jzf.de

Issued by R3

About this certificate

This digital certificate with serial number 03:31:ca:9e:58:73:0e:21:97:36:28:1d:7e:78:f2:12:23:50 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jzf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:ca:9e:58:73:0e:21:97:36:28:1d:7e:78:f2:12:23:50
Serial Number (int): 278280020006426583367922227059582362067792
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:7c:4f:60:7d:76:21:b8:d6:ba:ae:10:d2:5d:6e:54:c3:25:d3:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:6a:75:12:db:fa:f5:74:32:84:77:20:f6:43:8e:60:d2:6e:07:b2
Fingerprint (sha256): c5:6a:0c:fc:3e:39:90:d5:81:03:fc:0b:b6:30:a9:57:23:73:8b:68:d0:86:18:b0:42:10:1e:1e:69:35:07:c4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jzf.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jzf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aemco.biz
*.b34s.com
*.bazaboutique.com
*.buscogrupo.com
*.cabins.au
*.catechu.org
*.centerfortradingeducation.com
*.cricricbuzz.com
*.cryptostrix.com
*.cublelo.com
*.downloadfortune.com
*.excavationcoffrageap.com
*.facelift-surgery-94536.com
*.freestuffse.com
*.give41.com
*.hardenvanarnam.com
*.hopfarmauctionroom.co.uk
*.imperialsoundarmy.com
*.jns.eu
*.jzf.de
*.kimmiespaperpatch.com
*.kirtonwindows.co.uk
*.laceandhoney.com
*.lfgenergiasolar.com.br
*.livefitness.de
*.manualidades.de
*.nicehat.club
*.nicknames.be
*.noses.ca
*.oopslist.com
*.oraclelinux.com
*.pakistan.co.za
*.ppx29.com
*.robynicksphotography.com
*.shibaads.com
*.suitsplus.co.uk
*.tagessxhau.de
*.teamedresearch.com
*.tecnicamer.org
*.th2pe.com
*.theawsblog.com
*.tjcfchem.com
*.tradeonserum.com
*.unk.eu
*.vbl.au
*.vietnamneko.com
*.xn--dstermhle-q9af.de
*.xn--flge-buchen-uhb.de
*.xn--kchenmaschine-wob.de
*.xn--verdienstmglichkeit-z6b.de
aemco.biz
b34s.com
bazaboutique.com
buscogrupo.com
cabins.au
catechu.org
centerfortradingeducation.com
cricricbuzz.com
cryptostrix.com
cublelo.com
downloadfortune.com
excavationcoffrageap.com
facelift-surgery-94536.com
freestuffse.com
give41.com
hardenvanarnam.com
hopfarmauctionroom.co.uk
imperialsoundarmy.com
jns.eu
jzf.de
kimmiespaperpatch.com
kirtonwindows.co.uk
laceandhoney.com
lfgenergiasolar.com.br
livefitness.de
manualidades.de
nicehat.club
nicknames.be
noses.ca
oopslist.com
oraclelinux.com
pakistan.co.za
ppx29.com
robynicksphotography.com
shibaads.com
suitsplus.co.uk
tagessxhau.de
teamedresearch.com
tecnicamer.org
th2pe.com
theawsblog.com
tjcfchem.com
tradeonserum.com
unk.eu
vbl.au
vietnamneko.com
xn--dstermhle-q9af.de
xn--flge-buchen-uhb.de
xn--kchenmaschine-wob.de
xn--verdienstmglichkeit-z6b.de

Other certificates including the domain name jzf.de

(limited to 100 certificates)
polenporno.de
jzf.de
jzf.de
jzf.de
cariera.org
jzf.de
jzf.de
jru.de
grand-mal-anfall.de
fo2online.de
grand-mal-anfall.de
jzf.de
lohnsiegel.de

Certificate

The complete raw certificate details for jzf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278280020006426583367922227059582362067792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 21:24:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 21:24:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jzf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748572679430425678485456769166529627490899662360509928446142831132748006397962966151393810049355016997995629360457033741830602781929125099284764686374055840376276539619363167397494960657796407526399769313048216914240014134684694215861318582031075927920152385311679751479423212904941960843855675079922345029002844141703727269642799505778640606964030818092004025132484137470740704201675753224807673791526462959371401497769572885471102319307532854143553677722630676457550641299971656066896146017166576982604577748414249628156398161236408485579021470767654005487869317888059690101877321140585944277858617847420354689028871630047773362266784457436124112392899284578698413516899030126234630514022027029625859916571756696567591618069949783645810317946645882439383351337020716936535541769204996259631192683833497377944135509967151330569715239839580473482543024713562304963788712060957724424180294501854046080888218957649854509139098851062923849343331223541627390119855430997543638180918466891198347916236653788111995084709325854961521118241918273886831632327367336483268821821693167236772637636237640558596854478763422567797251663069029450247949737918921787067369901895658105481556393705095002435937571011355381413363955973799856129945181833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							607c4f607d7621b8d6baae10d25d6e54c325d3cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1836 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aemco.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b34s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazaboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buscogrupo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabins.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catechu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerfortradingeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cricricbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptostrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cublelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadfortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excavationcoffrageap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facelift-surgery-94536.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freestuffse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.give41.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardenvanarnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperialsoundarmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimmiespaperpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laceandhoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lfgenergiasolar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicehat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oraclelinux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppx29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robynicksphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shibaads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamedresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnicamer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.th2pe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theawsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjcfchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradeonserum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamneko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemco.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b34s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazaboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buscogrupo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabins.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catechu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerfortradingeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricricbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptostrix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cublelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadfortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excavationcoffrageap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facelift-surgery-94536.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freestuffse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'give41.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardenvanarnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopfarmauctionroom.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperialsoundarmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jns.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jzf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimmiespaperpatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirtonwindows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laceandhoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfgenergiasolar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livefitness.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manualidades.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicehat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicknames.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noses.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oopslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oraclelinux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistan.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppx29.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robynicksphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibaads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitsplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagessxhau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamedresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnicamer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'th2pe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theawsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjcfchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeonserum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unk.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbl.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamneko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dstermhle-q9af.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--flge-buchen-uhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kchenmaschine-wob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--verdienstmglichkeit-z6b.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b01f15bc30000040300463044022006717d6b75e59aa1f464fa6a042c4723b48e2fbb81d4753c5b46fc8657be3c0b0220227c1914d1864f2b671d4f02e06a19b1c49890db4948eed28caa3a72acc2899e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b01f15bd9000004030047304502202cf35e5c2549df9042bda97217c7b858d1d5c22408bb536bcc1c045976fe57b1022100fa2267f00860cb2e89e62eb99a3297a0411608f7105252f3b267baa49bed17b8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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