not-alone.de

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:cf:2e:4a:a4:82:eb:52:c9:64:5d:64:d2:a9:a9:30:1e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=not-alone.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:cf:2e:4a:a4:82:eb:52:c9:64:5d:64:d2:a9:a9:30:1e
Serial Number (int): 402489148255264480863827212684446388531230
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e3:3e:11:51:17:a5:21:6d:06:c0:16:48:75:89:54:1d:6b:ba:30:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:f2:e7:ae:18:f8:30:a6:a9:a0:f6:1a:d8:41:f4:9e:1a:d4:e1:6b
Fingerprint (sha256): e8:dd:40:a3:18:29:64:fa:8c:ae:7e:1a:6b:ab:37:56:7d:b9:f5:9f:49:fa:4e:e4:30:54:d9:63:d9:8b:85:96

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate not-alone.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for not-alone.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3000jl.online
*.accounting-guru.net
*.bellebeauty.biz
*.fullpeliculashd.tv
*.gutmakiert.de
*.gyurae.co
*.iamspe.com.br
*.imgonn.co
*.mtgassistant.net
*.neurinom.de
*.neurodermitis-creme.de
*.neuschwannstein.de
*.neylons.de
*.nezero.net
*.nfa.de
*.nfm.de
*.nfx.de
*.ngx.de
*.nhu.de
*.nickianzug.de
*.nidation.de
*.niederheim.de
*.nierengurt.de
*.nierenmark.de
*.nierenratgeber.de
*.nieuwpoort.de
*.nikotinabusus.de
*.nitrat.de
*.niv.de
*.niy.de
*.njh.de
*.njl.de
*.njy.de
*.njz.de
*.nkz.de
*.nmq.de
*.noannualfeecreditcards.org
*.noj.de
*.nooa.org
*.nop.de
*.nordwestschweiz.de
*.nortland.de
*.not-alone.de
*.powetrainproducts.net
*.shirleyarcher.com.au
*.study.za.com
*.sunshinesolarsa.com
*.tainghechonloc.com
*.uuimall.com
*.wedr2.de
3000jl.online
accounting-guru.net
bellebeauty.biz
fullpeliculashd.tv
gutmakiert.de
gyurae.co
iamspe.com.br
imgonn.co
mtgassistant.net
neurinom.de
neurodermitis-creme.de
neuschwannstein.de
neylons.de
nezero.net
nfa.de
nfm.de
nfx.de
ngx.de
nhu.de
nickianzug.de
nidation.de
niederheim.de
nierengurt.de
nierenmark.de
nierenratgeber.de
nieuwpoort.de
nikotinabusus.de
nitrat.de
niv.de
niy.de
njh.de
njl.de
njy.de
njz.de
nkz.de
nmq.de
noannualfeecreditcards.org
noj.de
nooa.org
nop.de
nordwestschweiz.de
nortland.de
not-alone.de
powetrainproducts.net
shirleyarcher.com.au
study.za.com
sunshinesolarsa.com
tainghechonloc.com
uuimall.com
wedr2.de

Other certificates including the domain name not-alone.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for not-alone.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402489148255264480863827212684446388531230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 22:59:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-08 22:59:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'not-alone.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790534116247408039486772129755323755863430068852622599814377125067644631156913541064627424938808370623474613283054100840453691848332709779208446084311356995680189921553865200481928533223303617006090878947715763146207876346800473812913677229206616062272634645125279022026842194776611162115805524135619825457178311495580862223204463020719196567696852189199994635309662212968907190080801581841198732381013872052467131002023498456892285072308478189500460435736459789057594723442104624033586470320623131399721278224241841124332018439232573745771017457899999576307498816618903550471904450034857382175332697627230568482209324159701424365306844532402288095016568049345796713539202772819365004501599921104225319607009039425800817687924101540258909372614211839313071922253302876670157765266751808552951596959700119952674509649231755447733621594536178657196869490357484854355311666983208631665095730096990193682117444851194397152304913429278958212810892594554621950973518250399202906227972293840126166807450207277124106575643976892140540265319676331013135807346850566928205594007482202864802887933830467419846917405938403438895273593263472691853974942264844490982179588506017263297076269938671344140594301760069664369754125497049181029219911357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e33e115117a5216d06c016487589541d6bba306a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1480 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3000jl.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accounting-guru.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellebeauty.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullpeliculashd.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gutmakiert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gyurae.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamspe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgonn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtgassistant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurinom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurodermitis-creme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neuschwannstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neylons.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nezero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickianzug.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nidation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niederheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nierengurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nierenmark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nierenratgeber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nieuwpoort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikotinabusus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitrat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nkz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noannualfeecreditcards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nooa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordwestschweiz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nortland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.not-alone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powetrainproducts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirleyarcher.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.study.za.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunshinesolarsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tainghechonloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uuimall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedr2.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3000jl.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting-guru.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellebeauty.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullpeliculashd.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gutmakiert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gyurae.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamspe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgonn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgassistant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurinom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurodermitis-creme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neuschwannstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neylons.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nezero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickianzug.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nidation.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niederheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nierengurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nierenmark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nierenratgeber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nieuwpoort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikotinabusus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noannualfeecreditcards.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nooa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordwestschweiz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nortland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'not-alone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powetrainproducts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleyarcher.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'study.za.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunshinesolarsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tainghechonloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uuimall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedr2.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001862e5207d000000403004630440220360649d64c043135172fa32e93f7c742dd12ff43c39014fbaeb8a71d028654f402206a51978949af4a4f2eda1c73e6d69a2dac801f266f1b4b608441a91412b764a0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001862e520997000004030047304502206fd02f949bde2a94e0fcc38d00a64b178d73fe3c0a7d2fe45dcad9f9aba8eeb1022100af75b05a1e2ba0b94948ae69336349b894e8e09317cad03067ffe94b1f504cd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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