anlageplanung.de

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:d8:f4:83:40:ba:8e:82:e0:a8:1b:03:bd:34:fc:7f:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=anlageplanung.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:d8:f4:83:40:ba:8e:82:e0:a8:1b:03:bd:34:fc:7f:15
Serial Number (int): 343633291052873930937660287993280091422485
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:b9:fd:93:3d:38:45:e0:2f:ff:a1:c6:8e:79:ac:94:ac:bd:17:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:e2:cd:1f:2f:38:ef:c6:98:6a:52:29:51:1a:a5:59:8b:d7:ae:76
Fingerprint (sha256): c5:83:96:1e:44:26:12:4d:6c:9b:f3:ee:66:f9:de:f3:68:5a:e7:18:63:79:aa:e3:0b:36:0a:48:e0:42:a5:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate anlageplanung.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for anlageplanung.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alishchinai.com
*.anlageplanung.de
*.answers.es
*.antlinkapp.com
*.assassincreedcodenamejade.com
*.balkondekoration.de
*.beinmuskeltraining.de
*.by4143.com
*.claimsasurion.com
*.dp4j.com
*.druckerzzbehoer.de
*.eax.de
*.edwayapps.com.au
*.eforensics.com.au
*.elcooltuts.com
*.ennovelas.tv
*.estrategist.com.au
*.fmu.de
*.folgeversicherung.de
*.googleuk.com
*.granvilletavern.com.au
*.grosshande.de
*.hautauschlag.de
*.hoeskop.de
*.homeassistance.com.au
*.hotstar.uk
*.instagramembeddiscord.com
*.jagdambdigital.com
*.kamfaychineserestaurant.com.au
*.logros.online
*.madapuralab.com
*.madskillmarketing.com
*.myflixor.is
*.nadou100.com
*.oldenbergbritainalternatehistory.com
*.permitless.com
*.rettet.de
*.riesenpuzzle.de
*.rightbuilder.com.au
*.sanitize.com.au
*.smule.de
*.tauchanzuege.de
*.thefiresidounge.com
*.tiaacre.com
*.verivocx.de
*.versicherungen-de.de
*.xn--kruterpeeling-cfb.de
*.xn--schnheitsklinik-stuttgart-0rc.de
*.yarsproducts.com
*.zzk.de
alishchinai.com
anlageplanung.de
answers.es
antlinkapp.com
assassincreedcodenamejade.com
balkondekoration.de
beinmuskeltraining.de
by4143.com
claimsasurion.com
dp4j.com
druckerzzbehoer.de
eax.de
edwayapps.com.au
eforensics.com.au
elcooltuts.com
ennovelas.tv
estrategist.com.au
fmu.de
folgeversicherung.de
googleuk.com
granvilletavern.com.au
grosshande.de
hautauschlag.de
hoeskop.de
homeassistance.com.au
hotstar.uk
instagramembeddiscord.com
jagdambdigital.com
kamfaychineserestaurant.com.au
logros.online
madapuralab.com
madskillmarketing.com
myflixor.is
nadou100.com
oldenbergbritainalternatehistory.com
permitless.com
rettet.de
riesenpuzzle.de
rightbuilder.com.au
sanitize.com.au
smule.de
tauchanzuege.de
thefiresidounge.com
tiaacre.com
verivocx.de
versicherungen-de.de
xn--kruterpeeling-cfb.de
xn--schnheitsklinik-stuttgart-0rc.de
yarsproducts.com
zzk.de

Other certificates including the domain name anlageplanung.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for anlageplanung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINXDCCDESgAwIBAgISA/HY9INAuo6C4KgbA700/H8VMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDQwNjAwMDBaFw0yNDA3MDMwNTU5NTlaMBsxGTAXBgNVBAMT
EGFubGFnZXBsYW51bmcuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQCz09DHh7hkXaa8KNXvNXwYKHK2T0Sjol5IAqZfXrq9NXOw9AUSpB6/0qbEWXxP
t4ZNOrYJcwxwpB6cYHeNNlhNNrfMfaBgjcVpXWWv3vcnS7DsMb5wvFglNG81l6oZ
/NdqsfbWBBLhEw7kj/6MNR8fHjC/t9T1JqWt708EBtrvDZ4QueMCzP3jO/XH+XWo
UGrzsZDu7FzQ0lLHb1Og78LbU6C1amqKsLOZVRNtyGcGmit1KbNanpzxM48IbbVv
+nApgSQiUb3akQPzYAeyLtKwHDesgVv33D2H44GgYETh4W5dxBPcoxR084oSC/R8
62iELaQSpGNrnH27VEpbonUfv/7R9atxNxOEUvPs80HIi5W4LL7/aaQOYAAKNoYZ
XZ4RJR17hwfX6YxkVQ+fRxOlmxYJ/htyFWPgLGVFqbL2hz7EtPObCHa5bX6PT74I
5ZeXYDwqTkSDfd9jgB8vX9GxApeTESK4zA2b5/w/26cgzRTt9tto5bv4aH7PsjoY
UuoO/Xb2XMSKnZXIaB6SYcBGZMKp1eS94RQ+oR8Wz4mXMcOnFfF45YcO1ViykFXr
q2WfW6Oz1JC+xd7x2JkcdQxsCg76GPpXRhazcNGk7xRtf4TBaFKgtyaof2wUUsy8
1HRz356iHtmo2RSJCnBRCs4PuvZS4yoLeqIaPAQJbBe28QIDAQABo4IJgTCCCX0w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRwuf2TPThF4C//ocaOeayUrL0X2DAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzCCB4kGA1UdEQSCB4Awggd8ghEqLmFsaXNoY2hp
bmFpLmNvbYISKi5hbmxhZ2VwbGFudW5nLmRlggwqLmFuc3dlcnMuZXOCECouYW50
bGlua2FwcC5jb22CHyouYXNzYXNzaW5jcmVlZGNvZGVuYW1lamFkZS5jb22CFSou
YmFsa29uZGVrb3JhdGlvbi5kZYIXKi5iZWlubXVza2VsdHJhaW5pbmcuZGWCDCou
Ynk0MTQzLmNvbYITKi5jbGFpbXNhc3VyaW9uLmNvbYIKKi5kcDRqLmNvbYIUKi5k
cnVja2VyenpiZWhvZXIuZGWCCCouZWF4LmRlghIqLmVkd2F5YXBwcy5jb20uYXWC
EyouZWZvcmVuc2ljcy5jb20uYXWCECouZWxjb29sdHV0cy5jb22CDiouZW5ub3Zl
bGFzLnR2ghQqLmVzdHJhdGVnaXN0LmNvbS5hdYIIKi5mbXUuZGWCFiouZm9sZ2V2
ZXJzaWNoZXJ1bmcuZGWCDiouZ29vZ2xldWsuY29tghgqLmdyYW52aWxsZXRhdmVy
bi5jb20uYXWCDyouZ3Jvc3NoYW5kZS5kZYIRKi5oYXV0YXVzY2hsYWcuZGWCDCou
aG9lc2tvcC5kZYIXKi5ob21lYXNzaXN0YW5jZS5jb20uYXWCDCouaG90c3Rhci51
a4IbKi5pbnN0YWdyYW1lbWJlZGRpc2NvcmQuY29tghQqLmphZ2RhbWJkaWdpdGFs
LmNvbYIgKi5rYW1mYXljaGluZXNlcmVzdGF1cmFudC5jb20uYXWCDyoubG9ncm9z
Lm9ubGluZYIRKi5tYWRhcHVyYWxhYi5jb22CFyoubWFkc2tpbGxtYXJrZXRpbmcu
Y29tgg0qLm15ZmxpeG9yLmlzgg4qLm5hZG91MTAwLmNvbYImKi5vbGRlbmJlcmdi
cml0YWluYWx0ZXJuYXRlaGlzdG9yeS5jb22CECoucGVybWl0bGVzcy5jb22CCyou
cmV0dGV0LmRlghEqLnJpZXNlbnB1enpsZS5kZYIVKi5yaWdodGJ1aWxkZXIuY29t
LmF1ghEqLnNhbml0aXplLmNvbS5hdYIKKi5zbXVsZS5kZYIRKi50YXVjaGFuenVl
Z2UuZGWCFSoudGhlZmlyZXNpZG91bmdlLmNvbYINKi50aWFhY3JlLmNvbYINKi52
ZXJpdm9jeC5kZYIWKi52ZXJzaWNoZXJ1bmdlbi1kZS5kZYIaKi54bi0ta3J1dGVy
cGVlbGluZy1jZmIuZGWCJioueG4tLXNjaG5oZWl0c2tsaW5pay1zdHV0dGdhcnQt
MHJjLmRlghIqLnlhcnNwcm9kdWN0cy5jb22CCCouenprLmRlgg9hbGlzaGNoaW5h
aS5jb22CEGFubGFnZXBsYW51bmcuZGWCCmFuc3dlcnMuZXOCDmFudGxpbmthcHAu
Y29tgh1hc3Nhc3NpbmNyZWVkY29kZW5hbWVqYWRlLmNvbYITYmFsa29uZGVrb3Jh
dGlvbi5kZYIVYmVpbm11c2tlbHRyYWluaW5nLmRlggpieTQxNDMuY29tghFjbGFp
bXNhc3VyaW9uLmNvbYIIZHA0ai5jb22CEmRydWNrZXJ6emJlaG9lci5kZYIGZWF4
LmRlghBlZHdheWFwcHMuY29tLmF1ghFlZm9yZW5zaWNzLmNvbS5hdYIOZWxjb29s
dHV0cy5jb22CDGVubm92ZWxhcy50doISZXN0cmF0ZWdpc3QuY29tLmF1ggZmbXUu
ZGWCFGZvbGdldmVyc2ljaGVydW5nLmRlggxnb29nbGV1ay5jb22CFmdyYW52aWxs
ZXRhdmVybi5jb20uYXWCDWdyb3NzaGFuZGUuZGWCD2hhdXRhdXNjaGxhZy5kZYIK
aG9lc2tvcC5kZYIVaG9tZWFzc2lzdGFuY2UuY29tLmF1ggpob3RzdGFyLnVrghlp
bnN0YWdyYW1lbWJlZGRpc2NvcmQuY29tghJqYWdkYW1iZGlnaXRhbC5jb22CHmth
bWZheWNoaW5lc2VyZXN0YXVyYW50LmNvbS5hdYINbG9ncm9zLm9ubGluZYIPbWFk
YXB1cmFsYWIuY29tghVtYWRza2lsbG1hcmtldGluZy5jb22CC215ZmxpeG9yLmlz
ggxuYWRvdTEwMC5jb22CJG9sZGVuYmVyZ2JyaXRhaW5hbHRlcm5hdGVoaXN0b3J5
LmNvbYIOcGVybWl0bGVzcy5jb22CCXJldHRldC5kZYIPcmllc2VucHV6emxlLmRl
ghNyaWdodGJ1aWxkZXIuY29tLmF1gg9zYW5pdGl6ZS5jb20uYXWCCHNtdWxlLmRl
gg90YXVjaGFuenVlZ2UuZGWCE3RoZWZpcmVzaWRvdW5nZS5jb22CC3RpYWFjcmUu
Y29tggt2ZXJpdm9jeC5kZYIUdmVyc2ljaGVydW5nZW4tZGUuZGWCGHhuLS1rcnV0
ZXJwZWVsaW5nLWNmYi5kZYIkeG4tLXNjaG5oZWl0c2tsaW5pay1zdHV0dGdhcnQt
MHJjLmRlghB5YXJzcHJvZHVjdHMuY29tggZ6emsuZGUwEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQA7U3d1Pi25gE6LMFsG/kA7
Z9hPw/THvQANLXJv4frUFwAAAY6n6EQxAAAEAwBGMEQCIEaaeJJQoaR11vL/QmId
gwyZ801QB5q/jAzEGCU+hhyhAiBjGRnGGA/Br/qUtNf3ae/Neyl4wRf7zwgAxOjI
WaR1twB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjqfoREwA
AAQDAEcwRQIhAOVvqcz6bUsao8ApqPqe9PP9BYhyUcuKEVFY5GvZ7af5AiABgtbi
/ffpe2lQoHY2KdgOBDnM4WpFKVbqAkXa8cMhHjANBgkqhkiG9w0BAQsFAAOCAQEA
ceVaXlB53u8jusF1i27x206fiV+8kJHS3p2bRHd5WqMFRC3/xyuGI/wXpkDq9q9T
lW0cGL61eMW4uy3m9gCbNfQ+Os7HpDm0VoI3HDiAKQrqy21eZFQH0Z0cLfYXgjvw
dP/g4ZCQQQ2P4uLXLE9PcgWpqWW7JLAQdNsVJTTRiT5ingU/mBT7M6Qw4TDSXSJo
s0ZgAansdOsDLFm1z/fFuL50spAgV4S+oMZSD9NJmIViPA8+OJn0e/28Y9zWcyTd
jw6D1p5wxT076yjW65n6kI7jsktWJp1uJBJc1HD8kCzQQy+rnGaY4QhDpoAv1XHw
A3fcGDGDHbMr4mKAzhbJmQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343633291052873930937660287993280091422485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 06:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 05:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'anlageplanung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733631803917771728206735856009886440486595828467111238355650992479566931316086944552985503969764238991692156881823851169057093253843309864593821563312765657671649300129352638722566986567181474618959510139866229680993157168962650849386992708786863945521573734221417268178109920665972076995947362994074083873312334319781639931268166569373930642582245030537026484905463641777053893714105463973162726295197563649214230190425072743160607012016926933790971869542258477619566812448873193104826205465884824954974367021231995351364203357298986749570168058576334700373718469929030604915533905299668661631588206849478871586040927463840568299091845176454450307547462085732927070636389349572064746660788998009776828889486314481730372364264095720201947793271654288651190404894497228401382849172773797189329552439642996783505464546567046131048169449074080998780640326027400504428946513827173419550508305413369376536565331842714447344085627472788926703105306647257286136768292931902479402420049777217534197649525462641756456239174376617392475489843024590582014324379861298578555480576692104215971506862143811411074278252549607813665684713098381537174919431495027141850223135660424809292485059796628260361848960530532360233667985400792058604310476529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70b9fd933d3845e02fffa1c68e79ac94acbd17d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1920 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alishchinai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anlageplanung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.answers.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antlinkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assassincreedcodenamejade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balkondekoration.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beinmuskeltraining.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.by4143.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claimsasurion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dp4j.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.druckerzzbehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edwayapps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eforensics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elcooltuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ennovelas.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estrategist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.folgeversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granvilletavern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grosshande.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hautauschlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoeskop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeassistance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotstar.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instagramembeddiscord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jagdambdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamfaychineserestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logros.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madapuralab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madskillmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myflixor.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nadou100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldenbergbritainalternatehistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.permitless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rettet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riesenpuzzle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rightbuilder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanitize.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tauchanzuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefiresidounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiaacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verivocx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versicherungen-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kruterpeeling-cfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnheitsklinik-stuttgart-0rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yarsproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zzk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alishchinai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anlageplanung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answers.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antlinkapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assassincreedcodenamejade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balkondekoration.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinmuskeltraining.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'by4143.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsasurion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp4j.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druckerzzbehoer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwayapps.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eforensics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcooltuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ennovelas.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estrategist.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folgeversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granvilletavern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grosshande.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hautauschlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoeskop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeassistance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotstar.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instagramembeddiscord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagdambdigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamfaychineserestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logros.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madapuralab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madskillmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myflixor.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nadou100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldenbergbritainalternatehistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permitless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rettet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riesenpuzzle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightbuilder.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanitize.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauchanzuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefiresidounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiaacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verivocx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versicherungen-de.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kruterpeeling-cfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnheitsklinik-stuttgart-0rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarsproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ea7e8443100000403004630440220469a789250a1a475d6f2ff42621d830c99f34d50079abf8c0cc418253e861ca10220631919c6180fc1affa94b4d7f769efcd7b2978c117fbcf0800c4e8c859a475b700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea7e8444c0000040300473045022100e56fa9ccfa6d4b1aa3c029a8fa9ef4f3fd05887251cb8a115158e46bd9eda7f902200182d6e2fdf7e97b6950a0763629d80e0439cce16a452956ea0245daf1c3211e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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