rivate-krankenversicherung.de

Issued by R11

About this certificate

This digital certificate with serial number 04:96:fb:03:d8:b7:c4:c2:f8:0b:3b:d1:3b:b6:71:20:ae:33 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rivate-krankenversicherung.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:96:fb:03:d8:b7:c4:c2:f8:0b:3b:d1:3b:b6:71:20:ae:33
Serial Number (int): 399825154964574468488342816740725961567795
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 43:fb:a5:e9:fd:61:5f:a9:6b:44:59:1b:d9:b9:e6:37:dd:fa:df:dd
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 34:e4:bb:98:b3:ea:c8:37:73:30:0d:63:e8:22:d2:71:43:ee:31:fc
Fingerprint (sha256): e1:88:e5:7d:e9:9d:72:2d:ce:54:86:82:68:90:51:91:5b:64:b1:7e:68:b1:4c:27:0f:e0:ea:a5:c8:89:61:06

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate rivate-krankenversicherung.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rivate-krankenversicherung.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abaya.it
*.afrolumens.org
*.bubbles.es
*.businessoutfit.de
*.chiefmulani.com
*.cssn.me
*.ctjgds.com
*.dentistoffice.de
*.divyanegi.com
*.dmdrummer.com
*.don.co.za
*.entenkeulen.de
*.envacom-strom.de
*.farukhocafizyo.com
*.floridainsurance.net
*.gaigoi9x.net
*.geschenktips.de
*.glg.eu
*.hallopzza.de
*.hledal.cz
*.hrf.eu
*.jyisk.nl
*.lateinlexikon.de
*.lha.de
*.lho.de
*.lidlo.de
*.mangaarabteam.com
*.mif.de
*.paulgfarmer.com
*.philipienen.de
*.preishamer.de
*.proeftuin.com
*.psicoterapeutas.org
*.repleycard.it
*.rivate-krankenversicherung.de
*.rockstarfinder.com
*.sabbaiminneapolis.com
*.satanderfinanciamentos.com.br
*.shortdomainsearch.net
*.shutter-derfilm.de
*.sitruzione.it
*.snoopy.com.au
*.stevelawler.com
*.strem2watch.cc
*.tenedor.es
*.textzusammenfassung.de
*.tokjo.de
*.wgv.eu
*.wisssports.net
*.xn--schnheitchirurgie-1zb.de
abaya.it
afrolumens.org
bubbles.es
businessoutfit.de
chiefmulani.com
cssn.me
ctjgds.com
dentistoffice.de
divyanegi.com
dmdrummer.com
don.co.za
entenkeulen.de
envacom-strom.de
farukhocafizyo.com
floridainsurance.net
gaigoi9x.net
geschenktips.de
glg.eu
hallopzza.de
hledal.cz
hrf.eu
jyisk.nl
lateinlexikon.de
lha.de
lho.de
lidlo.de
mangaarabteam.com
mif.de
paulgfarmer.com
philipienen.de
preishamer.de
proeftuin.com
psicoterapeutas.org
repleycard.it
rivate-krankenversicherung.de
rockstarfinder.com
sabbaiminneapolis.com
satanderfinanciamentos.com.br
shortdomainsearch.net
shutter-derfilm.de
sitruzione.it
snoopy.com.au
stevelawler.com
strem2watch.cc
tenedor.es
textzusammenfassung.de
tokjo.de
wgv.eu
wisssports.net
xn--schnheitchirurgie-1zb.de

Other certificates including the domain name rivate-krankenversicherung.de

(limited to 100 certificates)
rivate-krankenversicherung.de
prepaidmobilephone.com.au
rivate-krankenversicherung.de
byronbayrentals.com.au
rivate-krankenversicherung.de
xn--elektrowrme-s8a.de
cbb.us
rivate-krankenversicherung.de
rivate-krankenversicherung.de
seavefrom.net
hearingaidbatteriesdirect.co.uk
rivate-krankenversicherung.de
rivate-krankenversicherung.de
rivate-krankenversicherung.de

Certificate

The complete raw certificate details for rivate-krankenversicherung.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMhzCCC2+gAwIBAgISBJb7A9i3xML4CzvRO7ZxIK4zMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjA4MjEyNjI0WhcNMjQwOTA2MjEyNjIzWjAoMSYwJAYDVQQD
Ex1yaXZhdGUta3JhbmtlbnZlcnNpY2hlcnVuZy5kZTCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBANkNgUiGoLDGcTbuL66bzNWPa43WTX0h2DdqpWM6M54u
Ox4i0oD8ND3WQzdli7Djbr1fClEOl58YCGla2WdCBb9UxbAx03qrYuHhG2xvSzsq
LhHyJK2grt3vtU2UwJERwJgT345xwRyJYmZW0z4xT92OD36ubB+Kx05ddhZ0/T2a
PvzcYurK0kXwuxxeY85I628Q1pQB2s69JTHSZTYD+eNA64UsPiH3vIbpmi/8GMIa
uPIAcG25pI6QF2VCA/DXc0J+iQIhRHFMBZ+KYP+sHx9gDz1aATkscjTY5I77ot7r
rqylF5Ex7e6Wv6HjcFzZ/igrCmxYXhJPXi7k8tNMBmHwRltWFN1ogq1JtKvlpuut
b9u5IxXVAhg9cXlWiP9DPq10X/e+d7j+1qVWZqcAKMW/TUp/ka8yKM7C3z2ignQV
h6QKLnJ7/htnG1U+tWZXgTjFwKMhu0QCZDTDcsE4/JlEjrW5Ass70rSkZ3WFK8G/
U9a1VjnA1jCGknwAVbIUOp+b5VNGDVUB8Sbv4AU8zJWLs3WLwuDpgGRCSw9E02Ze
P39hG4nY8Yc7qzRES7WYaXdWGl2mOmZWGNZK6llgfBjZwForSGyex95atrqMtuyy
kOoFiii8qzgKa1kVFAMgHQ6J5t0hzZpJkdc2A2LBOCyDfcOPvi+USy35SkL/qIOb
AgMBAAGjggieMIIImjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEP7pen9YV+pa0RZ
G9m55jfd+t/dMB8GA1UdIwQYMBaAFMXPRqTq9MPAemyVxC2wXpIvJuO5MFcGCCsG
AQUFBwEBBEswSTAiBggrBgEFBQcwAYYWaHR0cDovL3IxMS5vLmxlbmNyLm9yZzAj
BggrBgEFBQcwAoYXaHR0cDovL3IxMS5pLmxlbmNyLm9yZy8wggajBgNVHREEggaa
MIIGloIKKi5hYmF5YS5pdIIQKi5hZnJvbHVtZW5zLm9yZ4IMKi5idWJibGVzLmVz
ghMqLmJ1c2luZXNzb3V0Zml0LmRlghEqLmNoaWVmbXVsYW5pLmNvbYIJKi5jc3Nu
Lm1lggwqLmN0amdkcy5jb22CEiouZGVudGlzdG9mZmljZS5kZYIPKi5kaXZ5YW5l
Z2kuY29tgg8qLmRtZHJ1bW1lci5jb22CCyouZG9uLmNvLnphghAqLmVudGVua2V1
bGVuLmRlghIqLmVudmFjb20tc3Ryb20uZGWCFCouZmFydWtob2NhZml6eW8uY29t
ghYqLmZsb3JpZGFpbnN1cmFuY2UubmV0gg4qLmdhaWdvaTl4Lm5ldIIRKi5nZXNj
aGVua3RpcHMuZGWCCCouZ2xnLmV1gg4qLmhhbGxvcHp6YS5kZYILKi5obGVkYWwu
Y3qCCCouaHJmLmV1ggoqLmp5aXNrLm5sghIqLmxhdGVpbmxleGlrb24uZGWCCCou
bGhhLmRlgggqLmxoby5kZYIKKi5saWRsby5kZYITKi5tYW5nYWFyYWJ0ZWFtLmNv
bYIIKi5taWYuZGWCESoucGF1bGdmYXJtZXIuY29tghAqLnBoaWxpcGllbmVuLmRl
gg8qLnByZWlzaGFtZXIuZGWCDyoucHJvZWZ0dWluLmNvbYIVKi5wc2ljb3RlcmFw
ZXV0YXMub3Jngg8qLnJlcGxleWNhcmQuaXSCHyoucml2YXRlLWtyYW5rZW52ZXJz
aWNoZXJ1bmcuZGWCFCoucm9ja3N0YXJmaW5kZXIuY29tghcqLnNhYmJhaW1pbm5l
YXBvbGlzLmNvbYIfKi5zYXRhbmRlcmZpbmFuY2lhbWVudG9zLmNvbS5icoIXKi5z
aG9ydGRvbWFpbnNlYXJjaC5uZXSCFCouc2h1dHRlci1kZXJmaWxtLmRlgg8qLnNp
dHJ1emlvbmUuaXSCDyouc25vb3B5LmNvbS5hdYIRKi5zdGV2ZWxhd2xlci5jb22C
ECouc3RyZW0yd2F0Y2guY2OCDCoudGVuZWRvci5lc4IYKi50ZXh0enVzYW1tZW5m
YXNzdW5nLmRlggoqLnRva2pvLmRlgggqLndndi5ldYIQKi53aXNzc3BvcnRzLm5l
dIIeKi54bi0tc2NobmhlaXRjaGlydXJnaWUtMXpiLmRlgghhYmF5YS5pdIIOYWZy
b2x1bWVucy5vcmeCCmJ1YmJsZXMuZXOCEWJ1c2luZXNzb3V0Zml0LmRlgg9jaGll
Zm11bGFuaS5jb22CB2Nzc24ubWWCCmN0amdkcy5jb22CEGRlbnRpc3RvZmZpY2Uu
ZGWCDWRpdnlhbmVnaS5jb22CDWRtZHJ1bW1lci5jb22CCWRvbi5jby56YYIOZW50
ZW5rZXVsZW4uZGWCEGVudmFjb20tc3Ryb20uZGWCEmZhcnVraG9jYWZpenlvLmNv
bYIUZmxvcmlkYWluc3VyYW5jZS5uZXSCDGdhaWdvaTl4Lm5ldIIPZ2VzY2hlbmt0
aXBzLmRlggZnbGcuZXWCDGhhbGxvcHp6YS5kZYIJaGxlZGFsLmN6ggZocmYuZXWC
CGp5aXNrLm5sghBsYXRlaW5sZXhpa29uLmRlggZsaGEuZGWCBmxoby5kZYIIbGlk
bG8uZGWCEW1hbmdhYXJhYnRlYW0uY29tggZtaWYuZGWCD3BhdWxnZmFybWVyLmNv
bYIOcGhpbGlwaWVuZW4uZGWCDXByZWlzaGFtZXIuZGWCDXByb2VmdHVpbi5jb22C
E3BzaWNvdGVyYXBldXRhcy5vcmeCDXJlcGxleWNhcmQuaXSCHXJpdmF0ZS1rcmFu
a2VudmVyc2ljaGVydW5nLmRlghJyb2Nrc3RhcmZpbmRlci5jb22CFXNhYmJhaW1p
bm5lYXBvbGlzLmNvbYIdc2F0YW5kZXJmaW5hbmNpYW1lbnRvcy5jb20uYnKCFXNo
b3J0ZG9tYWluc2VhcmNoLm5ldIISc2h1dHRlci1kZXJmaWxtLmRlgg1zaXRydXpp
b25lLml0gg1zbm9vcHkuY29tLmF1gg9zdGV2ZWxhd2xlci5jb22CDnN0cmVtMndh
dGNoLmNjggp0ZW5lZG9yLmVzghZ0ZXh0enVzYW1tZW5mYXNzdW5nLmRlggh0b2tq
by5kZYIGd2d2LmV1gg53aXNzc3BvcnRzLm5ldIIceG4tLXNjaG5oZWl0Y2hpcnVy
Z2llLTF6Yi5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABj/n1
xfcAAAQDAEYwRAIgfd8vsi3/i741GGZAofY6/QXS1uikW8/U6nysoPpxbyQCIAHH
qxGqtSs6uWh5C8AtFNTFNq/ASMaOyje2EDoEhIBwAHcAGZgQcQnw1lIuMIDSnj9k
u4NuKMz5D1KO7t/OSj8WtMoAAAGP+fXGTQAABAMASDBGAiEAht/Pgg3qBSUn2IbW
hrtP2sUJVumHlPLLFp5l7XW1SxYCIQDSJMd1qQpa1sg7MIjfawdCyWGK6Nbb8yOE
mFtR002J9TANBgkqhkiG9w0BAQsFAAOCAQEARS0NpchsYaFtl7HLopwt9Y1hmMoF
QksELA37GECFuqBMqcQllxOj3hEkykx3hXc2qe5UezOjPAV1VCQmKIN37+lFlE3U
RWhBoH/LzWMtq32sztneWf9aORNMHXx1oInYPFeTz1HPLWpii7ToI8/bEDK19zJT
93H8aJdapOYiF8FjVXeSzBIaI2XeeMfufj2j8BdaMuMmQTs14hhWMZE0kxI6+Pob
1JclwvI6KgUwseXmdD+BLCPon9S0yb3gYzNZ1kfh8Fn8/lTD0RLkIuN944gvA5um
vvA/Q3uMVCKKnDUYcf48nvO8Iov/fOPRf9zxlv5wz6o0AO6hyFVo3qIhDw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Q2BSIagsMZxNu4vrpvM
1Y9rjdZNfSHYN2qlYzozni47HiLSgPw0PdZDN2WLsONuvV8KUQ6XnxgIaVrZZ0IF
v1TFsDHTeqti4eEbbG9LOyouEfIkraCu3e+1TZTAkRHAmBPfjnHBHIliZlbTPjFP
3Y4Pfq5sH4rHTl12FnT9PZo+/Nxi6srSRfC7HF5jzkjrbxDWlAHazr0lMdJlNgP5
40DrhSw+Ife8humaL/wYwhq48gBwbbmkjpAXZUID8NdzQn6JAiFEcUwFn4pg/6wf
H2APPVoBOSxyNNjkjvui3uuurKUXkTHt7pa/oeNwXNn+KCsKbFheEk9eLuTy00wG
YfBGW1YU3WiCrUm0q+Wm661v27kjFdUCGD1xeVaI/0M+rXRf9753uP7WpVZmpwAo
xb9NSn+RrzIozsLfPaKCdBWHpAoucnv+G2cbVT61ZleBOMXAoyG7RAJkNMNywTj8
mUSOtbkCyzvStKRndYUrwb9T1rVWOcDWMIaSfABVshQ6n5vlU0YNVQHxJu/gBTzM
lYuzdYvC4OmAZEJLD0TTZl4/f2EbidjxhzurNERLtZhpd1YaXaY6ZlYY1krqWWB8
GNnAWitIbJ7H3lq2uoy27LKQ6gWKKLyrOAprWRUUAyAdDonm3SHNmkmR1zYDYsE4
LIN9w4++L5RLLflKQv+og5sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399825154964574468488342816740725961567795
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 21:26:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 21:26:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rivate-krankenversicherung.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885497980126756585416377830304645092994102263310540190503077434570422168273103274041958663204720522680309009858748886107105385744096084103128174536344880120629615571796105659193665681389274604199773373798465432054865316836069736130595119536262124942077004343232363991486658020943146778370039894922893972785099771571818120649002111629382812499854710856311145783628605056836663103441075208287350324861576093653864869596021663443416524117160393410636868003195225427134734210740320331577476889357911912451626326576700899405677287387965196797531575106681545169960631273346926851360613516445143171422211342191737371398037156676141601986508693507603480681157999109885924230145114764187670440736306411237711917660823777887271027463803470345360179665873990937405552859721040252902058554194507243192714965200411579918686540846765659087962134330936894296038143190734458588000162179950147208183835018879245642610156857618553775819933274156212557562821295407584948623887692395561744275325327069802211431044184327211337441908645892246590463271330349338692896534806381619085858587766982174906658973860873996963103479598900142700639452289062688428165809414419916572951200024640761233891939247702792054663562787485125515587398513138769745957014242203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43fba5e9fd615fa96b44591bd9b9e637ddfadfdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abaya.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afrolumens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bubbles.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessoutfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiefmulani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cssn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctjgds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentistoffice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divyanegi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmdrummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.don.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entenkeulen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envacom-strom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farukhocafizyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floridainsurance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaigoi9x.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geschenktips.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hallopzza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hledal.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jyisk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lateinlexikon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lha.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lidlo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangaarabteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulgfarmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philipienen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preishamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proeftuin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psicoterapeutas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repleycard.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivate-krankenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockstarfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabbaiminneapolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satanderfinanciamentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortdomainsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shutter-derfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitruzione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snoopy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevelawler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strem2watch.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenedor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.textzusammenfassung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tokjo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wgv.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wisssports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schnheitchirurgie-1zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abaya.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afrolumens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubbles.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessoutfit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiefmulani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cssn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctjgds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistoffice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divyanegi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmdrummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'don.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entenkeulen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envacom-strom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farukhocafizyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridainsurance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaigoi9x.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geschenktips.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hallopzza.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hledal.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrf.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jyisk.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lateinlexikon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lha.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidlo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangaarabteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulgfarmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philipienen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preishamer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proeftuin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psicoterapeutas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repleycard.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivate-krankenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockstarfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabbaiminneapolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satanderfinanciamentos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortdomainsearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shutter-derfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitruzione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snoopy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevelawler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strem2watch.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenedor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textzusammenfassung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokjo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgv.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wisssports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schnheitchirurgie-1zb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff9f5c5f7000004030046304402207ddf2fb22dff8bbe35186640a1f63afd05d2d6e8a45bcfd4ea7caca0fa716f24022001c7ab11aab52b3ab968790bc02d14d4c536afc048c68eca37b6103a048480700077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff9f5c64d000004030048304602210086dfcf820dea052527d886d686bb4fdac50956e98794f2cb169e65ed75b54b16022100d224c775a90a5ad6c83b3088df6b0742c9618ae8d6dbf32384985b51d34d89f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00452d0da5c86c61a16d97b1cba29c2df58d6198ca05424b042c0dfb184085baa04ca9c4259713a3de1124ca4c77857736a9ee547b33a33c0575542426288377efe945944dd4456841a07fcbcd632dab7dacced9de59ff5a39134c1d7c75a089d83c5793cf51cf2d6a628bb4e823cfdb1032b5f73253f771fc68975aa4e62217c163557792cc121a2365de78c7ee7e3da3f0175a32e326413b35e2185631913493123af8fa1bd49725c2f23a2a0530b1e5e6743f812c23e89fd4b4c9bde0633359d647e1f059fcfe54c3d112e422e37de3882f039ba6bef03f437b8c54228a9c351871fe3c9ef3bc228bff7ce3d17fdcf196fe70cfaa3400eea1c85568dea2210f