u.mailkit.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number a2:3b:7f:5a:a5:fb:02:8d:54:d0:20:98:a7:69:1a:21 was issued on by Sectigo Limited.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=u.mailkit.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): a2:3b:7f:5a:a5:fb:02:8d:54:d0:20:98:a7:69:1a:21
Serial Number (int): 215643863879732695339514776697843554849
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5e:ff:a3:50:a4:23:16:c4:49:06:b1:c1:43:bb:99:9c:75:78:70:70
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): e6:f1:60:b2:03:17:1b:ee:80:34:51:ab:b2:12:fc:af:e2:33:4c:59
Fingerprint (sha256): ef:3c:bc:22:4b:f0:97:78:15:f3:1a:98:86:ca:d5:c4:a5:7d:42:03:30:31:3e:2a:72:7a:f0:66:07:65:6d:fa

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate u.mailkit.com

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for u.mailkit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

u.mailkit.com
u.akce.rent.cz
u.akce.svet-svitidel.cz
u.akcie.rent.sk
u.akcie.svet-svietidiel.sk
u.akcio.lampak.hu
u.allianz.cz
u.centropol.cz
u.club.rossmann.cz
u.dedoma.ro
u.dedoma.sk
u.dine4fit.hu
u.dine4fit.pl
u.dobryemail.cz
u.email.bezvasport.cz
u.email.bezvasport.sk
u.emaildemos.com
u.energie.centropol.cz
u.homecredit.cz
u.homecredit.sk
u.info.nm.cz
u.kaloricketabulky.cz
u.kaloricketabulky.sk
u.kartavyhod.drmax.cz
u.ketodiet.cz
u.ketodiet.sk
u.kusmitea.cz
u.love.activate.cz
u.mail.key4you.cz
u.malfini.com
u.mesacnyvypis.sk
u.mesicnivypis.cz
u.mimilatky.cz
u.mnd.cz
u.naturamed.cz
u.naturamed.sk
u.nea.frogies.gr
u.news.3dden.com
u.news.e-kondomy.cz
u.news.etneteragroup.cz
u.news.stomateam.cz
u.news.superlove.sk
u.newsletter.drmax.cz
u.newsletter.factcool.com
u.newsletter.rossmann.cz
u.nl.toner.shop
u.nl.tonerpartner.cz
u.nl.tonerpartner.hr
u.nl.tonerpartner.pl
u.nl.tonerpartner.ro
u.nl.tonerpartner.si
u.nl.tonerpartner.sk
u.nl.tonerpartners.hu
u.nl.tptoner.at
u.nl.zmgroup.sk
u.notino.at
u.notino.be
u.notino.bg
u.notino.ch
u.notino.co.uk
u.notino.cz
u.notino.de
u.notino.dk
u.notino.ee
u.notino.es
u.notino.fi
u.notino.fr
u.notino.gr
u.notino.hr
u.notino.hu
u.notino.ie
u.notino.it
u.notino.lt
u.notino.lv
u.notino.nl
u.notino.pl
u.notino.pt
u.notino.ro
u.notino.se
u.notino.si
u.notino.sk
u.notino.ua
u.noutati.frogies.ro
u.novinky.centropol.cz
u.novinky.frogies.cz
u.novinky.frogies.sk
u.novinky.volkswagen.cz
u.novita.frogies.it
u.novosti.frogies.ba
u.novosti.frogies.bg
u.novosti.frogies.hr
u.novosti.frogies.rs
u.offerte.luciamo.it
u.omnivery.com
u.pottenpannen.cz
u.pottenpannen.sk
u.pozvanky.nm.cz
u.prazirna.doubleshot.cz
u.promocje.liderlamp.pl
u.promotii.luminam.ro
u.ru.dine4fit.com
u.sonderangebote.beleuchtung.at
u.sonderangebote.beleuchtung.de
u.tablycjakalorijnosti.com.ua
u.ujdonsagok.frogies.hu

Other certificates including the domain name mailkit.com

(limited to 100 certificates)
t.mailkit.com
*.mailkit.com
t.mailkit.com
*.mailkit.com
t.mailkit.com
u.mailkit.com
mailkit.com
u.mailkit.com
u.mailkit.com
mailkit.com
t.mailkit.com
u.mailkit.com

Certificate

The complete raw certificate details for u.mailkit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGcjC32JLs4oGwRmRSq9
QhHvCxRXiUoosMaZB3MGvkyGo811dKVKdXZlmxHszSUWOmFT1KXILQG4zbe9aVtJ
+K2hfNIZ3wLFZ6aXA7Z5T4bJVIzvSqND+t/B0JiTAH/JXirGScDMxMKsUDj3/Mm4
jQxnjRFFuqUr3mPPnzUvf4MEmDwqtxcHLp92JGk6P5jg4J1DtsIAvgX0QPNo+cyG
MnatvgixI+DwWKHyq54QvD2Pqfk1ZjKp/Y9cYLDO47rbEqV+de7DOjwNKeLJdgkl
3+Q9Vp2ScNTPjlkIaobPB23R7iuANhwxhaOC6IC7cgvldKnKaOOgMakNt7M67RiJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 215643863879732695339514776697843554849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'u.mailkit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20753940712433700840126440288149304003354474029868529457445881989701578374053253131867199976222589395802488805391711842359178093034405867070481658271228682267746402344982538340596313441682379931874655678253709934490016708863669652396654095586879184462110121595995702854401130967614384534756257811332271374832982751511779156986662828116900989198826330989497097351874826159168353763143107629145862638294379657861081997716614632635159765558447600843095053947408422520389590160267371689592073730744893322284410484638085781450183569476800734796460235367419439932842164338082910621964526147046121261503480427771408357558641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5effa350a42316c44906b1c143bb999c75787070
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mailkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akce.rent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akce.svet-svitidel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcie.rent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcie.svet-svietidiel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.akcio.lampak.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.allianz.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.club.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dedoma.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dine4fit.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.dobryemail.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.email.bezvasport.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.email.bezvasport.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.emaildemos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.energie.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.homecredit.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.info.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kaloricketabulky.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kartavyhod.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ketodiet.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.kusmitea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.love.activate.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mail.key4you.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.malfini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesacnyvypis.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mesicnivypis.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mimilatky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.mnd.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.naturamed.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nea.frogies.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.3dden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.e-kondomy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.etneteragroup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.stomateam.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.news.superlove.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.drmax.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.factcool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.newsletter.rossmann.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.toner.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartner.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tonerpartners.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.tptoner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.nl.zmgroup.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.notino.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.noutati.frogies.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.centropol.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.frogies.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.frogies.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novinky.volkswagen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novita.frogies.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.novosti.frogies.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.offerte.luciamo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.omnivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pottenpannen.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.pozvanky.nm.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.prazirna.doubleshot.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.promocje.liderlamp.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.promotii.luminam.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ru.dine4fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.sonderangebote.beleuchtung.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.sonderangebote.beleuchtung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.tablycjakalorijnosti.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.ujdonsagok.frogies.hu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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