faffen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:ca:46:7e:5d:16:cc:00:15:b7:1c:49:a9:09:fa:91:da:ee was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=faffen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ca:46:7e:5d:16:cc:00:15:b7:1c:49:a9:09:fa:91:da:ee
Serial Number (int): 417279883922249923464951937948195207895790
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:58:0d:6d:31:0b:ae:a4:ba:98:22:48:8d:17:de:28:93:f3:3e:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b7:5d:87:54:cf:54:b1:c5:99:e2:b2:19:69:f0:e8:f8:af:75:6e:5f
Fingerprint (sha256): d2:37:ec:87:33:40:bb:29:74:49:42:65:91:87:21:d8:a7:ec:87:47:67:9b:73:14:18:8a:ab:28:85:6b:c6:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate faffen.de

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faffen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.7581086.com
*.abbiemalley.com
*.austin8282.com
*.bananatv14.com
*.blessingseatery.com
*.cafeconlibrosmalaga.com
*.dcom.pro
*.dirtywindowscleaning.com
*.doublestroller.de
*.educake.me
*.faffen.de
*.gaymaletubes.ga
*.gwgw.ga
*.h0309.com
*.handelsregisterauszuege.de
*.i-b.be
*.italienfotos.de
*.kleiderkoffer.de
*.lesmask.net
*.loungedecorplus.com
*.lovebeautypro.org
*.medizinschrank.de
*.micro-learning.com.au
*.mittelspitz.de
*.morgageprotection.us
*.motorkar.net
*.naturalmente.cc
*.news8online.com
*.nutritioncompanycolorado.com
*.nwuzmed.ga
*.ohtreeservices.co.uk
*.pnv.de
*.privateinvestment.co.za
*.proxyit.ga
*.qualityrestreams.com
*.quantym.net
*.realbargains.net.au
*.southeast-home-educators.co.uk
*.steelseriesgg.com
*.summerhillrealestate.com.au
*.tehnohelp.net
*.telfs-3d.net
*.thewithme.com
*.timmyscookies.com
*.waltermacken.com
*.whatanime.ga
*.wwwendometriose.de
*.xn--khlkombi-65a.de
*.xnyhotel.com
7581086.com
abbiemalley.com
austin8282.com
bananatv14.com
blessingseatery.com
cafeconlibrosmalaga.com
dcom.pro
dirtywindowscleaning.com
doublestroller.de
educake.me
faffen.de
gaymaletubes.ga
gwgw.ga
h0309.com
handelsregisterauszuege.de
i-b.be
italienfotos.de
kleiderkoffer.de
lesmask.net
loungedecorplus.com
lovebeautypro.org
medizinschrank.de
micro-learning.com.au
mittelspitz.de
morgageprotection.us
motorkar.net
naturalmente.cc
news8online.com
nutritioncompanycolorado.com
nwuzmed.ga
ohtreeservices.co.uk
pnv.de
privateinvestment.co.za
proxyit.ga
qualityrestreams.com
quantym.net
realbargains.net.au
southeast-home-educators.co.uk
steelseriesgg.com
summerhillrealestate.com.au
tehnohelp.net
telfs-3d.net
thewithme.com
timmyscookies.com
waltermacken.com
whatanime.ga
wwwendometriose.de
xn--khlkombi-65a.de
xnyhotel.com

Other certificates including the domain name faffen.de

(limited to 100 certificates)
faffen.de
faffen.de
fevafutbol.com
clipconver.cc
faffen.de
cydiamate.net
faffen.de
faffen.de
faffen.de
gtq.nl
*.5725.us
hooischuur.nl
faffen.de
skigloves.com.au

Certificate

The complete raw certificate details for faffen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417279883922249923464951937948195207895790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 22:47:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 22:47:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faffen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923398659001572297914800933310126672438962273646442444477707187359243749007483673598114182357488212546562713954554787840296961008289057069302801822611813861833532156445653464943092915873393085528609764467195706653296091703536209456225670018636764822481719364219451565189208907245182463376264379420798504075776649594797589864049085519658672881414598519757024828421169683064928229655114700256865186298103217751439631150648082902864942670039671303804576575955757902097002018696199879496201144209232960702923564009998323583560577102377818220653796954754157247960802167779742295062583311816408614121325684446979577009808794057018665134800495440892836075055410400945818533853917398542469999784187528363463703013645403618016462893024683032534556935707594290171745647014253061602746687740546944239442540640109397657388244205492524422405895855149983048833707655854375677658604039419156771548765946032914755066181281821617359548435801515449622442257576824592881504423356211865656277330608254884932868303366625249449319806358031803157441697218051955818587949502486571875436187567141737520064830992600606919340927840150594938350142674552643541901803264226860720687101509580354313592440088588806851521072297731868039234939676222676656603444039991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d580d6d310baea4ba9822488d17de2893f33e64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7581086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abbiemalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austin8282.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bananatv14.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blessingseatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafeconlibrosmalaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcom.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirtywindowscleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doublestroller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educake.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faffen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaymaletubes.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwgw.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h0309.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handelsregisterauszuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-b.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.italienfotos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleiderkoffer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesmask.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loungedecorplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovebeautypro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medizinschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.micro-learning.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mittelspitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgageprotection.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorkar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmente.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news8online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutritioncompanycolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwuzmed.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohtreeservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privateinvestment.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxyit.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityrestreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quantym.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realbargains.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southeast-home-educators.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steelseriesgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.summerhillrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tehnohelp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telfs-3d.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timmyscookies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waltermacken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatanime.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwendometriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--khlkombi-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xnyhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7581086.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbiemalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin8282.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bananatv14.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessingseatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeconlibrosmalaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcom.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtywindowscleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doublestroller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educake.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faffen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaymaletubes.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwgw.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h0309.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handelsregisterauszuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-b.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italienfotos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleiderkoffer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesmask.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loungedecorplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovebeautypro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medizinschrank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micro-learning.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mittelspitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgageprotection.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorkar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmente.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news8online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutritioncompanycolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwuzmed.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohtreeservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateinvestment.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyit.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityrestreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantym.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realbargains.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeast-home-educators.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelseriesgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'summerhillrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehnohelp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telfs-3d.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewithme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timmyscookies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waltermacken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatanime.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwendometriose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--khlkombi-65a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnyhotel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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