nayfederal.org

Issued by R3

About this certificate

This digital certificate with serial number 03:8c:fe:0d:1e:8c:04:52:66:a0:f2:95:e9:45:f1:e2:82:9e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nayfederal.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:fe:0d:1e:8c:04:52:66:a0:f2:95:e9:45:f1:e2:82:9e
Serial Number (int): 309314081194566222827374835637702608716446
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:07:e9:33:40:6e:8b:00:39:9a:22:20:3d:e1:8e:fc:1a:ee:1f:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 69:7f:e1:8e:49:61:81:6f:d5:a8:53:b1:53:49:89:91:22:75:b6:3a
Fingerprint (sha256): de:c8:96:7e:12:e0:2d:f5:96:c1:c7:1e:1f:b2:a1:4e:e8:a1:60:0d:cf:2f:b6:63:0d:5a:38:5b:3d:ab:c5:b7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nayfederal.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nayfederal.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amazing-deals.de
*.beticismo.net
*.bounceenergycodes.com
*.casastierrainmobiliaria.com
*.chocoadicto.com
*.dadyads.com
*.digiley.com
*.dratulagra.com
*.e-keinanzeigen.ch
*.e-kleianzeigen.ch
*.e-kleinanzeige.com
*.e-kleinanzeigen.com
*.e-klinanzeigen.ch
*.e-noniya.com
*.easyseek.net
*.edmdl.co
*.ekeinanzeigen.ch
*.ekleianzeigen.ch
*.elasia2.com
*.escuelaalcentro.com
*.fableticss.com
*.firmcompany.me
*.haemorriiden.de
*.hanakage.net
*.karabsleather.com
*.kickassasia.com
*.kinejunsoken.com
*.kingmenshop.com
*.logicsapp.com
*.lux-reisen.de
*.mauve.com.au
*.musicasgratis.net
*.nayfederal.org
*.netde-shop.com
*.niigata-syoku.com
*.pansionlukomir.com
*.rauf-oder-runter.de
*.satyamluniya.com
*.sbc-diet.com
*.schuessler-saltse.de
*.sfileydy.com
*.technicaljanab.com
*.tiarawestfilms.com
*.toba-tenboudai.com
*.trackman.ch
*.trensi.co
*.treysons.com
*.wao-creative.com
*.web-clock.net
*.xn--steuererklerung-9kb.de
amazing-deals.de
beticismo.net
bounceenergycodes.com
casastierrainmobiliaria.com
chocoadicto.com
dadyads.com
digiley.com
dratulagra.com
e-keinanzeigen.ch
e-kleianzeigen.ch
e-kleinanzeige.com
e-kleinanzeigen.com
e-klinanzeigen.ch
e-noniya.com
easyseek.net
edmdl.co
ekeinanzeigen.ch
ekleianzeigen.ch
elasia2.com
escuelaalcentro.com
fableticss.com
firmcompany.me
haemorriiden.de
hanakage.net
karabsleather.com
kickassasia.com
kinejunsoken.com
kingmenshop.com
logicsapp.com
lux-reisen.de
mauve.com.au
musicasgratis.net
nayfederal.org
netde-shop.com
niigata-syoku.com
pansionlukomir.com
rauf-oder-runter.de
satyamluniya.com
sbc-diet.com
schuessler-saltse.de
sfileydy.com
technicaljanab.com
tiarawestfilms.com
toba-tenboudai.com
trackman.ch
trensi.co
treysons.com
wao-creative.com
web-clock.net
xn--steuererklerung-9kb.de

Other certificates including the domain name nayfederal.org

(limited to 100 certificates)
oceanoofgames.com
nayfederal.org
moviestarplanethacker.com
mauve.com.au
clanguage.com
escribaniadevoto.net
cloniallife.com
nayfederal.org
nayfederal.org

Certificate

The complete raw certificate details for nayfederal.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309314081194566222827374835637702608716446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 12:36:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 12:36:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nayfederal.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 920596600738893296970580577055686579926025169610217437707895709233967660864415821997462998858208619211492354461705302280645628144230005734192870778856143718914885003149037760623216068727364864135682724143961790521495126227263540209185500463100305146855156767019976330279482640308944503676547452170913898560017611667634870546204814177284444403162943453612071041898245058775299329841441795026878219316089742641123368740315898455929230755782873647723738655590852507748760210050201792508520315321493398551121001702863453755625235580561058111232203415623759017647912973930459017970161038670149015002596782771437020425232623447909699489430478743650268212985559883489655062451345624580977269520349123663543012561175800882501577880030470648529839049247196338851905324227657014350488119369748063594244836841904083716443775667515165529425170932629565622223097000964853227274797397294276618260648366905574689125535621722899154182611078321916107391495639457110160837791084655844688422672095563181684885299346651770839872617874576149914717673235333617929258151887830897988985004145464696202367251898965566099836672159422420388471700796520477325344274571768638743643249122001603100199116827796428829712782654355069327943322584693750921993259980353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d07e933406e8b00399a22203de18efc1aee1fa1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1836 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazing-deals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beticismo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bounceenergycodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casastierrainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocoadicto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dadyads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dratulagra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-keinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-kleianzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-kleinanzeige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-kleinanzeigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-klinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-noniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyseek.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmdl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekeinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekleianzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elasia2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escuelaalcentro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fableticss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firmcompany.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemorriiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanakage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karabsleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kickassasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinejunsoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingmenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lux-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicasgratis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nayfederal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netde-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niigata-syoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pansionlukomir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rauf-oder-runter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satyamluniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbc-diet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuessler-saltse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfileydy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technicaljanab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiarawestfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toba-tenboudai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackman.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trensi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treysons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wao-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web-clock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuererklerung-9kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazing-deals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beticismo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounceenergycodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casastierrainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocoadicto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadyads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dratulagra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-keinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kleianzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kleinanzeige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-kleinanzeigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-klinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-noniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyseek.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmdl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekeinanzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekleianzeigen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasia2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escuelaalcentro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fableticss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firmcompany.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemorriiden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanakage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karabsleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kickassasia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinejunsoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingmenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lux-reisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauve.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicasgratis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nayfederal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netde-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niigata-syoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pansionlukomir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rauf-oder-runter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satyamluniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbc-diet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuessler-saltse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfileydy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicaljanab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiarawestfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toba-tenboudai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackman.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trensi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treysons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wao-creative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-clock.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuererklerung-9kb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d082febd600000403004730450220019ed63026ce1a58ff40fc6f90c1a6b426675e9cbe897254dee72c8c86b07fc302210094300884dabed88c3dfdbc9c6377c1ca885d12b609965af2dda3a83e85083f2c007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d082febd60000040300473045022100e4469436b6de89feec7425f9bf80a7709a86924506ec81aa7ba44975f3c448dc02204c6364b1d8d20b746fe29013f9dd66a3baa9d774b75dc33f1f03aeae076b211d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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