twa.com.pl

Issued by R3

About this certificate

This digital certificate with serial number 03:b1:8c:34:31:57:a6:9a:f9:3c:b7:db:f3:38:68:31:6d:7d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=twa.com.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:b1:8c:34:31:57:a6:9a:f9:3c:b7:db:f3:38:68:31:6d:7d
Serial Number (int): 321753199659915862587000940004740846153085
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:97:6f:54:13:5e:2a:6c:bb:07:5a:a1:f1:f4:a0:51:a3:96:01:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c5:67:cb:21:87:0b:8c:c0:fa:b5:59:44:4c:2a:c0:e7:65:15:4a:ed
Fingerprint (sha256): e1:32:80:6c:d3:38:36:19:c6:ad:45:62:a5:83:e5:67:be:27:05:bb:c2:f0:8a:ba:0c:11:a0:f4:61:8f:53:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate twa.com.pl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twa.com.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.14option.com
*.atesl.org
*.bettervida.co
*.cwebshop.com
*.dachbedarf.de
*.deenic.de
*.eastmarketnoodlehouse.com
*.edgewood.au
*.ejeans.de
*.elvagondelsur.com
*.essentialpim.de
*.eztc.it
*.falapb.com
*.familyhomeent.com
*.foodprocessor.de
*.gigis.bar
*.gild.au
*.hanmie.tv
*.haushaltsbedarf.de
*.jinrutai.com
*.jlgfitnessclub.com
*.mechanicalengineering.au
*.mitost.de
*.modellflugversicherung.de
*.norte.au
*.nugstv.net
*.parentsevenings.co.uk
*.pumps-kaufen.de
*.rapp.au
*.renmark.com.au
*.renterversicherung.de
*.robertphiliptesttlddomainpurchase2.bio
*.rsandhaus-jung.de
*.santinhos.com.br
*.sexmatxa.net
*.sheitoons.com
*.snowboardinghalloffame.org
*.taxactcomplete.com
*.techubly.com
*.transenporn.de
*.trendyrings.net
*.twa.com.pl
*.xn--billogflge-heb.de
*.xn--brswe-jua.de
*.xn--brutksten-z2a.de
*.xn--druckerztubehr-7pb.de
*.xport1.de
*.xxnx.nl
*.ytt.de
*.yxfxep.com
14option.com
atesl.org
bettervida.co
cwebshop.com
dachbedarf.de
deenic.de
eastmarketnoodlehouse.com
edgewood.au
ejeans.de
elvagondelsur.com
essentialpim.de
eztc.it
falapb.com
familyhomeent.com
foodprocessor.de
gigis.bar
gild.au
hanmie.tv
haushaltsbedarf.de
jinrutai.com
jlgfitnessclub.com
mechanicalengineering.au
mitost.de
modellflugversicherung.de
norte.au
nugstv.net
parentsevenings.co.uk
pumps-kaufen.de
rapp.au
renmark.com.au
renterversicherung.de
robertphiliptesttlddomainpurchase2.bio
rsandhaus-jung.de
santinhos.com.br
sexmatxa.net
sheitoons.com
snowboardinghalloffame.org
taxactcomplete.com
techubly.com
transenporn.de
trendyrings.net
twa.com.pl
xn--billogflge-heb.de
xn--brswe-jua.de
xn--brutksten-z2a.de
xn--druckerztubehr-7pb.de
xport1.de
xxnx.nl
ytt.de
yxfxep.com

Other certificates including the domain name twa.com.pl

(limited to 100 certificates)

Certificate

The complete raw certificate details for twa.com.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321753199659915862587000940004740846153085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 09:58:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 09:58:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twa.com.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678209655011811995543988859986200741343919851464002097091375614310347644802112744359306726061820937766240764277719443404836275453163313758095173024140127831174051612853719510260120944735840876852197433809146058638839321383523520845943201053069234954935702844055078723101164662774392086829689475885270408236253675874261868600999853480784866634399000392803711350617325484627549913135875945013864672392970204793525983709974412641669800012850883888537559619147154358135237079158105278465303814742100830205170082386282791339688039117818762383709543867560007608852273645323039171893063981758623708674834452161704145345075410684320008290956405839730927882828535603594981910947134071428441812710951766618410626257858128021847050833371303793912115365538167603716632518202847720099684869377344530230094900375560772675105829136054840208802730750739374400041114563180464551646412838669260055960249667163301791065652024886530688219773463905034576042165819980601647072097609432093746783841327154297360417949555767414500061546573929807101758735734685784022539026351115347519235942367961234310958704282603806496780791705517320215057827248072707532060329900935491573113772580766806623470626137741490792272703548000527186701240942747988618728012171899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27976f54135e2a6cbb075aa1f1f4a051a39601a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1758 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.14option.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettervida.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwebshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deenic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edgewood.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ejeans.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elvagondelsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falapb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familyhomeent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigis.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gild.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jinrutai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jlgfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mechanicalengineering.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modellflugversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norte.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parentsevenings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsandhaus-jung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheitoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxactcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transenporn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brswe-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brutksten-z2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxnx.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ytt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yxfxep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '14option.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atesl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettervida.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwebshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dachbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deenic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmarketnoodlehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edgewood.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejeans.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvagondelsur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essentialpim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eztc.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falapb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyhomeent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodprocessor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigis.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gild.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmie.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haushaltsbedarf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinrutai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlgfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalengineering.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modellflugversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norte.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nugstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentsevenings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumps-kaufen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renmark.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renterversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertphiliptesttlddomainpurchase2.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsandhaus-jung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santinhos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmatxa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheitoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowboardinghalloffame.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxactcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techubly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transenporn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendyrings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twa.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billogflge-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brswe-jua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brutksten-z2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--druckerztubehr-7pb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xport1.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxnx.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yxfxep.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fddbfcc6c000004030047304502207571a60000bb6bd28a04d275952d0c53bf11e094abf7eb6fa51db46f808de7d9022100a97085b23073c50e9963492a3a6258400ab12df50d1e7a33f70badea9792a828007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fddbfcd250000040300483046022100d5503293980314c1785c701f8410e92e23bbe563eaadb306f243b16d48e60aa7022100fa22054d1c164b14142d4ecb391ed36dbd78fd7d3c96c968aa8a9261e615ae4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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