agenorte.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:7c:17:05:f0:26:6f:cf:68:cd:6e:e5:95:46:72:9f:6d:5e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=agenorte.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7c:17:05:f0:26:6f:cf:68:cd:6e:e5:95:46:72:9f:6d:5e
Serial Number (int): 390674760301448280425762443364097796828510
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:64:b2:9e:61:bf:af:78:38:6e:18:96:32:f8:2b:d9:fa:d5:46:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:60:2c:fd:9a:4f:0a:d8:11:58:e9:88:01:50:fd:39:23:2d:d9:b8
Fingerprint (sha256): ec:0e:aa:f9:ef:70:6f:77:1c:9d:c5:2d:79:f3:1a:31:07:cb:2e:38:60:4c:d7:f4:d9:0f:ba:bf:84:cf:89:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate agenorte.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agenorte.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agenorte.com.br
*.almyra.de
*.avtb123.net
*.capital0ne.co.uk
*.conserver.net
*.corporatevideosydney.com.au
*.debil.sk
*.debtorinsurance.com.au
*.dmai.it
*.dunden.de
*.duu.de
*.dvd-galaxis.de
*.dvp.de
*.eaq.de
*.earh.de
*.ebakleinanzeigen.de
*.ebay-kkleinanzeigen.de
*.ebay-kleimanzeigen.de
*.ebay-kleinanezigen.de
*.ebay-kleinanzeigend.de
*.ebaykleinanezigen.de
*.ebaykleineinzeige.de
*.granuaile.com
*.hdstream.org
*.igamescrew.club
*.kaffevorteil.de
*.kaitorisatei.com
*.kochkleider.de
*.lederecksofa.de
*.marmori.com
*.mlfroom.com
*.moveistowatch.tv
*.mura.be
*.mylingogalaxy.com
*.newcastleroofcleaning.au
*.nrtaconductingcompetition.com
*.ofleacked.com
*.onreadr.com
*.original-lancia.com
*.outdoorleisurecenters.com
*.outrospective.co.uk
*.oxfordski.co.uk
*.quwad.de
*.rewardgateaway.co.uk
*.robsonbarber.com
*.shoestrainer.it
*.speedstest.de
*.unihoby.cz
*.whichsuburb.com.au
*.xn--blasenentzndungh-szb.de
agenorte.com.br
almyra.de
avtb123.net
capital0ne.co.uk
conserver.net
corporatevideosydney.com.au
debil.sk
debtorinsurance.com.au
dmai.it
dunden.de
duu.de
dvd-galaxis.de
dvp.de
eaq.de
earh.de
ebakleinanzeigen.de
ebay-kkleinanzeigen.de
ebay-kleimanzeigen.de
ebay-kleinanezigen.de
ebay-kleinanzeigend.de
ebaykleinanezigen.de
ebaykleineinzeige.de
granuaile.com
hdstream.org
igamescrew.club
kaffevorteil.de
kaitorisatei.com
kochkleider.de
lederecksofa.de
marmori.com
mlfroom.com
moveistowatch.tv
mura.be
mylingogalaxy.com
newcastleroofcleaning.au
nrtaconductingcompetition.com
ofleacked.com
onreadr.com
original-lancia.com
outdoorleisurecenters.com
outrospective.co.uk
oxfordski.co.uk
quwad.de
rewardgateaway.co.uk
robsonbarber.com
shoestrainer.it
speedstest.de
unihoby.cz
whichsuburb.com.au
xn--blasenentzndungh-szb.de

Other certificates including the domain name agenorte.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for agenorte.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390674760301448280425762443364097796828510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 09:09:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 09:09:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agenorte.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899400768709498909470651279320092620903746062541753879100039057799149517652591887462712617417257856620024204492435720781319113105847883555503683340550717371895849620669181154057586865462629037623101844493814487046134231393621773064473837205123029790522353329143693943111570745729988146562351141227984613863233971131997095882766116720466004297858785808648294433099959516587886485946131001326442002994288893465063698445952853596843698839780361620216686547359277928687306140735986360741357495786746315170299312426763303195328812036328105541440247486854468612255110023913936623229925082387359123999355714973430871559827829230354987452675630928049032158273002963308134642533012351909424119448093895490257963319473263943573846780001606969267310650989690150966171055821547251808450326760261422005726571514840138956795083290537909943683789648825927200917782465868956205867131904442399546580965919495654499415313068799380326477484786876312478091345673990851952870695169130213943364365507968212772480718426458336915260061648642891145135322259799027378463800265372863709982084063527770285710865594439033005604324814191614574616991068124432268070734528454400821828291486482136315177771428320729941272382629814631144891284589279039287693017774937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8964b29e61bfaf78386e189632f82bd9fad54663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agenorte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almyra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtb123.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capital0ne.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conserver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporatevideosydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.debil.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.debtorinsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvd-galaxis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eaq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebakleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kkleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleimanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanezigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzeigend.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaykleinanezigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaykleineinzeige.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granuaile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdstream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igamescrew.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaffevorteil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaitorisatei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kochkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lederecksofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marmori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlfroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moveistowatch.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mura.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylingogalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newcastleroofcleaning.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrtaconductingcompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ofleacked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onreadr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.original-lancia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outdoorleisurecenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outrospective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxfordski.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quwad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewardgateaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robsonbarber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoestrainer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedstest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unihoby.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichsuburb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blasenentzndungh-szb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenorte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almyra.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtb123.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capital0ne.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conserver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatevideosydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debil.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debtorinsurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvd-galaxis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebakleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kkleinanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleimanzeigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanezigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzeigend.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaykleinanezigen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaykleineinzeige.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granuaile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdstream.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igamescrew.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaffevorteil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaitorisatei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochkleider.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lederecksofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlfroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moveistowatch.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mura.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylingogalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastleroofcleaning.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrtaconductingcompetition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofleacked.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onreadr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'original-lancia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outdoorleisurecenters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outrospective.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxfordski.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quwad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewardgateaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robsonbarber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoestrainer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedstest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unihoby.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichsuburb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blasenentzndungh-szb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b235c99be00000403004630440220623cd5db1bce3cbab84955fbfe23a8a332e6475e5658ba21f3e5a5e3a742956802203eb82795c9d1291f6c41629b2b83ec2ad927e4762078ff96e8669d1acad73608007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b235c99bc0000040300473045022100eab3b25aba25d2ab7451799118955f0ca81ebf714237d1eba85af7880fdd26c102205ca7b9bb6089bd0c924c75560d21017ab011a0bcc45406420ebe8ac45e212188
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a36a9fbaddc679a3d94a85be9795fddfcabed3ec6a2c3704b24bb3d0667e6d62a8838cd38ba67ce75e085a074efaabb781658bde8c74de1bbdbf7d6d5d45e0a0595a17dfafd649443936c975b8a68f189c3cbdb01ddcef30bdfa23ea66e1ae1ddb4d844c5af6dd32598cdc265f63cc3413ed838e96907a04ab19d24f37b3ed0669e2b78b358c56d6cb620092d06559a98ade1a112df45f15dc1ad32e00a8e3e3acc4c6f84c5359a4cd75b806547c0a7cb832316bbc65e739442ae5a545f23593175c63f51ebbd8247e661360e01814c6a43f4af0200204ee64f6d1f67ad038dc18c7492a8c8b4981c5b0248b2366063d16a985bf7959f88c3cde7f69eb776986