lib1.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:c8:18:63:5f:bd:3e:6f:98:d1:53:2b:b9:28:c6:1c:fa:52 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lib1.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c8:18:63:5f:bd:3e:6f:98:d1:53:2b:b9:28:c6:1c:fa:52
Serial Number (int): 416538034562338870253196054078240908442194
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:ea:5b:31:81:46:7e:c4:c6:93:32:43:45:01:a1:86:b7:c5:74:1e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:4e:80:da:80:2f:53:71:3a:4e:e3:16:72:0e:48:53:44:b9:fc:c4
Fingerprint (sha256): c3:03:a5:2e:ce:d6:6a:e0:a1:15:d4:e1:0c:10:97:16:31:c3:6c:02:df:09:56:d5:12:86:b0:50:46:f4:50:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lib1.eu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lib1.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9junkit.com
*.acnetreatments.com.au
*.aktionaer.de
*.artcentersarasota.org
*.auslandsversicherung.online
*.bantuanppkm.online
*.bedskirts.com.au
*.blackfridayaddeals.com
*.bodyparts.com.au
*.canopybeds.com.au
*.combinedinsuranc.com
*.criticalroleshop.com
*.cruisevacation.com.au
*.doctor20.com
*.employeetraining.com.au
*.federalgovjobs.us
*.ferinhaeuser.de
*.frca.uk
*.gastroenterlogie.de
*.havakisshavanese.net
*.infiniauto.eu
*.kahootwinner.com
*.lib1.eu
*.low-fat-30-diaet.de
*.medal.com.au
*.mediatkeout.com
*.mtfwc.com
*.multhiple-sklerose.de
*.myjefferson.org
*.naughtyindia.com
*.ntqd.xyz
*.oystersource.net.au
*.puppytraining.com.au
*.rbcinsrance.com
*.rbcinsurane.com
*.rocknrollmarketplace.com.au
*.rolefilm.com
*.seksas.online
*.sendmedigpigs.com
*.sierrapacificmotgage.com
*.sklepkushi.pl
*.slimlig.com
*.sqllitestudio.pl
*.stateofthegreatgame.com
*.usrvgo.tv
*.was-hilft-gegen-halsschmerzen-hausmittel.de
*.wwwfamilyheritagelife.com
*.xn--brustvregrerung-zib40b.de
*.xn--dkrtze-dua.de
*.xn--tannenbume-w5a.de
9junkit.com
acnetreatments.com.au
aktionaer.de
artcentersarasota.org
auslandsversicherung.online
bantuanppkm.online
bedskirts.com.au
blackfridayaddeals.com
bodyparts.com.au
canopybeds.com.au
combinedinsuranc.com
criticalroleshop.com
cruisevacation.com.au
doctor20.com
employeetraining.com.au
federalgovjobs.us
ferinhaeuser.de
frca.uk
gastroenterlogie.de
havakisshavanese.net
infiniauto.eu
kahootwinner.com
lib1.eu
low-fat-30-diaet.de
medal.com.au
mediatkeout.com
mtfwc.com
multhiple-sklerose.de
myjefferson.org
naughtyindia.com
ntqd.xyz
oystersource.net.au
puppytraining.com.au
rbcinsrance.com
rbcinsurane.com
rocknrollmarketplace.com.au
rolefilm.com
seksas.online
sendmedigpigs.com
sierrapacificmotgage.com
sklepkushi.pl
slimlig.com
sqllitestudio.pl
stateofthegreatgame.com
usrvgo.tv
was-hilft-gegen-halsschmerzen-hausmittel.de
wwwfamilyheritagelife.com
xn--brustvregrerung-zib40b.de
xn--dkrtze-dua.de
xn--tannenbume-w5a.de

Other certificates including the domain name lib1.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for lib1.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7jIEQAZxwj819gptBrii
O4g3+UxVSYO3LoysW7O3SFzl+XG/5NjR7uupnc3S0g7Jd6gf3ZT+qpFxoogGu41D
OrRAoRqc+t8ZBuN2KNEp1GaPgyn4TJYuVfBT+O2JAzJ2EaiMTgaKz8dvUfAiqDfB
gLPpJeylMlfeU6zQG4sSVWMnwOwCfFijQJuzmCHBfE2PQAWGb4Rm4cIndHPdQbNq
zlAwiE5QqQUimAK3fcM7u4Q5kk4TOcukB7+qg+lE1BDshRKwSGb9FJhsXqTJsLG8
a2BiVv7z3p3Y+Qlv4zHVA4yQ4rIYFzVzTtUWW8mpY2qAnMnaIO9OPIk5Yq85Dho7
aAfeNIp34FNE8WOqsPL7tQB/xmDVxXrnpbchemfx/qLq5TMmD421MwfGff/2+5q8
CSkBSMWIoLeTjDDU3wx6IesztGAxIeimIRyG1HBYC2tUuSSlhD/eD2LEr+GCqsMv
MTyN0oYLV9NR7B3xXleEXw63G4/beIl+1CmRNPCNJ8nSnQAeFFHO13HbA5iCIUkZ
poBwAs9xHnE9bnIoqd+ZfyTCVrhZS0ddSdJmbWiH7h5Wxe6o8PPBHR1OcyP7wsDI
0yPozQfihV7vaGQ7FwRXhh5+IBAhsAXo52Y47GihjvtpgHJgv6I5VFeGt2ShwExf
0zOqZtlkvlsJqWG2xRaGdcECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416538034562338870253196054078240908442194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 07:58:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 07:58:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lib1.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971752358241266898269275373614996095533462738674226050532637398871115806480766105287629974840996792337863089221817855739779282991036646735930908370988380823811313763919664855248160030002043957662816581711954726869438741704035438917374028946520393820593240667885275229702189541575447295219714868760649121649562690453881804305114661049129363625336805354949785191359706006572528514289939389156430005340127595129587897052874879346411442862098667419572084612080452119235014009268219201752385880890302029020939487734596826909843364805273205113944711490522568833514343765566133009180440657879388600503891332438656105526744180253985623328724387600013501687610911735722042363182558951945013804576973338184045861926210265933870823268619275531191529746653161872889087188642034136389319711207163231349110035078158963579653644349411528141523256567034176159168352196136080605244161149152101783964130151156263621331367665213426994442779909330261254568000770609297643671827908718780680189000350062275805501184646168888570284237299842271135451876585319724232146706299963989644021843624924616999672266711639513415209124337915862127009143261047590052614060715711594260887034933092931311643121480984550612922439695960154663751578501396611827916568163777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddea5b3181467ec4c69332434501a186b7c5741e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2054 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9junkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acnetreatments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktionaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artcentersarasota.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auslandsversicherung.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bantuanppkm.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedskirts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackfridayaddeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodyparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canopybeds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.combinedinsuranc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criticalroleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruisevacation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doctor20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employeetraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federalgovjobs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferinhaeuser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frca.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gastroenterlogie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havakisshavanese.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infiniauto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahootwinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lib1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.low-fat-30-diaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediatkeout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtfwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multhiple-sklerose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjefferson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naughtyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntqd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oystersource.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puppytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbcinsrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbcinsurane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocknrollmarketplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rolefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seksas.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sendmedigpigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sierrapacificmotgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sklepkushi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slimlig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqllitestudio.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stateofthegreatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usrvgo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.was-hilft-gegen-halsschmerzen-hausmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfamilyheritagelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvregrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dkrtze-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tannenbume-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9junkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acnetreatments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktionaer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artcentersarasota.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auslandsversicherung.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bantuanppkm.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedskirts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackfridayaddeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopybeds.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'combinedinsuranc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criticalroleshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruisevacation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doctor20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeetraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federalgovjobs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferinhaeuser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frca.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastroenterlogie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havakisshavanese.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infiniauto.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahootwinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lib1.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'low-fat-30-diaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediatkeout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtfwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multhiple-sklerose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjefferson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naughtyindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntqd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oystersource.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puppytraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbcinsrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbcinsurane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocknrollmarketplace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolefilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seksas.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendmedigpigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sierrapacificmotgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sklepkushi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slimlig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqllitestudio.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stateofthegreatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usrvgo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'was-hilft-gegen-halsschmerzen-hausmittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfamilyheritagelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvregrerung-zib40b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dkrtze-dua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tannenbume-w5a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0c5852060000040300483046022100a3d217491f1a00058daf8d8ef282127ab0c3af388202b51524c348211aa00afc022100b26628d9879830bceec0e50508cf9a41bad20f83508d5a9d1cfe70297a0b7bbd007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d0c58520e000004030047304502210085b44229a23b750a78f694bb367bf9fbe647cc251e9d98d086c25af54256da92022066c8771b7c76f2db2e9f498bba37a156673d82252495c975687e217e48f7149a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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