tjnyurl.com

Issued by R3

About this certificate

This digital certificate with serial number 04:63:de:ff:bc:90:39:71:bf:9f:2e:f9:2d:8a:94:d6:a2:b6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tjnyurl.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:de:ff:bc:90:39:71:bf:9f:2e:f9:2d:8a:94:d6:a2:b6
Serial Number (int): 382433514527496711221853557349879740015286
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:5b:49:14:1a:54:72:f8:61:f1:fe:52:07:0f:41:81:59:ad:f4:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:91:10:5a:85:cd:28:b4:31:72:54:b0:88:3b:26:5b:e8:d8:b2:ac
Fingerprint (sha256): d1:ba:85:bc:74:75:a8:4a:da:d5:d0:6c:2a:ad:0e:f0:cb:b3:07:ed:e5:0c:03:5d:e3:1c:42:53:48:03:31:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tjnyurl.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tjnyurl.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.begratefulandcompassionate.com
*.blackcrackaddicts.com
*.bortor.com
*.bully-merchandise.de
*.cheapcarpet.com.au
*.eedbox.com
*.ellenutube.com
*.ethosportal.com
*.fertilityhelpline.com
*.githum.io
*.glosan.net
*.godeady.com
*.gympages.com.au
*.invinisgame.com
*.ivloud.com
*.keepcart.com
*.kingbed.com.au
*.kluever-bucy-syndrom.de
*.lemonaid.ca
*.massageitout.net
*.mikedecook.com
*.mycitytown.info
*.myjerbalife.com
*.mykoreatown.info
*.nhetflix.com
*.norddtroms.com
*.porngaze.net
*.profashion.org
*.refinancecalculator.com.au
*.rws-catering.de
*.soocer24.com
*.stackfactor.com
*.stourvalleymotorcompany.co.uk
*.strepokokken.de
*.supplycuttingboard.com
*.testsiegere.de
*.tewnet.tv
*.texstsieger.de
*.theblackhorsegrimston.co.uk
*.thelearnery.org
*.tjnyurl.com
*.tow.net.au
*.www-fusspilz.de
*.wwwbankatfirst.com
*.wwwfixmyblinds.com
*.xn--brusvtergrsserung-8zb.de
*.xn--die-radfahrprfung-f3b.de
*.xn--fhrhausems-q5a.de
*.xn--hmorrhoidens-gcb.de
*.xn--steuererklrzng-fib.de
begratefulandcompassionate.com
blackcrackaddicts.com
bortor.com
bully-merchandise.de
cheapcarpet.com.au
eedbox.com
ellenutube.com
ethosportal.com
fertilityhelpline.com
githum.io
glosan.net
godeady.com
gympages.com.au
invinisgame.com
ivloud.com
keepcart.com
kingbed.com.au
kluever-bucy-syndrom.de
lemonaid.ca
massageitout.net
mikedecook.com
mycitytown.info
myjerbalife.com
mykoreatown.info
nhetflix.com
norddtroms.com
porngaze.net
profashion.org
refinancecalculator.com.au
rws-catering.de
soocer24.com
stackfactor.com
stourvalleymotorcompany.co.uk
strepokokken.de
supplycuttingboard.com
testsiegere.de
tewnet.tv
texstsieger.de
theblackhorsegrimston.co.uk
thelearnery.org
tjnyurl.com
tow.net.au
www-fusspilz.de
wwwbankatfirst.com
wwwfixmyblinds.com
xn--brusvtergrsserung-8zb.de
xn--die-radfahrprfung-f3b.de
xn--fhrhausems-q5a.de
xn--hmorrhoidens-gcb.de
xn--steuererklrzng-fib.de

Other certificates including the domain name tjnyurl.com

(limited to 100 certificates)
tjnyurl.com
tjnyurl.com
gunsman.com
kettlewellcottage.co.uk
pavtek.com
kettlewellcottage.co.uk
tjnyurl.com
campford.com
cara-memasak.com
kettlewellcottage.co.uk

Certificate

The complete raw certificate details for tjnyurl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArCkntAjGZyJ7QUV9KXb6
WOfWMcdcGT9MU10vxWjOGuNw1tQfXtgNbrbcBO0un7UsQkg07YPL6I9iJ+TrGVOG
LkWz30FDW3Omoewaf6gGZZ8jkQdJ79pHAuSAsM1DAb28Q+uLIdea9H2npmIW+lpR
SP2N4RWTQeQQn6ADuuU5BGvrtxZAZWVYvbHVKwnCF8LJDV2doWck6AwRQiXKGMl8
KJDTHXejcM2YCSesvOnOxMNB2QL2xGzQ4RS6lgG9EaDt6ow6wEYk0s7UPAlRTJkN
aJknF6Hdyty4HxsuzLnBVWM5TZLyALF8s69hE3zUia1nMEjKHsSa+rd9C94PLJ6J
MkCmhG/ZJ4re2KtEsqY68QWfTTqhvE37SeLjhkr1jvNV4heoWwqhBl3HGc3kTi6R
T24FlKdd5Gmt4wi4RL4uqiUszcp37bCEhtftSpD3anZMDTnV2J03nTNdFkFHxx3k
REW9gE0jvi2gTsC3ipE6VMMja8aj0pjeTyUtHYlUHzHae/mFY5SGuwQR0l2VLmZu
X4wcyBZXnypStesaSRWJlr/ggLSYb2Nfcz8qP9XeN2ji+dqNEPnCPSBAXtAUSM4P
XBdabZfqYC2DTwnr+9oyEtnRgRSXvz9zCH6kNRodThprw2sdx4h6mGcT9VhS2M9Z
jBXcPmuW3VpXN0DYV80DhpcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382433514527496711221853557349879740015286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 06:31:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 06:31:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tjnyurl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702354631739601238175688213030789716719345285504675617879387719409314877474276645305445904393589088635606342304465288931475275327210776905822848249313494513286517060301441368571428587689562347177035571483434746664804390627877794096929827489640145226280244883427698297839188446505450584204228662559916867186856008253827342162991631638609749068982269883979522903732454106509091404073554807819030314640992968338006068087463713254117946112403735139284224400593157021041408179693255404353964237377374552627063681087739486640863932882382752635286749886472412274661476675767248181616678287839142065439387232555677153845638737328421310844692052136811239335870656414791827362351790297637573521267394736620112417993225905946028630459251928088718366888504942304138862038143468298378787990166375505947555346841324239987393979666552985362308028371982652336972126629965866625991839369691917989720896794574557394075740148695305315237328426386972338532918467312905774861940413462950974111980342053044329042257654202009833298561531986488279980228108106952269740397523614581766747934536895239647039858844818473435092469356518380038237623736016226591821905047463710823445794639301934802326655252267616925180718491000902362083727632716841114112033523351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							525b49141a5472f861f1fe52070f418159adf4f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1958 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.begratefulandcompassionate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackcrackaddicts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bortor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bully-merchandise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapcarpet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eedbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellenutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethosportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fertilityhelpline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.githum.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glosan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godeady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gympages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invinisgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keepcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingbed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kluever-bucy-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemonaid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massageitout.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikedecook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycitytown.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjerbalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mykoreatown.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhetflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norddtroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porngaze.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profashion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refinancecalculator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rws-catering.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soocer24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stackfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stourvalleymotorcompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strepokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supplycuttingboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsiegere.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tewnet.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texstsieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theblackhorsegrimston.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelearnery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjnyurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tow.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-fusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbankatfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfixmyblinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brusvtergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--die-radfahrprfung-f3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fhrhausems-q5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmorrhoidens-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuererklrzng-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begratefulandcompassionate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackcrackaddicts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bortor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bully-merchandise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapcarpet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eedbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellenutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethosportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fertilityhelpline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'githum.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glosan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godeady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gympages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invinisgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingbed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kluever-bucy-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonaid.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massageitout.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikedecook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycitytown.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjerbalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykoreatown.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhetflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norddtroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porngaze.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profashion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refinancecalculator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rws-catering.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soocer24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stackfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stourvalleymotorcompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strepokokken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplycuttingboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsiegere.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewnet.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texstsieger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theblackhorsegrimston.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelearnery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjnyurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tow.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbankatfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfixmyblinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brusvtergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--die-radfahrprfung-f3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fhrhausems-q5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmorrhoidens-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuererklrzng-fib.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d01bbc0ed0000040300483046022100b222b7843516e207d38dd64f9a7bfd9cb0a6467fb8ef1221c8279ce41fb0990b022100d842d7fd906990b32af1ad3575326ddd318ab11ce4841bb1db93e5422e0df4a40077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d01bbc1000000040300483046022100ae1c71949bf0d13ffa8c5687020664985bdc4527bbf2010194646ce6353975da022100867adbc920dae45bd01b31ed81341d60fce7995d831ad3097e611eb2a26f04f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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