entdecke-scolaris-grundschule.de

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:52:e6:24:83:cc:07:6c:4b:56:11:0c:1e:2c:be:73:7d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=entdecke-scolaris-grundschule.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:52:e6:24:83:cc:07:6c:4b:56:11:0c:1e:2c:be:73:7d
Serial Number (int): 421720044279583361279772155691274409505661
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:79:35:67:75:fe:98:88:8a:63:57:07:57:37:ac:8a:f0:e3:ee:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): de:c7:88:f5:65:b1:5b:7f:9c:2d:89:24:3c:b1:99:f4:b0:5e:75:f6
Fingerprint (sha256): d4:06:30:80:55:81:fb:08:d8:3f:d8:28:1a:1b:2b:f6:cd:06:32:2a:fc:a6:58:b2:bb:3d:90:a7:d9:de:b0:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate entdecke-scolaris-grundschule.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for entdecke-scolaris-grundschule.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amm.co.in
*.appraisalwizard.com.au
*.atemzeitvolumen.de
*.auctionlosmontesinos.com
*.birthpose.com
*.businesschallenge.com.au
*.captialford.com
*.discovee.com
*.donnaslegshow.com
*.dougycenter.org
*.employeebridge.com
*.entdecke-scolaris-grundschule.de
*.evionproducts.com
*.extort.me
*.formsimplicty.com
*.go-gay.com
*.groupmgnt.com
*.halfbakedpowdercoating.com
*.handy-coffee.co
*.icicipruelife.com
*.jcpennsy.com
*.keysvilleflowershop.com
*.lewy-koerperchen-demenz.de
*.mcdlogin.com
*.microscopy-uk.org
*.mlcal.com
*.movietriggers.com
*.nrplade.net
*.oldspicewhite.co
*.orbitlending.com
*.potenzgenerika.com
*.prenhallart.com
*.quickfile.net
*.rcketmail.com
*.rewardlocal.com.au
*.robloix.com
*.rocketsreunion.co
*.sasktell.net
*.sebecas.com
*.sesentirfaibleenjacula.co
*.sotwr.co
*.takakusu.co
*.tovarat.co
*.twitwitter.com
*.velvetroselash.co
*.ww2express.com
*.xhamstwe.com
*.yahoioi.com
*.z500.site
*.zonaplex.com
amm.co.in
appraisalwizard.com.au
atemzeitvolumen.de
auctionlosmontesinos.com
birthpose.com
businesschallenge.com.au
captialford.com
discovee.com
donnaslegshow.com
dougycenter.org
employeebridge.com
entdecke-scolaris-grundschule.de
evionproducts.com
extort.me
formsimplicty.com
go-gay.com
groupmgnt.com
halfbakedpowdercoating.com
handy-coffee.co
icicipruelife.com
jcpennsy.com
keysvilleflowershop.com
lewy-koerperchen-demenz.de
mcdlogin.com
microscopy-uk.org
mlcal.com
movietriggers.com
nrplade.net
oldspicewhite.co
orbitlending.com
potenzgenerika.com
prenhallart.com
quickfile.net
rcketmail.com
rewardlocal.com.au
robloix.com
rocketsreunion.co
sasktell.net
sebecas.com
sesentirfaibleenjacula.co
sotwr.co
takakusu.co
tovarat.co
twitwitter.com
velvetroselash.co
ww2express.com
xhamstwe.com
yahoioi.com
z500.site
zonaplex.com

Other certificates including the domain name entdecke-scolaris-grundschule.de

(limited to 100 certificates)
entdecke-scolaris-grundschule.de
handyrakten.de
le-conte.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de
www.scolaris.de
www.scolaris.de
entdecke-scolaris-grundschule.de
entdecke-scolaris-grundschule.de

Certificate

The complete raw certificate details for entdecke-scolaris-grundschule.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421720044279583361279772155691274409505661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 06:35:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 06:35:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'entdecke-scolaris-grundschule.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 907339285532524693197372437465461356484143475185507422219966013502946264766370866968258996704762460744642079856774404980007508268769795722197933207049914517960552363092065997961983419827774486097388252107313192778543297228756450016831319754147252911871192920661084005843751946618191320080280512343800388423035886300382548457913975934221885503526475686003857569305153873085840415241693250552097978089022336447025940813047766216246140108700138596031467187257534173717431535965531027962127939596802224155784593229467159778378316938524775391277493726376886193929063032228417115552770868101380217968204932108174625338002703661873544476717120327188380822665725550155430374558555550754996922738257557861298566568803309734165427607686987984909240235431465737954559472994086363316669250899268873396694583458752658108780239187215886868568237603049081037372268456422333515308143947010972766787797431272752632134160507899093802445043131074288604162695369534097215788711456018215922123214279894525479553185526533419365083805805994603836357485614210234148272177024142478487768367393643626642734955629869657667314797812282770674548056480351776266333818500969254434487981365590996160214765117959604144299992770570489422584353771098745405727585405273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e879356775fe98888a6357075737ac8af0e3ee0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dougycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keysvilleflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlcal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldspicewhite.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbitlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prenhallart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickfile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketsreunion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sesentirfaibleenjacula.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sotwr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takakusu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tovarat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twitwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velvetroselash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ww2express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xhamstwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahoioi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.z500.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zonaplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalwizard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atemzeitvolumen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctionlosmontesinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthpose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesschallenge.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captialford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnaslegshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dougycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeebridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entdecke-scolaris-grundschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evionproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extort.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsimplicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go-gay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupmgnt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfbakedpowdercoating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handy-coffee.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icicipruelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpennsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keysvilleflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewy-koerperchen-demenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microscopy-uk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlcal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietriggers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrplade.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldspicewhite.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitlending.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potenzgenerika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenhallart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickfile.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcketmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewardlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketsreunion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasktell.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sebecas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sesentirfaibleenjacula.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotwr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takakusu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tovarat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velvetroselash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2express.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xhamstwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahoioi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z500.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonaplex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e36bc762b0000040300473045022100cae671c6d2e53f73e03b1adaf095a7280561b1a4939fbb21d3c2ac0f5f30885702203ac97b820720f881a2fa90eb3300ad9cc338a9a8c2174379bc480c44b6ba66be00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e36bc78470000040300483046022100f7ad4b77f94e0c52da02b59aa952dc5e0113cfee70333f2e77b8ea5cbe613e85022100df46c0105f660fa9f802ce7ac75d6a511d57804f1a72fdeda99cbde3b31fda36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aef816adc47747dc64c4b3a59711ae1461e3fba282c17599929dde5cf6c25ef7cd3d71da35419c2f7ffa78f58160f089732233365059b5d303595efad13a06342a004149df7c81a126d2586ba8ef30f176535659922ce75ef18027fe988f871330837374504f23d45c8fa5a7ad547400e3186fe8cc5afd32cdbb095fb79ccec48ff4b0cfd9030a7ce372f7f5129d83bdd0093c06f291d990d3e9a3a2fcb12bac8323694282b3f79e8c9ae483637b926740e4a77531e302c9639efc1efadff1b6809fccd9176cc4f61f0b4b92b0c31a11f68a93841ab2690a1cc1e26b7b273b3697adcaca59aac8b7337ef55d67df287d9eed6742ca96b29f4c39f03897915916