bonafides.eu

Issued by R3

About this certificate

This digital certificate with serial number 03:63:a5:47:0f:7e:d2:a7:a1:d9:a4:94:e7:4a:fe:72:af:69 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bonafides.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:a5:47:0f:7e:d2:a7:a1:d9:a4:94:e7:4a:fe:72:af:69
Serial Number (int): 295244503707119201953099066041064265789289
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:b9:37:e2:72:63:66:da:28:a5:18:c9:77:aa:92:05:24:92:a7:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:7f:a8:4c:c4:42:ce:ad:5c:2e:d5:2a:bf:2f:1a:de:c4:6f:0b:23
Fingerprint (sha256): c7:7b:eb:2c:51:8b:72:37:a9:10:7e:de:ee:26:71:99:37:b7:14:da:9d:91:30:19:2b:a1:b0:9f:9f:f6:69:68

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bonafides.eu

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bonafides.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2kmovi.cc
*.5c.com.au
*.8673.in
*.analsexpraktiken.de
*.animallifelinepa.org
*.arbeitzam.de
*.australianguidedtours.com.au
*.binterest.de
*.boars.com.au
*.bonafides.eu
*.cloudsquad.in
*.clubfadoqgranby.org
*.connectlahey.org
*.convectionmicrowaves.com.au
*.delaynieshomeinteriors.co.uk
*.e-biz.com.au
*.fahrschulentest.de
*.flash-filter.net
*.geeksvg.com
*.gewuerzregale.de
*.greennewsdevelopment.com
*.invaluable-narration-to-examine-today.info
*.maxibutorok.hu
*.motivationn.de
*.philippinearena.net
*.pilst.de
*.repolarisation.de
*.rubbishcollectionsydney.com.au
*.ruffnex.ca
*.schlabberpulli.de
*.steuerermklaerung.de
*.takemystuff.com.au
*.termeco.info
*.xn--acai-dit-6za.de
*.xn--bauchhhlenschwangerschaft-3rc.de
*.xn--campinpltze-s8a.de
*.xn--ehegelbte-v9a.de
*.xn--fhrerscheingruppen-m6b.de
*.xn--fremdsprachenwrterbuch-7hc.de
*.xn--gnstige-winterreisen-pec.de
*.xn--lkrug-iua.de
*.xn--mdchengames-l8a.de
*.xn--mnnerkorsett-gcb.de
*.xn--msli-selber-machen-m6b.de
*.xn--omaschlpfer-zhb.de
*.xn--osterkrbchen-9ib.de
*.xn--vanillepltzchen-8kb.de
*.xsteuererklaerung.de
*.yaoqimanhua1.cc
*.yphilis.de
2kmovi.cc
5c.com.au
8673.in
analsexpraktiken.de
animallifelinepa.org
arbeitzam.de
australianguidedtours.com.au
binterest.de
boars.com.au
bonafides.eu
cloudsquad.in
clubfadoqgranby.org
connectlahey.org
convectionmicrowaves.com.au
delaynieshomeinteriors.co.uk
e-biz.com.au
fahrschulentest.de
flash-filter.net
geeksvg.com
gewuerzregale.de
greennewsdevelopment.com
invaluable-narration-to-examine-today.info
maxibutorok.hu
motivationn.de
philippinearena.net
pilst.de
repolarisation.de
rubbishcollectionsydney.com.au
ruffnex.ca
schlabberpulli.de
steuerermklaerung.de
takemystuff.com.au
termeco.info
xn--acai-dit-6za.de
xn--bauchhhlenschwangerschaft-3rc.de
xn--campinpltze-s8a.de
xn--ehegelbte-v9a.de
xn--fhrerscheingruppen-m6b.de
xn--fremdsprachenwrterbuch-7hc.de
xn--gnstige-winterreisen-pec.de
xn--lkrug-iua.de
xn--mdchengames-l8a.de
xn--mnnerkorsett-gcb.de
xn--msli-selber-machen-m6b.de
xn--omaschlpfer-zhb.de
xn--osterkrbchen-9ib.de
xn--vanillepltzchen-8kb.de
xsteuererklaerung.de
yaoqimanhua1.cc
yphilis.de

Other certificates including the domain name bonafides.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for bonafides.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295244503707119201953099066041064265789289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 18:42:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 18:42:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bonafides.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785559799561334227286668787343552431800685953250088464880658170924236395988584414580522783101848818982625469404423209692059640854597426017828140875937339996415457216055836826850457231333255204466633598327382189674680647089754197589269143529789478504227445917458866942997365801388776723142841277455273722418845445196763252429052606781513028100041564751903687664498919625687760052340865060485283051576276894717667124415372369491711090199302705337676328129973765366679205354582204092598360361912331973818467930946966072457079616725481655300200814191021002038402917869604789445448171603897901233272401461722178125831674661357505821233171476112936976275251474585464414011859565998890694982807923608905831544053841240186343322128835878872531505368501648210001032890842989879656415773607033140059348181707677909538324192527039137221435405558292292011508396756640592380908885560263243868025999105541977698432476863967873826116774861157253436749335832927460272399099652547916848970257615639996711456054988869449718006053206857861470162772694009140614206328634229929433459982546304378800789972003296846121941072317829617389865137464518821170703712108955943749080034092533375151480896130275366390943826266718837824274843405315520111531679792439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25b937e2726366da28a518c977aa92052492a7f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2218 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2kmovi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8673.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animallifelinepa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australianguidedtours.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudsquad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubfadoqgranby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectlahey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.convectionmicrowaves.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-biz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahrschulentest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flash-filter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geeksvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greennewsdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invaluable-narration-to-examine-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxibutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motivationn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philippinearena.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pilst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruffnex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlabberpulli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuerermklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takemystuff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termeco.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--acai-dit-6za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bauchhhlenschwangerschaft-3rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--campinpltze-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fhrerscheingruppen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fremdsprachenwrterbuch-7hc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gnstige-winterreisen-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lkrug-iua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--msli-selber-machen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--omaschlpfer-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vanillepltzchen-8kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsteuererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaoqimanhua1.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yphilis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2kmovi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5c.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8673.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analsexpraktiken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animallifelinepa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbeitzam.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianguidedtours.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonafides.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudsquad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubfadoqgranby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectlahey.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'convectionmicrowaves.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaynieshomeinteriors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-biz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahrschulentest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash-filter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geeksvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewuerzregale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greennewsdevelopment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invaluable-narration-to-examine-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxibutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motivationn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippinearena.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repolarisation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubbishcollectionsydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruffnex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlabberpulli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuerermklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takemystuff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termeco.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--acai-dit-6za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bauchhhlenschwangerschaft-3rc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--campinpltze-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ehegelbte-v9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fhrerscheingruppen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fremdsprachenwrterbuch-7hc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gnstige-winterreisen-pec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lkrug-iua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mdchengames-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mnnerkorsett-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--msli-selber-machen-m6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--omaschlpfer-zhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--osterkrbchen-9ib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vanillepltzchen-8kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsteuererklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaoqimanhua1.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yphilis.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc50e754d0000040300483046022100d419d9a4c3799b4f798ab2919a05a68de36b1a22783bbeb0fb0f41497da1e6da0221009ffea776e0811cf3421545ba1d9280191b809e467860a28bce46bcdc49c3f9e90075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc50e7555000004030046304402202919ae29d59693cc21944caed97028545eb41e4191f2f12cf401230eb02a70c3022050e4e8fc96a9c99bc4a76c642021aec55d352bdbb11a561b3f8d2da596b8e0e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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