bia2.org

Issued by R3

About this certificate

This digital certificate with serial number 04:76:cd:1c:d1:51:5a:b3:20:07:9d:dc:bc:92:19:5e:fc:ae was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bia2.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:cd:1c:d1:51:5a:b3:20:07:9d:dc:bc:92:19:5e:fc:ae
Serial Number (int): 388875104392628830531009072847633189371054
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:04:a2:d7:05:92:c3:19:45:13:8d:ae:19:11:19:49:2a:a5:b9:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5e:41:40:20:50:ea:40:64:0c:17:c7:46:33:02:64:5e:74:ec:31:08
Fingerprint (sha256): d6:61:29:87:2f:2c:83:d4:97:73:d9:f2:5a:6d:68:67:48:c7:bd:69:0c:b7:9c:2f:63:1c:c9:ba:e0:5f:9c:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bia2.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bia2.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.7dayweekend.com
*.article.name
*.babysleep.org
*.band-redrich.com
*.bia2.org
*.blogoguru.com
*.btigershoping.com
*.chiringuito.com
*.chronomat24.site
*.downloadbrowseratonce.com
*.easyiphoneunlocking.com
*.ernaehrungsperatung.de
*.everythinghurricane.com
*.faroundandfindout.com
*.findgolfcourse.com
*.inspiredespatch.cn
*.ivlevshop.com
*.jcacompetition.com
*.jetbrsins.com
*.jooseshop.com
*.lostarmour.net
*.mittelohretzuendung.de
*.novaparnamirim.com.br
*.nudegirlstgp.ws
*.oluwaseto.com
*.orpdfdrive.com
*.passes.com.au
*.prosiebende.com
*.prxufkl.cn
*.qdhll.net
*.racekook.com
*.randonneure.nl
*.reilitor.com
*.rocketlawyee.com
*.rotelatern.com
*.safelinkwirelessca.com
*.schuessler-salz-34.de
*.shopaveratec.co
*.shreyan.com
*.skispec.co
*.stteammit.me
*.toyotainnova.co
*.udqlizm.cn
*.usa-hookups.com
*.wholesalecontracts.com
*.xn--steuere4rklrung-blb.de
*.xn--ysteuererklrung-blb.de
*.xps.au
*.zuckerknackerdiaet.de
7dayweekend.com
article.name
babysleep.org
band-redrich.com
bia2.org
blogoguru.com
btigershoping.com
chiringuito.com
chronomat24.site
downloadbrowseratonce.com
easyiphoneunlocking.com
ernaehrungsperatung.de
everythinghurricane.com
faroundandfindout.com
findgolfcourse.com
inspiredespatch.cn
ivlevshop.com
jcacompetition.com
jetbrsins.com
jooseshop.com
lostarmour.net
mittelohretzuendung.de
novaparnamirim.com.br
nudegirlstgp.ws
oluwaseto.com
orpdfdrive.com
passes.com.au
prosiebende.com
prxufkl.cn
qdhll.net
racekook.com
randonneure.nl
reilitor.com
rocketlawyee.com
rotelatern.com
safelinkwirelessca.com
schuessler-salz-34.de
shopaveratec.co
shreyan.com
skispec.co
stteammit.me
toyotainnova.co
udqlizm.cn
usa-hookups.com
wholesalecontracts.com
xn--steuere4rklrung-blb.de
xn--ysteuererklrung-blb.de
xps.au
zuckerknackerdiaet.de

Other certificates including the domain name bia2.org

(limited to 100 certificates)
bia2.org
mylifewithyou.co.uk
medco.online
o2onluine.de
bia2.org
bia2.org
bia2.org
blackbull-wark.co.uk
computerupgrade.com.au
checkingaccountonline.org
bia2.org
bia2.org

Certificate

The complete raw certificate details for bia2.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388875104392628830531009072847633189371054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 07:10:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 07:10:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bia2.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727916512167271809514024944057523453440357936795162011104939891644190527320085747804735605462250844714239604517049099057543104826089155025882846133829031440668928471022278393489724209417721756720695525701560664425951096799335743985644090836346026295070544605761760732018907242738974594294764946936904544330580973825561930291164537267404126637051686418280179473007236271576327949400445904635474444424840840884615640499026058653547224458866977475097731590152985171660758438323708473356596480339738466498818560063572051191493770428495937251972426745158348913479974004702717514499753236207855801399968706859212917174791891635066937449088380310180142299379374283721949467134685126162653574902274849661750179751453386102427500937566159151000393147864398221659976200103142386834203982830841810993599621512391698899234995960715161514585145880807855931600592118895456558278582976701469157883291117668942600863591016347569312087506529033910941400347195211508332247837685144631353183785176989594975446894005469417968702671212406170058278587308845523515432696595556724017220078943454174257633702215538934253300205138098774641201241446823659991988131819183325278958850288710039863494857622826395910300253558996862057337448252858600092243612272303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc04a2d70592c31945138dae191119492aa5b9af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7dayweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.article.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babysleep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.band-redrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bia2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogoguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btigershoping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiringuito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chronomat24.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadbrowseratonce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyiphoneunlocking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ernaehrungsperatung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everythinghurricane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faroundandfindout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findgolfcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspiredespatch.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivlevshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcacompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetbrsins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jooseshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lostarmour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mittelohretzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novaparnamirim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudegirlstgp.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oluwaseto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orpdfdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prosiebende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prxufkl.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qdhll.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racekook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randonneure.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reilitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketlawyee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotelatern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safelinkwirelessca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-salz-34.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopaveratec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shreyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skispec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stteammit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyotainnova.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.udqlizm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usa-hookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholesalecontracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuere4rklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ysteuererklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xps.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuckerknackerdiaet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7dayweekend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babysleep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'band-redrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bia2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogoguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btigershoping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiringuito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronomat24.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadbrowseratonce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyiphoneunlocking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernaehrungsperatung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everythinghurricane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faroundandfindout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findgolfcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspiredespatch.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivlevshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcacompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetbrsins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jooseshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lostarmour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mittelohretzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novaparnamirim.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudegirlstgp.ws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oluwaseto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orpdfdrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prosiebende.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prxufkl.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qdhll.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racekook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randonneure.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reilitor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketlawyee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotelatern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safelinkwirelessca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-salz-34.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopaveratec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skispec.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stteammit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyotainnova.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'udqlizm.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa-hookups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholesalecontracts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuere4rklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ysteuererklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xps.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuckerknackerdiaet.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd72e86de0000040300483046022100b96b9eeeb2c2ae302c330d47f87925d40ba2a478e0db1f024a5c8efa25c3fa66022100a4ddba84ab653c131ccdf6919b89dd1cb998d542e7039e9803e2a1b52801a443007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bd72e86d6000004030048304602210093719665d0a3a9f21e4c3204702ff57c1d62e8133623272a9d01f7d832482b14022100872acc7e8aa51a23d498d50daa3880f7ec18ec6b354f3df2bc99f46849fb4fe3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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