www.apk.ls-sim.de

Issued by R3

About this certificate

This digital certificate with serial number 04:43:5c:a7:26:6a:9f:9f:43:89:d0:c4:82:53:ae:e9:9b:57 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.apk.ls-sim.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:5c:a7:26:6a:9f:9f:43:89:d0:c4:82:53:ae:e9:9b:57
Serial Number (int): 371371219179110602035046021619684806859607
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:e8:27:ce:2b:29:05:de:e9:1c:75:59:29:a6:6e:dc:1f:33:c2:5e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:ef:9d:8a:72:66:82:83:e8:52:95:01:77:08:b2:dd:25:6c:91:6a
Fingerprint (sha256): f1:2a:ed:b3:3c:89:9d:55:6c:8d:5a:d3:3d:b2:6b:88:c2:80:09:c1:5c:b7:17:68:46:ae:78:7b:4c:1d:cc:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.apk.ls-sim.de

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.apk.ls-sim.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abi1996.eu
*.benjaminrehm.at
*.brixn.at
*.exchange1972.de
*.her-bst.de
*.jazufrieden.de
*.jelkie.de
*.julien-lueer.de
*.kitsch-pub.at
*.lok-weyhe.de
*.neckarsulmer-salonorchester.de
*.niklas-eisenbahnen.de
*.schulmusik-stuttgart.de
*.wcpapier.at
*.wohnbau-amend.de
*.xn--frfrieden-q9a.de
*.xn--julien-ler-heb.de
0yvji2a3.antifax.com
abi1996.eu
add.nikokranz.de
app.gaestehaus-kicker.at
benjaminrehm.at
brixn.at
ca.enjoi-sailing.com
exchange1972.de
help.icekey.de
her-bst.de
jazufrieden.de
jelkie.de
julien-lueer.de
kitsch-pub.at
lok-weyhe.de
mx1.panolook.com
neckarsulmer-salonorchester.de
niklas-eisenbahnen.de
openpgp.kalkschmidt.com
schulmusik-stuttgart.de
wcpapier.at
wohnbau-amend.de
wordpress.pma.mazza.cloud
www.alt.silvertiger.de
www.apk.ls-sim.de
www.astral-anarchie.de
www.de.getanyboat.com
www.faq.beaze.de
www.hochzeit.manns-kalbach.de
www.www.arche-naturwaren.de
xn--frfrieden-q9a.de
xn--julien-ler-heb.de
zanke.net

Other certificates including the domain name ls-sim.de

(limited to 100 certificates)
www.ls-sim.de
www.ls-sim.de
schischule-unterberg.lima-city.de
www.aru-fotografie.de
*.heger-bischof.de
mobil-diskothek-sachsen.de
schischule-unterberg.lima-city.de
poststrasse.lima-city.de
www.caroknips.de
*.gebaeudeservice.nrw
ls.de.cool
*.orthpaedie-atrium-hro.de
*.schulzindependent.com
www.kapent3.lima-city.de
marketinginabox.online
etgs.lima-city.de
script.ls-sim.de
kevinkirschbaum.lima-city.de
www.appleinside.lima-city.de
www.seite24.de.cool
www.fudpada.de
www.correia.lima-city.de
www.zayn666.lima-city.de
silmeris.de
mawi25580.lima-city.de
kvv-stuttgart.de
www.ls-sim.de
ovpn.blackdiamonds.eu.org
*.flxnsn.com
wp.towalis.de
www.hedesch.lima-city.de
www.apk.ls-sim.de
www.apk.ls-sim.de
www.amalgam-fansub.lima-city.de
www.faswien.lima-city.de
wkstatik.lima-city.eu
regatta.iboxy.de
lipsiusstrasse.lima-city.de
schattenseiten.lima-city.de
*.heger-bischof.de
www.statusgeber.ls-sim.de
www.witali-haas.de
www.wan0509.lima-city.de
www.ls-sim.de
www.testweb.marco-weh.de
*.ergotherapie-schrei.at
bingo.lima.zone
ls-sim.de
www.working-for.koncert-fotos.com
www.datenbank-alien.lima-city.de
webadmin.tankmailer.de
www.ev-erloesergemeinde-kastel-news.lima-city.de
www.ls-sim.de
www.satrox.lima-city.de
www.danielhaese.de
www.srabe.tk
www.wolkynir.lima-city.de
khdc.lima-city.de
goetzloff.lima-city.de
poimer.lima-city.org
bass-time.de
*.lima-ssh.de
wolfforce.lima-city.de
www.frame-pro.de
christian-deisenrieder.de
www.leiststelle.ls-sim.de
www.ls-sim.de
dwww.sidbrowser.com
bellmann-media.de
www.taftea.lima-city.de
xn--n7q565af7bf80b.xn--fiqs8s
www.geneborg.net
www.joerg-borgerding.de
*.hilsenet.de
hydrant.ls-sim.de
www.densetsu-no-ken.lima-city.de
www.dennfairgehtvor.de
leitstelle.ls-sim.de
www.ls-sim.de
wwd.sidbrowser.com
www.adventgemeinde-giessen.lima-city.de
hydrant.ls-sim.de
*.petermitterer-kochen.at
iunicon.com
www.kbits.at
testweb.marco-weh.de
karger.12hp.de
www.flomarks.lima-city.de
*.lucamoosbrugger.email
www.apk.ls-sim.de
www.nextcloud.wdml.de
*.freshtours.de
links.medien-dachsberg.at
f.jaegerhof-schneider.at
markenklamottenverkaufen.de
www.projektsiegfried.4lima.de
www.akw-sound.de
www.tropicallux.de
mail7.medien-dachsberg.at
iool.de

Certificate

The complete raw certificate details for www.apk.ls-sim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH7TCCBtWgAwIBAgISBENcpyZqn59DidDEglOu6ZtXMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTgxMTIyMDNaFw0yNDAzMTcxMTIyMDJaMBwxGjAYBgNVBAMT
EXd3dy5hcGsubHMtc2ltLmRlMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBb2Q
xLAg4CUsifJZrjn4HTtHBXW3H6LY4UcM0pmtT0BChKNPH5k5GjrITtLrVtSncZuv
8iFzWfLOK8vZ3KysVqOCBdwwggXYMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUQOgn
zispBd7pHHVZKaZu3B8zwl4wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU
wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j
ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggPiBgNV
HREEggPZMIID1YIMKi5hYmkxOTk2LmV1ghEqLmJlbmphbWlucmVobS5hdIIKKi5i
cml4bi5hdIIRKi5leGNoYW5nZTE5NzIuZGWCDCouaGVyLWJzdC5kZYIQKi5qYXp1
ZnJpZWRlbi5kZYILKi5qZWxraWUuZGWCESouanVsaWVuLWx1ZWVyLmRlgg8qLmtp
dHNjaC1wdWIuYXSCDioubG9rLXdleWhlLmRlgiAqLm5lY2thcnN1bG1lci1zYWxv
bm9yY2hlc3Rlci5kZYIXKi5uaWtsYXMtZWlzZW5iYWhuZW4uZGWCGSouc2NodWxt
dXNpay1zdHV0dGdhcnQuZGWCDSoud2NwYXBpZXIuYXSCEioud29obmJhdS1hbWVu
ZC5kZYIWKi54bi0tZnJmcmllZGVuLXE5YS5kZYIXKi54bi0tanVsaWVuLWxlci1o
ZWIuZGWCFDB5dmppMmEzLmFudGlmYXguY29tggphYmkxOTk2LmV1ghBhZGQubmlr
b2tyYW56LmRlghhhcHAuZ2Flc3RlaGF1cy1raWNrZXIuYXSCD2JlbmphbWlucmVo
bS5hdIIIYnJpeG4uYXSCFGNhLmVuam9pLXNhaWxpbmcuY29tgg9leGNoYW5nZTE5
NzIuZGWCDmhlbHAuaWNla2V5LmRlggpoZXItYnN0LmRlgg5qYXp1ZnJpZWRlbi5k
ZYIJamVsa2llLmRlgg9qdWxpZW4tbHVlZXIuZGWCDWtpdHNjaC1wdWIuYXSCDGxv
ay13ZXloZS5kZYIQbXgxLnBhbm9sb29rLmNvbYIebmVja2Fyc3VsbWVyLXNhbG9u
b3JjaGVzdGVyLmRlghVuaWtsYXMtZWlzZW5iYWhuZW4uZGWCF29wZW5wZ3Aua2Fs
a3NjaG1pZHQuY29tghdzY2h1bG11c2lrLXN0dXR0Z2FydC5kZYILd2NwYXBpZXIu
YXSCEHdvaG5iYXUtYW1lbmQuZGWCGXdvcmRwcmVzcy5wbWEubWF6emEuY2xvdWSC
Fnd3dy5hbHQuc2lsdmVydGlnZXIuZGWCEXd3dy5hcGsubHMtc2ltLmRlghZ3d3cu
YXN0cmFsLWFuYXJjaGllLmRlghV3d3cuZGUuZ2V0YW55Ym9hdC5jb22CEHd3dy5m
YXEuYmVhemUuZGWCHXd3dy5ob2NoemVpdC5tYW5ucy1rYWxiYWNoLmRlght3d3cu
d3d3LmFyY2hlLW5hdHVyd2FyZW4uZGWCFHhuLS1mcmZyaWVkZW4tcTlhLmRlghV4
bi0tanVsaWVuLWxlci1oZWIuZGWCCXphbmtlLm5ldDATBgNVHSAEDDAKMAgGBmeB
DAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqdMOsc
UgHLVt0sgdm7v6s52IRzAAABjHzgTqMAAAQDAEcwRQIhAIKFbAzSFpoNLBlM5aTV
Q3bgrU9bDogB3Oj/PYCs5XkWAiApu7HhLGz/U5ns6nRYPVq4Y9A5hDTZie0Dx751
CNKm+wB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjHzgTpwA
AAQDAEgwRgIhAO4zoziLy/0t/c6rr4MKQXWZ1Xyf3RH4skTjbwRHfzT6AiEA23BU
lCXkq/AoGWCYahJkU9vjqEDKDv/OfgXQXj7OlDEwDQYJKoZIhvcNAQELBQADggEB
AGGWiYBX9MrT7TWj7O+yVQWajeC5kITAsGaQuS21Iq0CsL7GCxzI2R2HEEIf7Fyz
02qv9097LFHGZOzhTwv9/rni5zXxM5REA2OUU63O4HwhCY50r4sdLSF/jWJgMYpp
YkCmU/yzlB/fVsgn+0WnhjYHLFJ61LZpsaHmu+9Lk9OUTYhrkg9tNKEPtxbUpICy
IAvxLIIiCEe/+ypvocsuFA5vbHPG6zxITvguPMu+VeO9aaM3z0JwPQPnjJWyCy4Y
dvC6x/qlxh7yrw1KwYRtMTsq09fc44tm8m59wB3/SGthD0dZOB2L/0MhPDCbE6by
USDJQ+x9JM5hA0+bdWw4pW4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEBb2QxLAg4CUsifJZrjn4HTtHBXW3
H6LY4UcM0pmtT0BChKNPH5k5GjrITtLrVtSncZuv8iFzWfLOK8vZ3KysVg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371371219179110602035046021619684806859607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 11:22:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 11:22:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.apk.ls-sim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000405bd90c4b020e0252c89f259ae39f81d3b470575b71fa2d8e1470cd299ad4f404284a34f1f99391a3ac84ed2eb56d4a7719baff2217359f2ce2bcbd9dcacac56
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40e827ce2b2905dee91c755929a66edc1f33c25e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (985 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abi1996.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benjaminrehm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brixn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exchange1972.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.her-bst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jazufrieden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jelkie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.julien-lueer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitsch-pub.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lok-weyhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neckarsulmer-salonorchester.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niklas-eisenbahnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schulmusik-stuttgart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcpapier.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohnbau-amend.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frfrieden-q9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--julien-ler-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0yvji2a3.antifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abi1996.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'add.nikokranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gaestehaus-kicker.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminrehm.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brixn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange1972.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'her-bst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jazufrieden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jelkie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julien-lueer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitsch-pub.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lok-weyhe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.panolook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neckarsulmer-salonorchester.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niklas-eisenbahnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openpgp.kalkschmidt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schulmusik-stuttgart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcpapier.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnbau-amend.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wordpress.pma.mazza.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alt.silvertiger.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apk.ls-sim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astral-anarchie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.de.getanyboat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faq.beaze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hochzeit.manns-kalbach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www.arche-naturwaren.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frfrieden-q9a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--julien-ler-heb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zanke.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7ce04ea3000004030047304502210082856c0cd2169a0d2c194ce5a4d54376e0ad4f5b0e8801dce8ff3d80ace57916022029bbb1e12c6cff5399ecea74583d5ab863d0398434d989ed03c7be7508d2a6fb007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c7ce04e9c0000040300483046022100ee33a3388bcbfd2dfdceabaf830a417599d57c9fdd11f8b244e36f04477f34fa022100db70549425e4abf0281960986a126453dbe3a840ca0effce7e05d05e3ece9431
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006196898057f4cad3ed35a3ecefb255059a8de0b99084c0b06690b92db522ad02b0bec60b1cc8d91d8710421fec5cb3d36aaff74f7b2c51c664ece14f0bfdfeb9e2e735f133944403639453adcee07c21098e74af8b1d2d217f8d6260318a696240a653fcb3941fdf56c827fb45a78636072c527ad4b669b1a1e6bbef4b93d3944d886b920f6d34a10fb716d4a480b2200bf12c82220847bffb2a6fa1cb2e140e6f6c73c6eb3c484ef82e3ccbbe55e3bd69a337cf42703d03e78c95b20b2e1876f0bac7faa5c61ef2af0d4ac1846d313b2ad3d7dce38b66f26e7dc01dff486b610f4759381d8bff43213c309b13a6f25120c943ec7d24ce61034f9b756c38a56e