bia2movies1.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:88:18:aa:dc:50:ba:99:ca:4e:5e:07:37:54:83:a6:14 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bia2movies1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c7:88:18:aa:dc:50:ba:99:ca:4e:5e:07:37:54:83:a6:14
Serial Number (int): 416346237832323906971449390790161455097364
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4f:6c:5c:d7:80:28:a0:2a:34:1b:a6:f5:40:f1:67:e9:81:79:8f:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:5d:d7:7a:a3:9d:19:51:cb:37:4a:f8:4b:d4:19:c0:5e:db:74:3f
Fingerprint (sha256): e8:42:01:93:8c:93:21:ca:9f:cc:7f:f1:59:5e:a1:03:08:8f:7b:89:46:2b:32:b5:1f:34:e2:7e:55:9b:c0:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bia2movies1.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bia2movies1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aeer.cn
*.airline-driekt.de
*.asa-treksafari.com
*.bandscheibenvorfallg.de
*.bawagpsk-line.com
*.bia2movies1.com
*.blutungen-ausserhalb-der-regel.de
*.campingfurniture.com.au
*.carrefour.de
*.cpod-d0je.net
*.duncanpublicschools.org
*.electivist.com
*.endokrinologye.de
*.executivespecialties.net
*.feimiu.com
*.firesticktricktricks.com
*.ftl.me
*.hand-und-fusskrankheit.de
*.hostessrange.co.uk
*.jalur.me
*.kccsustainability.com
*.kenxiong.com
*.loloapps.net
*.luexian.com
*.megacomputing.com
*.miegraene.de
*.mmlian.com
*.mund-fuss-hand-krankheit.de
*.olive-garden.co.uk
*.phusspilz.de
*.roof-revive.co.uk
*.scribd.es
*.speedwayatoz.co.uk
*.stocktoncycling.co.uk
*.suffolkcoastalnews.co.uk
*.thugzapper.com
*.unolov.com
*.watch-efl-ifollow.com
*.wearcore.com
*.wusspilz.de
*.xlfy.site
*.xn--blasenenthzndung-tzb.de
*.xn--blasenentzndun-psb.de
*.xn--brustvegrsserung-uwb.de
*.xn--brustvergrrsserung-n3b.de
*.xn--brustvergrsserumg-8zb.de
*.xn--brustvergrsssserung-z6b.de
*.xn--bruszvergrsserung-8zb.de
*.xn--prustvergrsserung-8zb.de
*.yunsdk.com
aeer.cn
airline-driekt.de
asa-treksafari.com
bandscheibenvorfallg.de
bawagpsk-line.com
bia2movies1.com
blutungen-ausserhalb-der-regel.de
campingfurniture.com.au
carrefour.de
cpod-d0je.net
duncanpublicschools.org
electivist.com
endokrinologye.de
executivespecialties.net
feimiu.com
firesticktricktricks.com
ftl.me
hand-und-fusskrankheit.de
hostessrange.co.uk
jalur.me
kccsustainability.com
kenxiong.com
loloapps.net
luexian.com
megacomputing.com
miegraene.de
mmlian.com
mund-fuss-hand-krankheit.de
olive-garden.co.uk
phusspilz.de
roof-revive.co.uk
scribd.es
speedwayatoz.co.uk
stocktoncycling.co.uk
suffolkcoastalnews.co.uk
thugzapper.com
unolov.com
watch-efl-ifollow.com
wearcore.com
wusspilz.de
xlfy.site
xn--blasenenthzndung-tzb.de
xn--blasenentzndun-psb.de
xn--brustvegrsserung-uwb.de
xn--brustvergrrsserung-n3b.de
xn--brustvergrsserumg-8zb.de
xn--brustvergrsssserung-z6b.de
xn--bruszvergrsserung-8zb.de
xn--prustvergrsserung-8zb.de
yunsdk.com

Other certificates including the domain name bia2movies1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bia2movies1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA80CNARQDCPdjVbGoRk9j
cfg+xVQdSIh4/zwkKiX8xRsN57Aa870K4kS+ZCF33S7s7sLXEIf0wCQR1r/INt4O
oXrAFGTp4EHbTMEw2wuBCIA01tCua2qkVgXzFpWJy2YHnHNKjC6ubDagyTsbKOiy
mjNdskzUtOV18nKfpDwgW3662i/qk2qOrooWondv7KhPTK8DQeP6IEYY5EOtywQ7
KSuxe5QzI5f6Ac5DWwmniDorZILU1ZBiyv0/zEDg5pxFmnmyW//908RGRw2AxIWa
breS0PrmvNV8n8fBSplqBjGnB/q/oDap0taXhbpQPJEeFhuyT6sBWOM56Q6o28IT
jHsSseeWo8LAJ/D1p3VYJ+URtckYNunNCSBP6LCEriUxWwnBqj07xHk/7ltPO6K/
3M2R58HYMwhh0zdqqlfeXimx3aLuhTxRGJs+QLge78xhvD6uYEzbHt7Xd0LpqIkD
u/TNV6w1J3BcMUZ5NIHMwCk1OzsStEW7hvjo5b/jKqlvD+rIdw//2MaSsn1/jpLQ
qn7nnoCY3EJgb67nfon0lPD5P3GXJImu8ruFtsTt1CezDlbSGZGqgvJRVszI0VSR
VB1EFfFPzQPJiNcDfH7yyONy4gasAP+EgaoMWs6BKAcOHT01418o1SVE7bI6gabS
p1gs0Kos3Egzt/jSSHZT2M8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416346237832323906971449390790161455097364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 04:23:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 04:23:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bia2movies1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 992382197118458251267156072642503991666632615871156804880782920071776614379899335411361482958682566985824272781555744339305149249341766686669505877255706420050211361011739315261682334294127644004929218520093537991193849446137568873178053929487211648519113560337266639428890606412931035860334616444848960563814978290509014124415244263214093604296073123140797230159487457456179553334073828226139246613464569899886986588885491799938984283825965471354327722978084223495561954882776762523118658407611969947805270397641738487044854767578487926100114944869042484565439834010015462468808148350807958863828773341661659311756507576386111484024260308421343060392465550413970721664292062998981933086038687734078576222123622488787785486076899343589486455918860102738737567538320733799064072099079170550746210743669135038774335386675212280687683129019734643320880760217222978863091933931098461024711482552836822579243215223005267852301808375671391018468134459804066934487531161103417681207818160277499976521287303778703841092662932974632888670401065289976136320696163530019916541679741775969468136520580789213085941374713455088542117058788033747408608630059785700552799108231113039914405597678247461950809449753376566488900042258777350415020447951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f6c5cd78028a02a341ba6f540f167e981798fec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2098 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airline-driekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asa-treksafari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandscheibenvorfallg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bawagpsk-line.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bia2movies1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blutungen-ausserhalb-der-regel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campingfurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpod-d0je.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duncanpublicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electivist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endokrinologye.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.executivespecialties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feimiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firesticktricktricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ftl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hand-und-fusskrankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostessrange.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jalur.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kccsustainability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenxiong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loloapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megacomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miegraene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmlian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mund-fuss-hand-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olive-garden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roof-revive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scribd.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedwayatoz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocktoncycling.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suffolkcoastalnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thugzapper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unolov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watch-efl-ifollow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xlfy.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blasenenthzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blasenentzndun-psb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvegrsserung-uwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvergrrsserung-n3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvergrsserumg-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--brustvergrsssserung-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bruszvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--prustvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yunsdk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airline-driekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asa-treksafari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandscheibenvorfallg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bawagpsk-line.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bia2movies1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blutungen-ausserhalb-der-regel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campingfurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpod-d0je.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncanpublicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electivist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endokrinologye.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'executivespecialties.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feimiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firesticktricktricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hand-und-fusskrankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostessrange.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jalur.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kccsustainability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenxiong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loloapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megacomputing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miegraene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmlian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mund-fuss-hand-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olive-garden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roof-revive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scribd.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedwayatoz.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocktoncycling.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suffolkcoastalnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thugzapper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unolov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch-efl-ifollow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wusspilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xlfy.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blasenenthzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blasenentzndun-psb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvegrsserung-uwb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvergrrsserung-n3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvergrsserumg-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--brustvergrsssserung-z6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bruszvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--prustvergrsserung-8zb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunsdk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185c354afb20000040300473045022100ecb724be179f23a41b7e4e9f32146d360a8c52e8da1a26f3f8f664d2e7b67b3b0220131e014b4d84fbcd854e059b66cf9c59ba7cdf238df8e0c55f577dfc4ada19610075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185c354afcd000004030046304402205c2727b37d3fd9772861131bb789db5bb570ed6dabd72ee9a7bf14c1ccb8162102204a4f01e21fb38f13a77d3f97a54b63f474c4764346faae5126fb9727a1831e41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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