy33VpAke5e9n
+wm1kqJH/19hJNcmTAAwDQYJKoZIhvcNAQELBQADggEBADNLFFFu9UwX/DiO5jxd
fdaxylr60ZPBK9f8eGgnyyIiak0xW9Zc7IaFFo1rVdv/xQfGICMon/xluJ2WDcDS
5kFc39aBnIk1tCJF9DAn1VmAo+XH0n7F/GPuzvQB6v72lUr+0XNzjnsNi1Sce49H
WJrEuPzRrWpCQ4yWzqvlDo14qWbc1kx6kzwR/moDVl/8TIvNm7qNrIrmIyWywYfg
dqpp9L6KRDOr0VGB2N4uT2UKd9DPwMOQgQuddZpHWnwGyQiwUcdBWd47DAU7TWfq
YSoaDh6HB/EsI0KZeT27pSTifzaYAVD3fA2Mlpm+FymE0/NNCjK3Kdj9u0xIO43A
IY4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzGgV5dyke8+16YnI0lZ0
XK7lm1qIyGZFrGPGNleOkvN4o8jekNUZrNkwTjVeUHNCN4H+499va82dv1XhfGVd
qrYy8274vz9X8thfDxr2K3f3PifyxWCZZyCCyIPBGMcurFqkxtL5vfu27ZdEmkuK
2njFirhRwlCIdCFgg9VdrTakHfCTbHZp3WLhX/TecI4AqT4Ff7GLv41JeoiP3v92
nkPHJ/FpVomoum0RWsS5FiOx31xPQYBP3AGVwrxpLFx14fTZtMPQ6AuXdMLmcyyo
/4equccVwmzVpsZ7jouCiBuHQ1JzDoUXwlkapPYZWCOStkg8yJY5odJdfr4R4Aea
RzZZ+mZJA8l7mDI3tYUemoWBWMH3MFwQCNnDs83KKetCIH2TDIjiHM4UIfYicQfT
HjUtik93FOwR8xA/x1SzYkfvP9c17YK/leaobp9g3eiDMYVF35r1UJGd5uicNtrn
wklTOKAxDi61dD069smiT/VH/qkc4BsEZu8G7vsgUW4Y84o4kkAfd8p5U/Bh1+MF
uMI1QLlHbH0xBOiZyUYAVnIIGrLJekQloSD57P3hPXoFmWdMzqni7bzfVkJE0tBE
dlFIcrVeskx/Sxe7PbHTOejTFoh3zfw3GeIUtgrAtDm67SfZ4Cc64tQxJ18KqL9a
seD/0BtfZNgWqP1NDDgrEB0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364070286642123494593660494093324416773910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 19:06:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 19:06:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kockrezepte.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833906108432267326679845139482978644873684672726287000626937006234739078524035635968405460410590415401294840257660281363110321049968471200018153480422399775720349432794938914055000070681621967904348783849387749389006514465293759599436231763430264988516807410392232413480464328414622095710078375057226938146140724025878208614107163672535671820146417220235266966223309455294036252445785531128702049233361265451658907345542305945354653125982989863263998959020158266848498488260807236514129441004711909864965080594587622639008307250112009684715876272146068772216771772926550845785773135623805000988687500978280192792150529947699293712266919189860323566427648266817459012832600029746205732538609176123445838536099879161722938837725740999912131207596833755772114428149729060150963817997747756762857897405666418967621497667854856052331551160686490073791223912555879113056699274753149792703598698788120103788617343563572880228895574068464702189911179434529080586743723843086344341217711240324511153559667327965560440241618161195409839025238910208512815075410069273045138552252133262743110586993835023002250286703115231037294336771421718894610512176415222293328563217002876894763134578823611290265087459283536769351084725306009116778827550749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							617b06567b1a9b26f750d8f0740733b5bd136127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamraeburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anisonbiyori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytymfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auburnparkandsell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avlorenfe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellssouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolzanomeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breonnataylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buby.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabisanbau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerpieces.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cero.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecc2022.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educating.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embryodonation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enitanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etickets.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federbestimmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futballjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganaconkalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gebrauchtwagen-privat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsm-city.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaii-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indiyastudychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesusbelovedsaviour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleinkaliberpistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kockrezepte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostenlosespielespielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesports-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meckel-divertikel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mengfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moyaua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noptebooksbilliger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playoffs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productsaccountsmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rachelakerley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saloumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saruei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvastattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spain.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.targetpanik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transportesnuevatijuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trishgayle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wudo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hngerfhrerschein-vnb15b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zzh000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamraeburn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anisonbiyori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytymfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auburnparkandsell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avlorenfe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellssouth.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolzanomeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breonnataylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buby.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisanbau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerpieces.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cero.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc2022.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educating.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embryodonation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enitanassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etickets.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federbestimmung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futballjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganaconkalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebrauchtwagen-privat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsm-city.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaii-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiyastudychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesusbelovedsaviour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleinkaliberpistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kockrezepte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostenlosespielespielen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesports-streaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meckel-divertikel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mengfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moyaua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noptebooksbilliger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playoffs.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productsaccountsmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rachelakerley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saloumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saruei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvastattoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spain.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targetpanik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportesnuevatijuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trishgayle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wudo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hngerfhrerschein-vnb15b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzh000.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6b6e4ef0000004030047304502201ee23c78e50a9c042788e9800b3186e2defacb0a0f7fa0c0df84fa5e3f92e022022100ee64c3fffb3f1f9c2bb2e1c617d24a7f9313263bd6aefd6452d1ba90bcb4783a0077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d6b6e4ef00000040300483046022100e923598a205f575a79c854aa7aa871d70b2ae97aa5c0b4091f50b6189cbc7f1b022100f99da9c8ce46f34617cb7dd5a4091ee5ef67fb09b592a247ff5f6124d7264c00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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