qwuoka.de

Issued by R3

About this certificate

This digital certificate with serial number 03:81:2d:12:7d:04:77:42:0e:5e:3c:76:6f:22:3c:73:68:30 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=qwuoka.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:2d:12:7d:04:77:42:0e:5e:3c:76:6f:22:3c:73:68:30
Serial Number (int): 305293194384890598247465184200413085394992
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:7d:f6:e2:e9:54:87:fe:3d:ff:44:5c:1c:ae:68:ba:5f:7b:f5:42
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): de:e4:1d:ea:06:1e:2a:02:ff:1c:e0:e4:22:b2:38:38:09:0f:cc:53
Fingerprint (sha256): de:35:de:90:a3:b5:7b:f7:72:ed:01:34:5f:62:3d:b1:36:73:ec:e0:e9:db:54:2b:4c:0b:63:d4:9c:07:f8:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate qwuoka.de

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qwuoka.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1mediasg.com
*.26alfatango.com
*.4archive.net
*.6gga.ga
*.anglo.org
*.apohtekenumschau.de
*.ausflugsreise.de
*.ayoni.tv
*.bewtoki292.com
*.billiger-fligen.de
*.bookdaquan.com
*.bracubi.com
*.cabaldallas.com
*.cadburycandy.com
*.carea.biz
*.certfnmt.es
*.codingteam.org
*.corefreshokc.com
*.criptolancamentos.com
*.datingmendila.ga
*.dekalhousing.org
*.dfwqualitytees.com
*.digitalcerrajera.com
*.divi.es
*.dostavkin24.com
*.fremontcityschools.net
*.galatina.de
*.gesundheirsinformation.de
*.gruposore.com
*.kikki.uk
*.leghacker.com
*.llp.eu
*.lonestarfamilypractice.com
*.mitfahrelegenheiten.de
*.mjg.de
*.mooe.io
*.oil-change-95056.com
*.photocopy.co.za
*.pram.com.au
*.qwuoka.de
*.restaurantevillamaggioni.com.br
*.snowpiercer.de
*.solidoakfurniturewarehouse.co.uk
*.souvenirs.co.za
*.terezinhapolaca.com.br
*.topyad.com
*.urlaubsrestposten.de
*.xn--fingerngelmotive-1nb.de
*.zaneanderson.org
1mediasg.com
26alfatango.com
4archive.net
6gga.ga
anglo.org
apohtekenumschau.de
ausflugsreise.de
ayoni.tv
bewtoki292.com
billiger-fligen.de
bookdaquan.com
bracubi.com
cabaldallas.com
cadburycandy.com
carea.biz
certfnmt.es
codingteam.org
corefreshokc.com
criptolancamentos.com
datingmendila.ga
dekalhousing.org
dfwqualitytees.com
digitalcerrajera.com
divi.es
dostavkin24.com
fremontcityschools.net
galatina.de
gesundheirsinformation.de
gruposore.com
kikki.uk
leghacker.com
llp.eu
lonestarfamilypractice.com
mitfahrelegenheiten.de
mjg.de
mooe.io
oil-change-95056.com
photocopy.co.za
pram.com.au
qwuoka.de
restaurantevillamaggioni.com.br
snowpiercer.de
solidoakfurniturewarehouse.co.uk
souvenirs.co.za
terezinhapolaca.com.br
topyad.com
urlaubsrestposten.de
xn--fingerngelmotive-1nb.de
zaneanderson.org

Other certificates including the domain name qwuoka.de

(limited to 100 certificates)
qwuoka.de
qwuoka.de
jalshamovie.in
qwuoka.de
osteoporos.de
raspberrycenter.de
qwuoka.de
qwuoka.de
qwuoka.de
qwuoka.de
greenvillehumane.org
samandstefanarchive.com

Certificate

The complete raw certificate details for qwuoka.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxCW4CrZjGdg3A64ykEri
8kYRtGcpelPZDLe8/QokZC4+Hu3CWSJtTYLWwJs6xpkPmGGdUUmEBwAhX9Y2LL05
nC1bNE49INBjPnovIy7qtz9fDGy5IDswf2GAIUdfuptJ+I6/K3oUZ9y6u126aWmj
m3E8UwmGxbu8QBuFV/xNwO3bzp3SQiJ1+mGSU4Ldc+uDUShsSE+tKq1zqgYoEls3
T99uXl+gUE0ynimB9lTOU2n0gIvoamLUMJkZj0pwGO6/wHUsSW66lIPogPJQCmbm
hK2/qkt/vTwl/1XoNU+M+bVTNi5Ym+4lHbE3N2wj5USh+IXnfPsXfQOQbwC3QE1H
ABQroaNMybkmaog8IopGA1kwWguO5yuFk5vks4SI1ZTdfJCLAS5rhpgj/c6Hy5yL
CXnr0BM7QezQVOOzjgDcwvYtve+8UK4GHyXhgZkLJX9suV7E5cQeCEHg0S34xapw
rDkgalLZCRXcvIBQ/DbsYvVjYdXL1wFpbgDAoK3ashyY35+Xnshgi9lFr4tKUKuF
GBNSCe2aeq3FeoBJ13HErgHR2BZ1h0RQViW2A/3kE6eXfDCcMA4ViDd49I+3VLPV
xrlcfoV/+iBpeMdKJkGIXE6AT+9LN6hd22EUg7pyFBmfGTXNi/tArPdx43PnAKw8
CfY6p0fSm7RiPa+hFv9Px18CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305293194384890598247465184200413085394992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 20:27:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 20:27:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qwuoka.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800211330072355878193891114979547632642548369330439914049536359069627634689468634887500834788926183095876022288289478341289015188300450268977218168922090373125865036702130488736279223378312875474335438061920402864385060657548249610739852449782348012432283563706110295634380342316146012251122097164276396444046904705869197073077782948317049391909199771763854595773108808133866928084481993159432746515954344662101146145623098555345346677217279025968966156375970395555800292989523807080876400865869520381284448135816799416009503070020976490913889176178321610871016564981684116010008207083327136255278108942500326284769061430104051671630791066034255933406358050600726330035463310361778859076991189522836591073706388664661102482455471106882216960994875495514128348761799883126790945574023889254625391286920117181284924756206049408303983981883838240714499022133432324972889587107650780379480298830893676021499862326297259042362211826011227915383779317893117173456832459274028970279903397425212090717646601710303607720361800670540325104012433627360864165872267317929838331287844283528571602336395118551674116102205427946524208318925547375240165888485438449574785360487289957236088577229403297154622230169811641354061122934556198633179432799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f7df6e2e95487fe3dff445c1cae68ba5f7bf542
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1798 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1mediasg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.26alfatango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4archive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6gga.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anglo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apohtekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ausflugsreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayoni.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bewtoki292.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billiger-fligen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookdaquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bracubi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabaldallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cadburycandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certfnmt.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codingteam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corefreshokc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criptolancamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datingmendila.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekalhousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfwqualitytees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalcerrajera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dostavkin24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fremontcityschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galatina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesundheirsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruposore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kikki.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leghacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonestarfamilypractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitfahrelegenheiten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mjg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mooe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oil-change-95056.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photocopy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pram.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qwuoka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurantevillamaggioni.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowpiercer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solidoakfurniturewarehouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.souvenirs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terezinhapolaca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topyad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urlaubsrestposten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fingerngelmotive-1nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaneanderson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1mediasg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '26alfatango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4archive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6gga.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anglo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apohtekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ausflugsreise.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayoni.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bewtoki292.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billiger-fligen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookdaquan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracubi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabaldallas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadburycandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certfnmt.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codingteam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corefreshokc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criptolancamentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingmendila.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekalhousing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwqualitytees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalcerrajera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dostavkin24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fremontcityschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galatina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundheirsinformation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruposore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikki.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leghacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonestarfamilypractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitfahrelegenheiten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooe.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oil-change-95056.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocopy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pram.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qwuoka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantevillamaggioni.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowpiercer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solidoakfurniturewarehouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souvenirs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terezinhapolaca.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topyad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urlaubsrestposten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fingerngelmotive-1nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaneanderson.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d8fc494d80000040300473045022047eca84c9e857e5e28630232a12ecc6cd5475cdf00d1a546e61d713dd7a18a56022100cc3eb4f7c31655dddd34ea66d95308133ad980f23a78bc2fdf1dccc760d1c17b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d8fc4958c0000040300473045022018b5b91b924beafdaad03efdfb3cf8b02628ba00d6c5b177c42306ec6fe94be3022100de6501daf94491f439cc4c24442e62e8c1b953cf0403028faed048f5778bb1cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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