xn--ttenspender-thb.de

Issued by R3

About this certificate

This digital certificate with serial number 04:76:e6:44:dd:f3:cf:0f:29:c7:af:c2:f8:e1:24:3d:e1:10 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xn--ttenspender-thb.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:76:e6:44:dd:f3:cf:0f:29:c7:af:c2:f8:e1:24:3d:e1:10
Serial Number (int): 388908543040657683920426720588003161268496
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 16:9b:1d:a7:a3:9e:b0:70:eb:3c:aa:ae:66:83:24:30:a8:95:e8:a8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8e:12:f7:66:52:70:59:85:60:07:c7:56:d0:e4:e1:5b:3a:f8:7c:b6
Fingerprint (sha256): e6:e5:ec:24:97:1d:a6:eb:c3:51:0e:7c:40:4f:79:6f:24:72:38:4a:3a:2f:3a:d6:0a:20:bd:73:f7:50:f8:b4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xn--ttenspender-thb.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xn--ttenspender-thb.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.afbfhaefits.info
*.aitours.co.za
*.ambientewaterfeatures.co.uk
*.babykinderzimmer.de
*.ballotrights.org
*.bhuonline.co
*.catholicchurches.com.au
*.deepl.com.br
*.desoxythymidin.de
*.elsterformulr.de
*.g7.com.au
*.gasverbrauchsrechner.de
*.gfluge.de
*.golfaccessories.com.au
*.hasenfreigehege.de
*.ijea.it
*.infantry.com.au
*.izlemac78.xyz
*.laserdruckertest.de
*.mercylink.net
*.metbabes.co
*.minicreft.net
*.mohairpullover.de
*.mundspreizer.de
*.myautogril.it
*.mycarfinance247.co.uk
*.mymonstersworld.com
*.schlabberhosen.de
*.secretescaped.de
*.segelstoff.de
*.sms-online.info
*.teenieschollgirls.net
*.tierheime-krefeld.de
*.trukcs.de
*.versandshopping.de
*.wwwnubiles.net
*.wwwscottsofstow.co.uk
*.xn--benzoesure-w5a.de
*.xn--bogenschtzenverein-t6b.de
*.xn--feinsprhsystem-msb.de
*.xn--holunderbltenlikr-f0b1i.de
*.xn--kreuwortrtsel-jfb.de
*.xn--rolloleinwnde-kfb.de
*.xn--rosenbltensirup-5vb.de
*.xn--schilddrsenszintigraphie-2sc.de
*.xn--schrgbilder-o8a.de
*.xn--sklavenvertrge-hib.de
*.xn--tiketbrse-57a.de
*.xn--ttenspender-thb.de
*.zeichenpapiere.de
afbfhaefits.info
aitours.co.za
ambientewaterfeatures.co.uk
babykinderzimmer.de
ballotrights.org
bhuonline.co
catholicchurches.com.au
deepl.com.br
desoxythymidin.de
elsterformulr.de
g7.com.au
gasverbrauchsrechner.de
gfluge.de
golfaccessories.com.au
hasenfreigehege.de
ijea.it
infantry.com.au
izlemac78.xyz
laserdruckertest.de
mercylink.net
metbabes.co
minicreft.net
mohairpullover.de
mundspreizer.de
myautogril.it
mycarfinance247.co.uk
mymonstersworld.com
schlabberhosen.de
secretescaped.de
segelstoff.de
sms-online.info
teenieschollgirls.net
tierheime-krefeld.de
trukcs.de
versandshopping.de
wwwnubiles.net
wwwscottsofstow.co.uk
xn--benzoesure-w5a.de
xn--bogenschtzenverein-t6b.de
xn--feinsprhsystem-msb.de
xn--holunderbltenlikr-f0b1i.de
xn--kreuwortrtsel-jfb.de
xn--rolloleinwnde-kfb.de
xn--rosenbltensirup-5vb.de
xn--schilddrsenszintigraphie-2sc.de
xn--schrgbilder-o8a.de
xn--sklavenvertrge-hib.de
xn--tiketbrse-57a.de
xn--ttenspender-thb.de
zeichenpapiere.de

Other certificates including the domain name xn--ttenspender-thb.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for xn--ttenspender-thb.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOMzCCDRugAwIBAgISBHbmRN3zzw8px6/C+OEkPeEQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTExMTI4MzZaFw0yNDA2MDkxMTI4MzVaMCExHzAdBgNVBAMT
FnhuLS10dGVuc3BlbmRlci10aGIuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQDAbZbqlyeTbNcwaDKiveAZQyomQNbY5JXg7TgfFGz8aYEOK+y7O6rA
IYnMJJqy5s+bu3eJ7QH5FVF1fRMNSpBiVkmeW49a4LiCJgJq93Hs6wEYdYhhm8D5
Gk3NtmHqCKy5pYImShp+hEWbSNJQTvfUZZRuCdtalR9G/iZOG73W+RFsmGICkz+g
X77ygbT4EIASiqd3Ss198IQHaT0PH213G+OvWQaPJ4bnZkG911v95bAowLZYT6ML
jJXrSCyTm1LPfeRiRelHsoGUXhWmzdsGpllSDH1L1dx9fWX04ncr2K8Pb3/PeDXl
YNyfZJuDW9fk+hMY7y22y0UJTMePM7hE6fM7QmSN/Mdo18KFLE96mI5bMoRvUSGv
+peKd5ZR/vbC3Lo3oZKZ6t7yEMUs4Nx70DBcrLDJuzdhwqWS9qnrZS19S09C5gEs
mbuPYI8YCAQdLj+AuIIiyEQcr2LEHiWci0l87dCoSq44YY0vjsGro3D2epvcSg5J
S/ZCGnTg2jAGbI3MwBVQm+TjQappjaQxD/p1uNe+yaUCsIdaNfmYOkyAzVDokQBK
SDyL11Grpe9rUm7Hk930Vg4nHwHMCyWmw99BPBhICSmkG3MkluXoyDI+mc90/7Yz
P1fg9R+7/y0WoN0qdwAifYRj3fgbKM33D33cRF+iRFpxX3vFo12K8wIDAQABo4IK
UjCCCk4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQWmx2no56wcOs8qq5mgyQwqJXo
qDAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ
MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw
AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCCFkGA1UdEQSCCFAwgghMghIqLmFm
YmZoYWVmaXRzLmluZm+CDyouYWl0b3Vycy5jby56YYIdKi5hbWJpZW50ZXdhdGVy
ZmVhdHVyZXMuY28udWuCFSouYmFieWtpbmRlcnppbW1lci5kZYISKi5iYWxsb3Ry
aWdodHMub3Jngg4qLmJodW9ubGluZS5jb4IZKi5jYXRob2xpY2NodXJjaGVzLmNv
bS5hdYIOKi5kZWVwbC5jb20uYnKCEyouZGVzb3h5dGh5bWlkaW4uZGWCEiouZWxz
dGVyZm9ybXVsci5kZYILKi5nNy5jb20uYXWCGSouZ2FzdmVyYnJhdWNoc3JlY2hu
ZXIuZGWCCyouZ2ZsdWdlLmRlghgqLmdvbGZhY2Nlc3Nvcmllcy5jb20uYXWCFCou
aGFzZW5mcmVpZ2VoZWdlLmRlggkqLmlqZWEuaXSCESouaW5mYW50cnkuY29tLmF1
gg8qLml6bGVtYWM3OC54eXqCFSoubGFzZXJkcnVja2VydGVzdC5kZYIPKi5tZXJj
eWxpbmsubmV0gg0qLm1ldGJhYmVzLmNvgg8qLm1pbmljcmVmdC5uZXSCEyoubW9o
YWlycHVsbG92ZXIuZGWCESoubXVuZHNwcmVpemVyLmRlgg8qLm15YXV0b2dyaWwu
aXSCFyoubXljYXJmaW5hbmNlMjQ3LmNvLnVrghUqLm15bW9uc3RlcnN3b3JsZC5j
b22CEyouc2NobGFiYmVyaG9zZW4uZGWCEiouc2VjcmV0ZXNjYXBlZC5kZYIPKi5z
ZWdlbHN0b2ZmLmRlghEqLnNtcy1vbmxpbmUuaW5mb4IXKi50ZWVuaWVzY2hvbGxn
aXJscy5uZXSCFioudGllcmhlaW1lLWtyZWZlbGQuZGWCCyoudHJ1a2NzLmRlghQq
LnZlcnNhbmRzaG9wcGluZy5kZYIQKi53d3dudWJpbGVzLm5ldIIXKi53d3dzY290
dHNvZnN0b3cuY28udWuCFyoueG4tLWJlbnpvZXN1cmUtdzVhLmRlgh8qLnhuLS1i
b2dlbnNjaHR6ZW52ZXJlaW4tdDZiLmRlghsqLnhuLS1mZWluc3ByaHN5c3RlbS1t
c2IuZGWCICoueG4tLWhvbHVuZGVyYmx0ZW5saWtyLWYwYjFpLmRlghoqLnhuLS1r
cmV1d29ydHJ0c2VsLWpmYi5kZYIaKi54bi0tcm9sbG9sZWlud25kZS1rZmIuZGWC
HCoueG4tLXJvc2VuYmx0ZW5zaXJ1cC01dmIuZGWCJSoueG4tLXNjaGlsZGRyc2Vu
c3ppbnRpZ3JhcGhpZS0yc2MuZGWCGCoueG4tLXNjaHJnYmlsZGVyLW84YS5kZYIb
Ki54bi0tc2tsYXZlbnZlcnRyZ2UtaGliLmRlghYqLnhuLS10aWtldGJyc2UtNTdh
LmRlghgqLnhuLS10dGVuc3BlbmRlci10aGIuZGWCEyouemVpY2hlbnBhcGllcmUu
ZGWCEGFmYmZoYWVmaXRzLmluZm+CDWFpdG91cnMuY28uemGCG2FtYmllbnRld2F0
ZXJmZWF0dXJlcy5jby51a4ITYmFieWtpbmRlcnppbW1lci5kZYIQYmFsbG90cmln
aHRzLm9yZ4IMYmh1b25saW5lLmNvghdjYXRob2xpY2NodXJjaGVzLmNvbS5hdYIM
ZGVlcGwuY29tLmJyghFkZXNveHl0aHltaWRpbi5kZYIQZWxzdGVyZm9ybXVsci5k
ZYIJZzcuY29tLmF1ghdnYXN2ZXJicmF1Y2hzcmVjaG5lci5kZYIJZ2ZsdWdlLmRl
ghZnb2xmYWNjZXNzb3JpZXMuY29tLmF1ghJoYXNlbmZyZWlnZWhlZ2UuZGWCB2lq
ZWEuaXSCD2luZmFudHJ5LmNvbS5hdYINaXpsZW1hYzc4Lnh5eoITbGFzZXJkcnVj
a2VydGVzdC5kZYINbWVyY3lsaW5rLm5ldIILbWV0YmFiZXMuY2+CDW1pbmljcmVm
dC5uZXSCEW1vaGFpcnB1bGxvdmVyLmRlgg9tdW5kc3ByZWl6ZXIuZGWCDW15YXV0
b2dyaWwuaXSCFW15Y2FyZmluYW5jZTI0Ny5jby51a4ITbXltb25zdGVyc3dvcmxk
LmNvbYIRc2NobGFiYmVyaG9zZW4uZGWCEHNlY3JldGVzY2FwZWQuZGWCDXNlZ2Vs
c3RvZmYuZGWCD3Ntcy1vbmxpbmUuaW5mb4IVdGVlbmllc2Nob2xsZ2lybHMubmV0
ghR0aWVyaGVpbWUta3JlZmVsZC5kZYIJdHJ1a2NzLmRlghJ2ZXJzYW5kc2hvcHBp
bmcuZGWCDnd3d251YmlsZXMubmV0ghV3d3dzY290dHNvZnN0b3cuY28udWuCFXhu
LS1iZW56b2VzdXJlLXc1YS5kZYIdeG4tLWJvZ2Vuc2NodHplbnZlcmVpbi10NmIu
ZGWCGXhuLS1mZWluc3ByaHN5c3RlbS1tc2IuZGWCHnhuLS1ob2x1bmRlcmJsdGVu
bGlrci1mMGIxaS5kZYIYeG4tLWtyZXV3b3J0cnRzZWwtamZiLmRlghh4bi0tcm9s
bG9sZWlud25kZS1rZmIuZGWCGnhuLS1yb3NlbmJsdGVuc2lydXAtNXZiLmRlgiN4
bi0tc2NoaWxkZHJzZW5zemludGlncmFwaGllLTJzYy5kZYIWeG4tLXNjaHJnYmls
ZGVyLW84YS5kZYIZeG4tLXNrbGF2ZW52ZXJ0cmdlLWhpYi5kZYIUeG4tLXRpa2V0
YnJzZS01N2EuZGWCFnhuLS10dGVuc3BlbmRlci10aGIuZGWCEXplaWNoZW5wYXBp
ZXJlLmRlMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGOLXx7mQAA
BAMARzBFAiA88UDl2j5g4TrIfh2jd/KCorSy1D9SFAfbi8lzmyCyLAIhAOOYFH2t
O/FcCKCZnoJ6d7CQyZNVF62nNV8AZeJY15PCAHYA7s3QZNXbGs7FXLedtM0TojKH
Rny87N7DUUhZRnEftZsAAAGOLXx7ogAABAMARzBFAiEAjcpzWOx9ouIpFdpb/sOP
BrhzmBDJ4FmwHSGaiidJ5MMCIDBBRl8jVYP8GTqbNr61GphZYQ3XvzLwU8Mdx1kK
9CjDMA0GCSqGSIb3DQEBCwUAA4IBAQCnMto1UV2befAY6cehML9R4ZPwq2ZpIjgf
z4bjxqgAlPAp83zYgxHTTZxbbwAbbrbaE3iboMYWFsrB/kP2HXthQl0Gj/hdSLD7
EQOkXVbyAsgp6Fzo40jHKOBs0S49aJWM4rzLvLxXLQMpeu0A4a5ogwmfkktiVcdw
y7plCBes/+Xe6XyabkQ+WBcUtgv+ctMlSXq0A8XsBnykjoa1H20WCi9Jh+7qVTj9
/FGIUVER8nIFwYcTLTpCsHFJIBUKQT+WBjYOPZgHTnagR4/mbSLlytZg0YIyaPZ3
NQg0xKj2giSVpKQgSolY/lHgXrdg6jA20O3ZuyCpd7HAqX4t28iz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388908543040657683920426720588003161268496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 11:28:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 11:28:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xn--ttenspender-thb.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 785038091619302410042917930671378856534825281355104349440837231396805275510537125657827935959087086590007971711259029812343901660139958791720502719105868805127031148136420757032661754876010843034670469133793764356634730527500971582481474858899838638635947696720987931451432369291933063994009627563630502930172132930719037908105921830463642688992578971086174701355854967787267792810214770195268726557754174960206003553314700894903233097065918133503105144554449687411129170897696667997878203538527683323734400348989496598927589530554837840299873916253342053019551150317825322629992427709115051431450147423597125056903693780365709613692021906044245077182736020824272345730402963133164211624195738390806311866064866541474332771098333837911682209655292687347541108158468252132932767697694912159669252781669784384440652378558335785504519220097708613117171638962087706529733550814376094012026166562285523959968319018477723948332449322721894131493750985827993444334899315877625779706362015844169833078199161506430089365686284117190619603124508592996504301435160258227447233582097865927934504418257649262685396984124754651438387550661081839649019779342178891838975732366722566689500381862902076856711235291771587796449883013915777804869143283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							169b1da7a39eb070eb3caaae66832430a895e8a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afbfhaefits.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aitours.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambientewaterfeatures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babykinderzimmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballotrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhuonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catholicchurches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desoxythymidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsterformulr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g7.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gasverbrauchsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfluge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasenfreigehege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infantry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izlemac78.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laserdruckertest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercylink.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metbabes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minicreft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mohairpullover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundspreizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myautogril.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycarfinance247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymonstersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlabberhosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secretescaped.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segelstoff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sms-online.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenieschollgirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tierheime-krefeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trukcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.versandshopping.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwnubiles.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwscottsofstow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--benzoesure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bogenschtzenverein-t6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--feinsprhsystem-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--holunderbltenlikr-f0b1i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kreuwortrtsel-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rolloleinwnde-kfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rosenbltensirup-5vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schilddrsenszintigraphie-2sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schrgbilder-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sklavenvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tiketbrse-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ttenspender-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zeichenpapiere.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afbfhaefits.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitours.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambientewaterfeatures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babykinderzimmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballotrights.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhuonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicchurches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desoxythymidin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsterformulr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g7.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasverbrauchsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfluge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfaccessories.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasenfreigehege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijea.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infantry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izlemac78.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserdruckertest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercylink.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metbabes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minicreft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohairpullover.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundspreizer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myautogril.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycarfinance247.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymonstersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlabberhosen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secretescaped.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segelstoff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-online.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenieschollgirls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tierheime-krefeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trukcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'versandshopping.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwnubiles.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwscottsofstow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--benzoesure-w5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bogenschtzenverein-t6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--feinsprhsystem-msb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--holunderbltenlikr-f0b1i.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kreuwortrtsel-jfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rolloleinwnde-kfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rosenbltensirup-5vb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schilddrsenszintigraphie-2sc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schrgbilder-o8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sklavenvertrge-hib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tiketbrse-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ttenspender-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeichenpapiere.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e2d7c7b99000004030047304502203cf140e5da3e60e13ac87e1da377f282a2b4b2d43f521407db8bc9739b20b22c022100e398147dad3bf15c08a0999e827a77b090c9935517ada7355f0065e258d793c2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e2d7c7ba200000403004730450221008dca7358ec7da2e22915da5bfec38f06b8739810c9e059b01d219a8a2749e4c302203041465f235583fc193a9b36beb51a9859610dd7bf32f053c31dc7590af428c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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