basketballsinglets.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:e4:a0:7e:bd:73:ad:92:e4:12:ad:7f:d3:8f:7d:67:6c:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=basketballsinglets.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e4:a0:7e:bd:73:ad:92:e4:12:ad:7f:d3:8f:7d:67:6c:15
Serial Number (int): 339134572004524843803685879787570139196437
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:f4:01:8d:32:8b:96:18:c4:82:97:35:dd:8b:f0:f0:c6:40:ef:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:2e:76:85:26:eb:b1:70:2c:c1:8a:23:37:a5:87:fe:0f:68:5a:ff
Fingerprint (sha256): ed:db:06:a5:90:f5:78:5b:16:2e:ab:0b:95:ee:7f:9b:21:da:c9:9e:a7:5d:91:e2:90:3a:ce:11:ab:ad:99:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate basketballsinglets.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for basketballsinglets.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adultschoolguhsd.net
*.aquario.eu
*.autuversicherung.de
*.azzurroflypark.it
*.basketballsinglets.com.au
*.bestsuper.com.au
*.betterburgernyc.com
*.bgfw.net
*.bms1.com.au
*.bpooking.de
*.chanelhb.co
*.chaoxig.co
*.chatromms.de
*.chinchina-caldas-gov.co
*.claimprizecard.com
*.coupon4bonus.com
*.dekopistolen.de
*.fahrplanauskumft.de
*.frankturt.de
*.holzbrikets.de
*.imperialfashion-ua.com
*.inboundup.com
*.jasqzx.com
*.larkmaps.pl
*.metallfeder.de
*.obcw.com.au
*.ontv-live.com
*.papillonzucht.de
*.posadafueguina.com
*.qualification.com.au
*.raderfalle.de
*.retenversicherung.de
*.rotarydiagnostics.com
*.sanktmaergen.de
*.santander-bnk.de
*.schnaeppchen-kostenlos.de
*.slpiegel.de
*.spargelzubereitung.de
*.sracka.cz
*.stromstossschalter.de
*.superbloger.online
*.sveselectronics.net
*.temporaryjob.com.au
*.tufano.eu
*.ulup.pl
*.vomiting.com.au
*.xn--fanbettwsche-ncb.de
*.xn--lttozahlen-ecb.de
*.xn--marzipanpltzchen-4nb.de
*.xn--nhstoffe-0za.de
adultschoolguhsd.net
aquario.eu
autuversicherung.de
azzurroflypark.it
basketballsinglets.com.au
bestsuper.com.au
betterburgernyc.com
bgfw.net
bms1.com.au
bpooking.de
chanelhb.co
chaoxig.co
chatromms.de
chinchina-caldas-gov.co
claimprizecard.com
coupon4bonus.com
dekopistolen.de
fahrplanauskumft.de
frankturt.de
holzbrikets.de
imperialfashion-ua.com
inboundup.com
jasqzx.com
larkmaps.pl
metallfeder.de
obcw.com.au
ontv-live.com
papillonzucht.de
posadafueguina.com
qualification.com.au
raderfalle.de
retenversicherung.de
rotarydiagnostics.com
sanktmaergen.de
santander-bnk.de
schnaeppchen-kostenlos.de
slpiegel.de
spargelzubereitung.de
sracka.cz
stromstossschalter.de
superbloger.online
sveselectronics.net
temporaryjob.com.au
tufano.eu
ulup.pl
vomiting.com.au
xn--fanbettwsche-ncb.de
xn--lttozahlen-ecb.de
xn--marzipanpltzchen-4nb.de
xn--nhstoffe-0za.de

Other certificates including the domain name basketballsinglets.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for basketballsinglets.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl70Orke+ynxwrrTHKH5u
47cc0KXtDJ27EMkMVmCwrpH+Yt+IPIdfOym5LQoCOw28y8Hn2/47YQlinrGvTeWP
wx4Ausp8hmauv9wGKIlvxrSiF3JkAdorqMtLEoisqSROJEsPBxrmT5Hq5FnWxzX/
bN64t69MsaUgjg4xJL4iU/heEZAmaanCf38GzajNBnYBwaowQdWG5NAPEyHAs+ng
UTgKXoLP+eECOV+58ZXw0Y9jnRNC2kphgPsffSi8SUUp9YFl3F2i0eUaWM5A9Apz
PFKOL/CJKHzpSRTsSbZoecfMOXIQP/hF8TMzAqw5lMwnV5nDWxfslEvcapM9DdEr
8wdiXeWWf1BEMGE62zQBxKIgdCKmamT7I/A5ZQAuu9kPJEiPm0Z5oms0kZd4O+3c
Pv/vHhYeytgUo8KYPxrQuRLhErGiWsXcspoCl4+7yTILNi7DmFXFOWvs0ZzGyTzz
1f/xQVe3UzLSye+zoHdYUQq657UHDSOuScTFPTOv38oGn4JoEAlqg8ipjN0bDBcE
xcPSD4lm/myGANjI0mpm8xTlOWIZe/5JWqIANdV9nFxYnw5e2gXQ0Avlq1bFR7hh
kMV17FHFZiMi95k1/tZ0hSOuxt8VGauVY+TzsjGfDdEnhilIWVcTe2NEWyyXHRl+
oQmVZeZJk56QXLIsr84MUdMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339134572004524843803685879787570139196437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 07:17:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 07:17:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'basketballsinglets.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 619039092878114519031411693764962676117155807027646149208184197796119303557032425213126575611696185980777460354666141365945492531419271462784599124202940185711892498892816378395047151877705283080854611520351633812506985143570816944124254241263714337677032513255557912703162517795724498329786448084052826741623258003366368561573020791561537695077130464903912904125325765549333660122909995481254697217345849085094059407096640452637235306125073126528971272025225057584189714787435586600270848089095582502089228983678684762387349581074511839646456907637321224014000998668076524536448867542353069410662595318600207223051269683648241550768020332824378533233468880033545842884975274840027747207401075225678974526948485049080114825289147546890383288449757722988803546680952857053981542462013210417148968492062819642174057829201281485090910151342233928397298328159496459578549638106995252112116025655796995610543523534562650975171078582397632605709060297212536553243483955518615389428751310482680795378271729384615980324847225520519118925670768460683639944052161644345243223280297333795867973461719758901899127722292368759187068953369648734163172664726865823832244562873424582244871225910901579396878270512410661912140056490358488889618616787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							31f4018d328b9618c4829735dd8bf0f0c640ef66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultschoolguhsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquario.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autuversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azzurroflypark.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basketballsinglets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterburgernyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bgfw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bms1.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bpooking.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chanelhb.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaoxig.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatromms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinchina-caldas-gov.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claimprizecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coupon4bonus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekopistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahrplanauskumft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankturt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holzbrikets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imperialfashion-ua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inboundup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jasqzx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larkmaps.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metallfeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obcw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontv-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papillonzucht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.posadafueguina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualification.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raderfalle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotarydiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanktmaergen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander-bnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schnaeppchen-kostenlos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slpiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spargelzubereitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sracka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromstossschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superbloger.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sveselectronics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temporaryjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tufano.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulup.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vomiting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fanbettwsche-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lttozahlen-ecb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--marzipanpltzchen-4nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nhstoffe-0za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultschoolguhsd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquario.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autuversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azzurroflypark.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballsinglets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterburgernyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgfw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms1.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpooking.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chanelhb.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaoxig.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatromms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinchina-caldas-gov.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimprizecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupon4bonus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekopistolen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahrplanauskumft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankturt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holzbrikets.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperialfashion-ua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasqzx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larkmaps.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metallfeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obcw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontv-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papillonzucht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posadafueguina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualification.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raderfalle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retenversicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotarydiagnostics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanktmaergen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander-bnk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schnaeppchen-kostenlos.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slpiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spargelzubereitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sracka.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromstossschalter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superbloger.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sveselectronics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaryjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tufano.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulup.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vomiting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fanbettwsche-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lttozahlen-ecb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--marzipanpltzchen-4nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nhstoffe-0za.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2c9675980000040300483046022100c5a1db2ad64417fa3c84e3e51d590db2b6dec00e498c00b22d42ec8280bc6a19022100ceb0ad581b37d6a57184e0c3ee65f126ee85548f66331ec4527e7c263ff1dfb100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2c9676110000040300483046022100ba006c227108631469e8df1806d487e2bb7aa82baf76b721defef3a44074c85b022100e252e0a0f060fef54e0e4977ca307e9583e6b7e7e4b24f1d3db87e8e1bc04bcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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