healthwerk.de

Issued by R3

About this certificate

This digital certificate with serial number 03:46:82:4d:dd:22:c3:62:cd:c2:41:5c:67:eb:2e:87:e3:bb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=healthwerk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:82:4d:dd:22:c3:62:cd:c2:41:5c:67:eb:2e:87:e3:bb
Serial Number (int): 285329827411223327583330955578606078124987
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:d4:5e:05:f3:17:8b:98:fd:70:95:4a:2a:70:3f:50:ed:5b:9f:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:68:7e:bb:d2:23:e3:fd:1a:a9:ce:7e:5b:98:90:99:cc:c4:e2:47
Fingerprint (sha256): c4:d1:06:02:71:d5:07:32:85:de:b4:b3:5b:27:cb:7f:b5:4f:39:e0:05:c9:f6:49:d4:b4:71:9c:8b:10:8e:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthwerk.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthwerk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.102food.com
*.1maty.com
*.amsankorea.com
*.appr.tv
*.atomicinvest.com
*.b2bdmp.com
*.bingocom.eu
*.bluehost24.com
*.caliburcapital.net
*.canvashanoi.com
*.carbajaltreeservice.com
*.cardizi.com
*.carolinapreownedautosales.com
*.cutcohuntingknife.com
*.dannystephensconstruction.com
*.diamonpainting.com
*.dongtaiwang6.com
*.eliteroyalsavings.com
*.f2dsex1.com
*.froglist.com
*.goodingtea.com
*.govt.tv
*.grundsteuererklaerung-fuer-privateigetum.com
*.guidefmthai.com
*.haus-app.com
*.hbar.eu
*.healthwerk.de
*.hoopla.eu
*.hupsoonplastic.com
*.indicwisdom.org
*.ju181.com
*.kichduc.tv
*.kinnamanlandscape.com
*.lemust.net
*.lovemachine.cc
*.mgshd.net
*.midzi.co
*.minicasettetomp3.com
*.momondon.com
*.nyuphilosophyforum.org
*.paullubanski.com
*.roadsoul.co
*.saocuriosos.com
*.seagateharddrives.com
*.sms-d-amour-poeme.com
*.thuccoffee.com
*.tuzidianying.com
*.vichysar.com
*.vivobiotech.com
*.yenbu.com
102food.com
1maty.com
amsankorea.com
appr.tv
atomicinvest.com
b2bdmp.com
bingocom.eu
bluehost24.com
caliburcapital.net
canvashanoi.com
carbajaltreeservice.com
cardizi.com
carolinapreownedautosales.com
cutcohuntingknife.com
dannystephensconstruction.com
diamonpainting.com
dongtaiwang6.com
eliteroyalsavings.com
f2dsex1.com
froglist.com
goodingtea.com
govt.tv
grundsteuererklaerung-fuer-privateigetum.com
guidefmthai.com
haus-app.com
hbar.eu
healthwerk.de
hoopla.eu
hupsoonplastic.com
indicwisdom.org
ju181.com
kichduc.tv
kinnamanlandscape.com
lemust.net
lovemachine.cc
mgshd.net
midzi.co
minicasettetomp3.com
momondon.com
nyuphilosophyforum.org
paullubanski.com
roadsoul.co
saocuriosos.com
seagateharddrives.com
sms-d-amour-poeme.com
thuccoffee.com
tuzidianying.com
vichysar.com
vivobiotech.com
yenbu.com

Other certificates including the domain name healthwerk.de

(limited to 100 certificates)
healthwerk.de
*.102food.com
healthwerk.de
healthwerk.de
healthwerk.de
bradycat.me

Certificate

The complete raw certificate details for healthwerk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzlkY/kEpLatG4HV3smVg
HzzPTv8J/ObDCJOQvL2EcPZ/lZndA92MdN5L2RHenZxcqZojfbX/L+GyfQ5Ia8hQ
3zf+TGjF3Z5Yt2grP7kQgexVPfC1XO5NH4Yq3GrudBXJ9p0+ArxRHHilcjwbNJAe
dtGjPQeCg3I+SHOOQpTr0dWdnUOVdIjFrg4pxZQcU4SA27TZ1ho6soSdXMqWZ1bs
FXyy6o0av0BwJF3ezLsn5LtxzFxTc0Hod9LIutPC58VjqzGskqo9uu3f/ZSAc+oM
fVsJXITRRNgQU8NG/6NoqfNeos/tS4S8CWg6Mlqora+jfCJFLe5wWB4+lL97v5PS
ysBeqeTNG3ruO5lx2FybetKR9C/a+l0doVjHJMDLjOrSIcPByN+SEEk5K7kYh92L
/oRxXMagYWAirHwgx4dgErh+6hqLr2CZJCJzpK54WfAoV36kPpF4P4GR8g4z+poI
fCNoo0GAM7ntvzWrNUQIFu+J82S3fdYwXKdeXlq14QSNI3kmW7kSKpmSi54Gw5Aw
S+8Whk1VKtC3XG26l31FLL5sqCAhtDpAn2BVjhfquatB+Y8eC4zFz5kcWESgFhwa
GNYw20Wi3k41T46REZ25lRNq9pZFgpHP4rAYe/7eXTA18nHvVjwCnG9J68u9oDcb
HwtP8jded9y+VAK0HwBSMk8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285329827411223327583330955578606078124987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-30 16:25:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 16:25:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthwerk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841826547606438497937911412650242797103928739404459386002648091471575345230306318877783169095268248864348800230913715406577609848655728763539017703422090673060784436111776499345194559199493166850899301049122598452902700732339402744527827475190404909428585422188995285958220100974563217537217568045223334213905484057636497383309470861977035557975065171308914527477646043947950863375601226679375608783575008533716750178868246275707671450748463833905146529627877929669152562113194428823597199500459329476234457195670478351015040837826899945840594130349075471765946962146509683897144275976143183652026886634442276846187209912092414674430879561222136091168587869779998654113713781691362428696252526698075270979136496484919908375175086809648113295122479205071596919228309198196057870908957256577957607938158812044828101527995670329796970832439157838171977399207650159726124466486476637519291425793390843573957933104052229577483784593890304265837907799532981891723829007922328978762384477393698833335396965096184432104793040229216510668891690639703949740568101403599440281712801878904843892029109866418898972115800350755021318039891936563308498446664927837431823237998929518943851182398443894780335876150156023484346243771439714927402693199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49d45e05f3178b98fd70954a2a703f50ed5b9f68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1814 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.102food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1maty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amsankorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atomicinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b2bdmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bingocom.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluehost24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caliburcapital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canvashanoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbajaltreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardizi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carolinapreownedautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cutcohuntingknife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dannystephensconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diamonpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dongtaiwang6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eliteroyalsavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f2dsex1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.froglist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodingtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.govt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grundsteuererklaerung-fuer-privateigetum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guidefmthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haus-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthwerk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoopla.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hupsoonplastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indicwisdom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ju181.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kichduc.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinnamanlandscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovemachine.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mgshd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midzi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minicasettetomp3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyuphilosophyforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paullubanski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadsoul.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saocuriosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seagateharddrives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sms-d-amour-poeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thuccoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuzidianying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vichysar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivobiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yenbu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '102food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1maty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsankorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appr.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomicinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bdmp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bingocom.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluehost24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caliburcapital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvashanoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbajaltreeservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardizi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carolinapreownedautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutcohuntingknife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dannystephensconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamonpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongtaiwang6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliteroyalsavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f2dsex1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'froglist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodingtea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grundsteuererklaerung-fuer-privateigetum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidefmthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haus-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthwerk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoopla.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hupsoonplastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indicwisdom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ju181.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kichduc.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinnamanlandscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovemachine.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgshd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midzi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minicasettetomp3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'momondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyuphilosophyforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paullubanski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadsoul.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saocuriosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seagateharddrives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-d-amour-poeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thuccoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuzidianying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vichysar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivobiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yenbu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189a7d5b9890000040300473045022100cc30f5fb36cb7bf8b99b0755da32bfa4c7628c1c5d4a439ead1eb1933b8cb2e402203a04a551fb4030a95d3c9cc0e49fd0f31460c4160bd33874bda3790d4d1d5ef4007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189a7d5b9a500000403004730450220141842c3eec65666f854eab54acf16840a5b164d388ec92bd2b9fe95b4bf0a94022100c793fc6a35307be80add3f297942166979beee912281ff11f9515d11c3989ab2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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