t.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 3e:e4:90:69:d1:1e:67:97:cf:e5:82:a5:7a:25:58:ac was issued on by Sectigo Limited.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=t.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 3e:e4:90:69:d1:1e:67:97:cf:e5:82:a5:7a:25:58:ac
Serial Number (int): 83598908473069838689073658951811553452
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 0c:29:32:11:f8:e3:88:56:8e:ad:a6:71:13:5f:4d:37:2c:4f:3b:1e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 40:f9:08:6d:3d:8f:14:85:76:fd:6c:1d:2a:b3:34:95:97:4b:4f:0b
Fingerprint (sha256): d3:a0:83:77:b7:56:e6:fd:64:9b:81:fd:26:ac:6a:04:21:f6:e7:e6:4a:7f:d8:89:64:60:fe:b2:50:2b:7b:c7

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate t.mailkit.com

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t.mailkit.com
t.akce.rent.cz
t.akce.svet-svitidel.cz
t.akcie.rent.sk
t.akcie.svet-svietidiel.sk
t.akcio.lampak.hu
t.allianz.cz
t.centropol.cz
t.club.rossmann.cz
t.dedoma.ro
t.dedoma.sk
t.dine4fit.hu
t.dine4fit.pl
t.dobryemail.cz
t.email.bezvasport.cz
t.email.bezvasport.sk
t.emaildemos.com
t.energie.centropol.cz
t.homecredit.cz
t.homecredit.sk
t.info.nm.cz
t.kaloricketabulky.cz
t.kaloricketabulky.sk
t.kartavyhod.drmax.cz
t.ketodiet.cz
t.ketodiet.sk
t.kusmitea.cz
t.love.activate.cz
t.mail.key4you.cz
t.malfini.com
t.mesacnyvypis.sk
t.mesicnivypis.cz
t.mimilatky.cz
t.mnd.cz
t.naturamed.cz
t.naturamed.sk
t.nea.frogies.gr
t.news.3dden.com
t.news.e-kondomy.cz
t.news.etneteragroup.cz
t.news.stomateam.cz
t.news.superlove.sk
t.newsletter.drmax.cz
t.newsletter.factcool.com
t.newsletter.rossmann.cz
t.nl.toner.shop
t.nl.tonerpartner.cz
t.nl.tonerpartner.hr
t.nl.tonerpartner.pl
t.nl.tonerpartner.ro
t.nl.tonerpartner.si
t.nl.tonerpartner.sk
t.nl.tonerpartners.hu
t.nl.tptoner.at
t.nl.zmgroup.sk
t.notino.at
t.notino.be
t.notino.bg
t.notino.ch
t.notino.co.uk
t.notino.cz
t.notino.de
t.notino.dk
t.notino.ee
t.notino.es
t.notino.fi
t.notino.fr
t.notino.gr
t.notino.hr
t.notino.hu
t.notino.ie
t.notino.it
t.notino.lt
t.notino.lv
t.notino.nl
t.notino.pl
t.notino.pt
t.notino.ro
t.notino.se
t.notino.si
t.notino.sk
t.notino.ua
t.noutati.frogies.ro
t.novinky.centropol.cz
t.novinky.frogies.cz
t.novinky.frogies.sk
t.novinky.volkswagen.cz
t.novita.frogies.it
t.novosti.frogies.ba
t.novosti.frogies.bg
t.novosti.frogies.hr
t.novosti.frogies.rs
t.offerte.luciamo.it
t.omnivery.com
t.pottenpannen.cz
t.pottenpannen.sk
t.pozvanky.nm.cz
t.prazirna.doubleshot.cz
t.promocje.liderlamp.pl
t.promotii.luminam.ro
t.ru.dine4fit.com
t.sonderangebote.beleuchtung.at
t.sonderangebote.beleuchtung.de
t.tablycjakalorijnosti.com.ua
t.ujdonsagok.frogies.hu

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for t.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48iF6l75OKU1fQT1aO81
p2vXUdwuTdHgUTLsDXUrw+Am/OjI0QSIvGz7rhvZehBoWSwM1Ikd6lSQQJiYZD3J
H45F0oudllkL8x/vi0HOaEcSnQh88sy1CmPrv/c2GrQFhtArGjXcaoTFL6Lwb2mM
B9xRkYrG8Vmteh6KsJ7hlY5zggN1zvndypS4UdvlCR9IWxSdC7v2aJwuVT5+lNel
Y/CJB7gaYnSZq7LBdZOpyM7WPWVFhjNjowAyXww7a98RFAlTZQrkCogMp6EdbC7U
VUZVu0j+xlDgnDc+apn6v5x7sDfPBX4HHO4SmmZAdLJFHI+BPWvFeFjJVOK63RNi
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83598908473069838689073658951811553452
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28754976856956340318757409575594394058824502629309663717914477130344457319303109859263489874603763962731170636480434320642139622456463353678591797657955744951023363965028185613308511828660666499409441518554686936164478829287449168726486813010046994978661706782533377130525709215552748378711346645211936992166401856577240069933170561557844982494705723192189433393010142145952313984460023861204351485583896979152388337964793826645593645178634750491170382654699443963511026790886018098652300032760071258877059719054273462565365278152642656925156310625804783303443256398419882129898385577595508829950867757234307976094419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c293211f8e388568eada671135f4d372c4f3b1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akce.rent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akce.svet-svitidel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcie.rent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcie.svet-svietidiel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.akcio.lampak.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.allianz.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.email.bezvasport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.email.bezvasport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.energie.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.info.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mail.key4you.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.malfini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nea.frogies.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.3dden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.stomateam.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.news.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.factcool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.tptoner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.nl.zmgroup.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.notino.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.noutati.frogies.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.frogies.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.frogies.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novinky.volkswagen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novita.frogies.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.novosti.frogies.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.offerte.luciamo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.promocje.liderlamp.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.promotii.luminam.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ru.dine4fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.sonderangebote.beleuchtung.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.sonderangebote.beleuchtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.tablycjakalorijnosti.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.ujdonsagok.frogies.hu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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