billigerfiegen.de

Issued by R3

About this certificate

This digital certificate with serial number 04:56:91:07:ff:d4:d0:c4:10:4d:14:db:3c:8b:b2:0a:8c:c2 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=billigerfiegen.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:91:07:ff:d4:d0:c4:10:4d:14:db:3c:8b:b2:0a:8c:c2
Serial Number (int): 377906206876583946282393513785532363738306
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:e8:9e:f9:47:6d:75:ee:36:c0:5c:aa:20:e4:2f:06:0a:28:02:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 75:a7:06:90:ae:0e:69:ed:f3:9c:13:db:d1:ae:88:32:8f:39:9b:92
Fingerprint (sha256): e0:51:0d:1a:62:d3:81:7d:1f:42:f5:d7:7c:6c:7f:09:0f:2b:b6:2f:dc:11:a7:ad:7d:ce:4f:c9:1f:32:e1:d8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate billigerfiegen.de

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for billigerfiegen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alexagamers.com
*.billigerfiegen.de
*.bitofbrass.co.uk
*.blairandjack.co
*.canberraflorists.com.au
*.csob-cz.online
*.datio.io
*.dect.de
*.desgracado.me
*.domainseller.com.au
*.dro.de
*.droapparel.com
*.dsign.tv
*.escapehoustonjourneytribute.com
*.fishingrods.de
*.gadget.net
*.globalescal.com
*.hashgraphfoundation.org
*.heredance.info
*.iscev-liverpool-2022.co.uk
*.krosexy.de
*.lehrefreund.de
*.lerne.de
*.lifeinsurance.co.za
*.lorena.com.au
*.modelldampflok.de
*.ntdoktor.de
*.pitbullsecuriry.com.br
*.projektierung.de
*.redpandaiptv.io
*.rodnehelp.com
*.seolytics.pl
*.shenside.de
*.spacesymbols.io
*.spiekerogg.de
*.spiz.io
*.sy3dprinter.com
*.tambem.me
*.theiberianpigl.com
*.thujen.de
*.tnk.de
*.uspkgsps.homes
*.vedioup.net
*.virtualizers.in
*.xn--kinderbrostuhl-msb.de
*.xn--kseplatte-v2a.de
*.xn--mhrengemse-ecb3f.de
*.xn--rosenlikr-77a.de
*.xn--wwwlogopdie-s8a.de
alexagamers.com
billigerfiegen.de
bitofbrass.co.uk
blairandjack.co
canberraflorists.com.au
csob-cz.online
datio.io
dect.de
desgracado.me
domainseller.com.au
dro.de
droapparel.com
dsign.tv
escapehoustonjourneytribute.com
fishingrods.de
gadget.net
globalescal.com
hashgraphfoundation.org
heredance.info
iscev-liverpool-2022.co.uk
krosexy.de
lehrefreund.de
lerne.de
lifeinsurance.co.za
lorena.com.au
modelldampflok.de
ntdoktor.de
pitbullsecuriry.com.br
projektierung.de
redpandaiptv.io
rodnehelp.com
seolytics.pl
shenside.de
spacesymbols.io
spiekerogg.de
spiz.io
sy3dprinter.com
tambem.me
theiberianpigl.com
thujen.de
tnk.de
uspkgsps.homes
vedioup.net
virtualizers.in
xn--kinderbrostuhl-msb.de
xn--kseplatte-v2a.de
xn--mhrengemse-ecb3f.de
xn--rosenlikr-77a.de
xn--wwwlogopdie-s8a.de

Other certificates including the domain name billigerfiegen.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for billigerfiegen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377906206876583946282393513785532363738306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 12:14:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 12:14:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'billigerfiegen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884405532638793259341866221415031085653174526778372811515813486626902969812374700442621408220059121362645345654165624472064489836740796642600457624684267894741748707300276275707033381403990625030346486890212620183905323804497130895078026325961497924932508271969499732816556886610734441489881085049174988108252426385173107585407459104939452022392224043742755768684306479923371553263108203780593750503503482435712833888014371144373973103881975003050816669989800367542194633391297875080856163005018767795244491846216047684584201016010404044975121480665259892909764644907460349404137610696981962374206172791411205057264446077073006832917367320488753850142975058589417754081920623317089324735061634441981311675691456059076595832689745272853385485055631113954429011039086383049628019719048189182206183587445137424483867329377254220508470920327512484836586796313467776336212665058739567166159257528548773110623212545161325697803259177523938168284131998683612790496621670489540976724791229378270938144659263635573507576126658057460689968116735509150703632474580853223139018522092468073620965347020101146652217352131118818831774713094759472036740001375980057993482592879502332188437053544888580395549828008623320946668826686249536622001907733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abe89ef9476d75ee36c05caa20e42f060a28023e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1760 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexagamers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigerfiegen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitofbrass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blairandjack.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canberraflorists.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csob-cz.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desgracado.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainseller.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dro.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.droapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsign.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escapehoustonjourneytribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishingrods.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadget.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalescal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hashgraphfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heredance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iscev-liverpool-2022.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krosexy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lehrefreund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lerne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeinsurance.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorena.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modelldampflok.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pitbullsecuriry.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projektierung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redpandaiptv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodnehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seolytics.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shenside.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spacesymbols.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiekerogg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiz.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sy3dprinter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tambem.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theiberianpigl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thujen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uspkgsps.homes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vedioup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualizers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kinderbrostuhl-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kseplatte-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mhrengemse-ecb3f.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rosenlikr-77a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wwwlogopdie-s8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexagamers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigerfiegen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitofbrass.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blairandjack.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canberraflorists.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csob-cz.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desgracado.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainseller.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dro.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'droapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsign.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escapehoustonjourneytribute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingrods.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadget.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalescal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashgraphfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heredance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscev-liverpool-2022.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krosexy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehrefreund.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lerne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeinsurance.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorena.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modelldampflok.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitbullsecuriry.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projektierung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redpandaiptv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodnehelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seolytics.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shenside.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacesymbols.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiekerogg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiz.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sy3dprinter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tambem.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theiberianpigl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thujen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspkgsps.homes'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vedioup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualizers.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kinderbrostuhl-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kseplatte-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mhrengemse-ecb3f.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rosenlikr-77a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wwwlogopdie-s8a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3f43f3b60000040300483046022100d24afc7d165b1867eb275468d4bfdf644ac73bfd15ba7f99de2da28fa6c5c22902210087d62b896455d1afc8cd29d85d1444996cafefda2552c344b70b4bd4856cb0cf007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c3f43f3c10000040300473045022007220385776fc79a3bf639d57cfb28654398ce8234c117dacd7943b6c3fe6d1c022100ff91d456fcdb8509dcadf7b4e7c8e5c7c72bde7d6f89439e8f317bb18739baba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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