www.gerdklimpel.12hp.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:82:db:bc:7a:23:fd:3f:15:50:3f:b9:c8:57:0e:41:c3:81 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gerdklimpel.12hp.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:db:bc:7a:23:fd:3f:15:50:3f:b9:c8:57:0e:41:c3:81
Serial Number (int): 392977930986954621264458901604866497561473
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:aa:83:12:3e:d6:4a:73:d2:e2:fe:f3:22:0f:19:21:69:2a:94:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 48:0e:52:7f:7b:a8:e4:42:ed:47:ea:df:7a:e6:a5:a8:e0:b2:8b:f0
Fingerprint (sha256): c9:e9:47:19:6f:9e:29:72:e8:c1:86:d4:0e:eb:25:8b:e1:58:a8:5c:b4:e9:a1:c1:98:6c:eb:f3:ef:56:d5:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gerdklimpel.12hp.de

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gerdklimpel.12hp.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4lima.at
bgl0.lima-city.de
biodiversitynetworkkenya.webspace.rocks
blog.hescor.com
bluemax.forenhosting.net
bmkajpjincjdzfx.lim-city.de
bmkeawfovvvdsia.lim-city.de
board.deazel.net
bongcsgo.lima-city.de
both.lima.zone
bpwzpknomxxmruw.kontec.eu
br3un16.lima-city.de
brayan8090.lima-city.de
broagan.lima-city.de
browse.freunde-des-bbq.de
bskkplipetigiym.hescor.de
bsmkrhscqbotkpz.lima-city.net
cookies.sgeiderstedt.de
hoesacker.de
projekt-sb91.race-sim-net.de
rad-wandern.eu
selik.lima-city.de
send0r.de
shinyar-beauty.com
www.12hp.at
www.albragugger.lima-city.de
www.alpha-edits.de
www.arcade-games.net
www.atelier-isodora.ch
www.autogaleriestockheim.de
www.bad-reset.de
www.balatonsommer.at
www.blumen-jeka.de
www.bocklage.org
www.brot-und-anderes.de
www.bucht.lima-city.de
www.c143.lima-city.de
www.christian-brueck.de
www.clemente-will-studieren.de
www.couponjagd.de
www.craniocheck.com
www.craniocheck.de
www.crypco.net
www.d-s-h-records.de
www.deep-trust.info
www.djstelvio.com
www.e-motorstore.ch
www.edv-service-benkert.de
www.enfesso.de
www.enlighted-group.com
www.etrotti.com
www.eu-stammtisch.com
www.foto-woertz.net
www.gabybrinkmann.de
www.gerdklimpel.12hp.de
www.handyvertrag-preisvergleich.de
www.hypnoticking.de
www.ines-und-thomas-hochzeit.de
www.keepsake.de
www.kfz-fleischmann.de
www.kfzwerkstattmuenchen.com
www.kinder-der-kirin-tor.de
www.klangschalen-studio.de
www.knappenkapelle.lima-city.de
www.ks-elektrotechnik.net
www.lucamoos.com
www.maedchenfussball-in-soltau.lima-city.de
www.mailhelden.de
www.marcfischer.org
www.margarete-frank.de
www.matthias-auer.de
www.maxxframe.de
www.meerschweinchens-haltung.de
www.michabraun.de
www.onco-theranostics.eu
www.pasdoe.com
www.plan-bim.de
www.powderski.eu
www.priesterroth.work
www.pushsignal.lima-city.de
www.riotcoding.com
www.sgeiderstedt.de
www.sidegrill-bedburg.de
www.sola-allgemeine.de
www.textilhammer.com
www.thomas-streitberger.at
www.vinobility.eu
www.witch-endlessmission.com
www.wpf.li
xn--phillipprll-zfb.de

Other certificates including the domain name gerdklimpel.12hp.de

(limited to 100 certificates)
elgenio.lima-city.de
www.gerdklimpel.12hp.de
projects.hampoelz.net
www.beta.buch.work
elgenio.lima-city.de
www.gordan.lima-city.de
www.terra-worx.lima-city.de
www.gerdklimpel.12hp.de
www.brauman.lima-city.de
www.thorbenmueller.de.cool
www.gerdklimpel.12hp.de
www.msipa.lima-city.de
www.gerdklimpel.12hp.de
elgenio.lima-city.de
esterrer.lima-city.de
www.gerdklimpel.12hp.de
feratishow.lima-city.de
www.gerdklimpel.12hp.de
www.jugendraum.de.cool
www.ebevogon.lima-city.de
gerdklimpel.12hp.de
tolga85.lima-city.de
www.max2go.lima-city.de
elgenio.lima-city.de
www.gerdklimpel.12hp.de

Certificate

The complete raw certificate details for www.gerdklimpel.12hp.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ef+ioZ+P9UuiOcalQRk
UYlc2RogTi+ChFTlIxO25MYVp6SUaiUPsQ9NRncbhDzsPhoyRqSxjpnacAC/mPLs
+zQ5o2o+dFrhIJHGtQD62dGyX1Ib9QteJTXXI3OfX1s8XvxTHUcQ41xyxG50IYFq
T+WNwGB35iEih669jMlG+SqykThBOSzn2mYwqkS8dTcejDJ475L0gKWe9BniqbM7
6QllOUb1ihCehuq7xCJQeVwqnDbt1RlWs08v+eHE2rj2gsp7lI1289Ctsp2W3+b0
Si67shJ1C3fmiCSWllErn6XO8IJaNUTq3fdUuB7GG53wZEDZRabh67ylDAZxTmLb
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392977930986954621264458901604866497561473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 08:13:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 08:13:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gerdklimpel.12hp.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27302975585771801628115639619658656050670473479798873785966748063613578633471747440923706640346754122111306220729340044846308680809256838078480435329631029245259142948114567118434408312850650532684610215381991949341667244324964529169825093571405709212232082042702554469841992691070072923712660187262327372011373493935285132125281793919603170470270985211686247730757937464996855716350473846969566395058964301105535216458628855808402668345943728051484611516604154031483168694438591965557390417001769555833931282387739346902197782215493516580142097507615425779384826911763271720466162070389610969475371967265165958896407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7baa83123ed64a73d2e2fef3220f1921692a9417
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2082 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4lima.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgl0.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biodiversitynetworkkenya.webspace.rocks'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.hescor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluemax.forenhosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmkajpjincjdzfx.lim-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmkeawfovvvdsia.lim-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'board.deazel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bongcsgo.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'both.lima.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpwzpknomxxmruw.kontec.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'br3un16.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brayan8090.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broagan.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'browse.freunde-des-bbq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bskkplipetigiym.hescor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsmkrhscqbotkpz.lima-city.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookies.sgeiderstedt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoesacker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projekt-sb91.race-sim-net.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rad-wandern.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selik.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'send0r.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinyar-beauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12hp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albragugger.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpha-edits.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcade-games.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atelier-isodora.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autogaleriestockheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bad-reset.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.balatonsommer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blumen-jeka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bocklage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brot-und-anderes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucht.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c143.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christian-brueck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clemente-will-studieren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.couponjagd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craniocheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craniocheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crypco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.d-s-h-records.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deep-trust.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djstelvio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-motorstore.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edv-service-benkert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enfesso.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enlighted-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etrotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eu-stammtisch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foto-woertz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gabybrinkmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gerdklimpel.12hp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handyvertrag-preisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypnoticking.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ines-und-thomas-hochzeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepsake.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfz-fleischmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfzwerkstattmuenchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinder-der-kirin-tor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klangschalen-studio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knappenkapelle.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ks-elektrotechnik.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucamoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maedchenfussball-in-soltau.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailhelden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcfischer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.margarete-frank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matthias-auer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxxframe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meerschweinchens-haltung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.michabraun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onco-theranostics.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pasdoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plan-bim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powderski.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priesterroth.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pushsignal.lima-city.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riotcoding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgeiderstedt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidegrill-bedburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sola-allgemeine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.textilhammer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomas-streitberger.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinobility.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.witch-endlessmission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wpf.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--phillipprll-zfb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001658f4209fc0000040300483046022100d00c5c7c0561cc80016149cb6dda97657b5f134891805ecdcff3ba0c4de86352022100a4a1084b9d200124a9710975f830b9654d1c14ff74002418cb5ca83011ad856f0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001658f420a2b0000040300473045022100cce148e71b8fa280e39a6b8a30402c58cb0953f05bba1c4d75030a4945a5118902207f44915e1b4e6660d201ef71aaadb2b4870a88db629ac9f6fa5ea09c65239a15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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