azg.de

Issued by R3

About this certificate

This digital certificate with serial number 04:35:ab:0e:b4:4b:86:40:32:c6:f9:d0:98:0b:28:6a:54:70 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=azg.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:35:ab:0e:b4:4b:86:40:32:c6:f9:d0:98:0b:28:6a:54:70
Serial Number (int): 366711483510103354700135600368729283253360
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e7:4b:9b:09:c9:98:aa:e4:7e:de:99:1e:0c:e4:d6:28:77:4d:35:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a1:e7:94:71:04:89:fe:7f:e1:5e:d2:29:76:2b:da:f4:e3:a1:36:2c
Fingerprint (sha256): dc:f4:71:cb:fc:6e:25:fc:da:21:b9:ef:26:cd:dc:bd:04:c0:2c:99:08:ae:40:57:5f:be:56:97:44:91:78:7e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate azg.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for azg.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1160l.xyz
*.anticipate.au
*.azg.de
*.biba.au
*.bipa.au
*.blaseninfektion.de
*.charting.au
*.cryptospace.au
*.dailytrader.com.au
*.eai.de
*.eeg.au
*.elac.au
*.epitech.au
*.eras.au
*.fanuc.au
*.feasible.au
*.ferry.au
*.flordeacucar.com
*.flyer.au
*.furellihairdesign.com
*.girlxinhaz.com
*.googloe.de
*.halenbad.de
*.hoteles.com.au
*.hurt.au
*.iffod.com.br
*.instructors.au
*.isleofwight.au
*.jszd.link
*.livestrp.de
*.monuments.au
*.novamovies.net
*.nrawning.co.uk
*.nursingschool.de
*.nursinguniform.de
*.oberschenkelzerrung.de
*.petershepherdtyres.co.uk
*.ringeltauben.de
*.sheriskpro.com
*.skiffvintageknittingpatterns.co.uk
*.smart-receiver.de
*.stuhlbezuege.de
*.suse.au
*.techart.au
*.tichice.com
*.tunein.au
*.wakebord.de
*.xn--kinderskianzge-rsb.de
*.xn--rinderhrner-xfb.de
*.xsoanal.net
1160l.xyz
anticipate.au
azg.de
biba.au
bipa.au
blaseninfektion.de
charting.au
cryptospace.au
dailytrader.com.au
eai.de
eeg.au
elac.au
epitech.au
eras.au
fanuc.au
feasible.au
ferry.au
flordeacucar.com
flyer.au
furellihairdesign.com
girlxinhaz.com
googloe.de
halenbad.de
hoteles.com.au
hurt.au
iffod.com.br
instructors.au
isleofwight.au
jszd.link
livestrp.de
monuments.au
novamovies.net
nrawning.co.uk
nursingschool.de
nursinguniform.de
oberschenkelzerrung.de
petershepherdtyres.co.uk
ringeltauben.de
sheriskpro.com
skiffvintageknittingpatterns.co.uk
smart-receiver.de
stuhlbezuege.de
suse.au
techart.au
tichice.com
tunein.au
wakebord.de
xn--kinderskianzge-rsb.de
xn--rinderhrner-xfb.de
xsoanal.net

Other certificates including the domain name azg.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for azg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366711483510103354700135600368729283253360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 08:54:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 08:54:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'azg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754063243058681095767901810666323496779798627712269604088629884897476134868510197118859933576561649253528986432586021749288881051141438321094504140125356759791549273036489503218629830318225527852129307659214622512279102005704978337245929606399980824854187980721673587277626349182554538200915612021610988320837188583357700077297694501145224093585885411553409442087797412001825478164739186455740463093140999750461474651630327835968206822489249770953199582591688533554943470507661526945028249488774868730733069304095953018121576650674069896461949589241995507462278786086481959269492243104950376003874578902335324045891054287490081399417652008391147317661522804669629726078889534872568452851459406882527730761582557079629336712675202314799917274992911304312246843423577578686871077205164416766058937879124599169222574186547872828192637798833399927648995037896578278121988255328660188860645048793447756841911929020539815844664327977579780467436293066715373429442699326762213728173996386898832090638125809268603071257804812587255215161904637416281099582546286106741070098331527998520029080006163730230706258974176940227567089552229555426046922856011282515972032297899133235142507741261273756063147361514912393553794825432236270599054036153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e74b9b09c998aae47ede991e0ce4d628774d3544
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1160l.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anticipate.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biba.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bipa.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaseninfektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charting.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptospace.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eeg.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elac.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epitech.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eras.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanuc.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feasible.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ferry.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flordeacucar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furellihairdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlxinhaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googloe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halenbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoteles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iffod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instructors.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isleofwight.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jszd.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livestrp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monuments.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oberschenkelzerrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ringeltauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheriskpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smart-receiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stuhlbezuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suse.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techart.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tichice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tunein.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wakebord.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kinderskianzge-rsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rinderhrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsoanal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1160l.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anticipate.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biba.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bipa.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaseninfektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charting.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptospace.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eeg.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elac.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epitech.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eras.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanuc.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feasible.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferry.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flordeacucar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furellihairdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlxinhaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googloe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halenbad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoteles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iffod.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instructors.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isleofwight.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jszd.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestrp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monuments.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrawning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursingschool.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursinguniform.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oberschenkelzerrung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petershepherdtyres.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringeltauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheriskpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiffvintageknittingpatterns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-receiver.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuhlbezuege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suse.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techart.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tichice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tunein.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakebord.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kinderskianzge-rsb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rinderhrner-xfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsoanal.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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