getnutrition.de

Issued by R3

About this certificate

This digital certificate with serial number 04:82:94:e2:be:05:ca:58:c6:89:ad:ce:d8:91:62:35:b3:ea was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=getnutrition.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:94:e2:be:05:ca:58:c6:89:ad:ce:d8:91:62:35:b3:ea
Serial Number (int): 392883754483345772058381140074568309126122
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:13:50:c3:d2:2a:0d:3c:45:22:b1:16:e1:39:03:a0:cf:c7:14:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:78:d8:7b:14:01:93:00:be:2b:6a:20:2a:d5:5a:7a:ec:7b:1b:ae
Fingerprint (sha256): f5:80:ec:34:23:89:19:90:db:27:ac:38:f7:ec:d0:3e:36:be:7e:3c:b7:b1:62:ff:fb:8c:bb:b5:2d:71:40:74

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate getnutrition.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for getnutrition.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acti.com.au
*.anity.net
*.autopalace.com
*.banglian.com
*.brazil99.co
*.brello.com
*.brust.de
*.clairs.co
*.drewkyndallross.com
*.estopilla.com
*.familyfaresurvey.com
*.fleurquartet.com
*.fuelnet.com
*.fuelrefill.com
*.getnutrition.de
*.goatherder.com
*.gowogle.com
*.howhealthy111.info
*.howmade.co
*.icipaintstores.com
*.jahitan.com
*.jaqi.com
*.jeuxdegame.com
*.leakygirls.com
*.mainlandshops.com
*.meatspend.com
*.megusushi.com
*.melting.com.au
*.milanoseries.com
*.mountfiles.com
*.orthofeet.co
*.playgtav.com
*.printlyrics.com
*.purebeam.co
*.saplingindia.com
*.seacoastunitedmaine.org
*.speedwaytools.com
*.teatrohostel.org
*.timperi.com
*.undress.online
*.uniport.org
*.vakeupcall.info
*.wwwgoat.com
*.wwwgoogel.com
*.xn--kindersachenbrse-ywb.de
*.xvkdeos.com
*.xxase.com
*.xxx888.com
*.ziare.tv
*.zue.com.au
acti.com.au
anity.net
autopalace.com
banglian.com
brazil99.co
brello.com
brust.de
clairs.co
drewkyndallross.com
estopilla.com
familyfaresurvey.com
fleurquartet.com
fuelnet.com
fuelrefill.com
getnutrition.de
goatherder.com
gowogle.com
howhealthy111.info
howmade.co
icipaintstores.com
jahitan.com
jaqi.com
jeuxdegame.com
leakygirls.com
mainlandshops.com
meatspend.com
megusushi.com
melting.com.au
milanoseries.com
mountfiles.com
orthofeet.co
playgtav.com
printlyrics.com
purebeam.co
saplingindia.com
seacoastunitedmaine.org
speedwaytools.com
teatrohostel.org
timperi.com
undress.online
uniport.org
vakeupcall.info
wwwgoat.com
wwwgoogel.com
xn--kindersachenbrse-ywb.de
xvkdeos.com
xxase.com
xxx888.com
ziare.tv
zue.com.au

Other certificates including the domain name getnutrition.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for getnutrition.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArgpkl1tZHM6CHTbyUTVG
u/h/Q/UJ9ABbdNrqknRJYcj4ynju+JqyVVi1ss5ztOL1KKcIY/3Pe+kgb+Fcmv9f
/SEGyMdJKfN+9XV1zZEl0sgSTPKf+mF1X8JH3LwsGsqle6L1i6K3O2OQhvJs8XSk
zgu6i7PEX0AX55GwVGs8d0xVTNXFq6FZD/YA87y6O35+5Ac4NuX8m2gCDmc0d+h+
mddaWNeEvIFlsaBo59tNLHHk8DWgM79YZZGOM82Uwf7aWZn/eYU8Nejv0NJmkt+u
geQLVTqFfUELy+19gpE8PgCgENBtvziSNftElBBLx4+3iCARn/dJNzlViRgaUHe+
7Z3YCWWsNXuAsTuk6ghg2p8l/V2/UI7/HG68mlqNJayfPyAhPvuPGOdQeES9Nr25
i8p9mUi/0R1b50gXffTDzh04WVwNkpJ32CcQFuMEoHszzI9XzhGuE+v6hzWToQZY
CGxePTolgTqgGbcx8VqCYDzQovWtYtW15+zjW88VNXsk0A4IpQ+QI/Hf/zd+XUwC
OtTga+R9W5vVGDsYdldX1HHbNayBerNOIAFPCI1Kt27Sq6dypbHrh72MUfNrvCOp
Pl2fZlqrMjcha1VzjfiCEGHBBfxaAjiAJU1inHB/h71K51svdA23jR6vfv0HObRA
KEZC0Bd7PJvVbHmSRK/mXuMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392883754483345772058381140074568309126122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 22:47:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 22:47:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'getnutrition.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 710023690779532053052896306946751213856425689717912790760969176888937283279097838643712597539261294427068735721354101857759152974879172955203250048068813411804403909104298005076851289439565086067519032265793534441403745079148429857466051148440098735975269466301603415796004844608731855774744561983115485933479936211555338302348513403731825911223276047884405781032102611534379700261010073410763434670925033754808920550917205233060672552354474276578776795824451237895576014127981983533663544956521329474180407746809459954682243406263843528512867293410563730123022808966529287571629239219462780518936192401235411176575649803524779662091337702411304679613178891313456163563144770647567361865270659064988634919674041539572993428066050663101687682035528814741591879830084415424430475947847330920756318587335612361069012534835021834448754311268554267089235203601922478140747368424880662471284312885121169058197383194545503528335081464734730494210780587616238788239379746118145527513301533823497854146545636395679118045018879448826000094522883999952034605026573212365615005444848051644517682056155254386539059064946602065213424212433026096259438558321946225195385879225331918533629140506337059197578566484915892979429596334851899268341849827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							801350c3d22a0d3c4522b116e13903a0cfc71430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acti.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autopalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banglian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazil99.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brust.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clairs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drewkyndallross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estopilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familyfaresurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fleurquartet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuelnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuelrefill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getnutrition.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goatherder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gowogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howhealthy111.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howmade.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icipaintstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jahitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeuxdegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leakygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainlandshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meatspend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megusushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milanoseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountfiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orthofeet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playgtav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printlyrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purebeam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saplingindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seacoastunitedmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedwaytools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teatrohostel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timperi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.undress.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vakeupcall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwgoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwgoogel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kindersachenbrse-ywb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvkdeos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxx888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziare.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acti.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopalace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banglian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazil99.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brust.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clairs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drewkyndallross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estopilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyfaresurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleurquartet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelrefill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getnutrition.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goatherder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gowogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howhealthy111.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howmade.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icipaintstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeuxdegame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leakygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatspend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megusushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanoseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthofeet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playgtav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printlyrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purebeam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saplingindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacoastunitedmaine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedwaytools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatrohostel.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timperi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undress.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakeupcall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwgoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwgoogel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kindersachenbrse-ywb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvkdeos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxx888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziare.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zue.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3a36eee60000040300473045022100b647437f512f8d91b54c23c26b448cbb6aaf4185a9e71beca86bcc76cb2c7f490220084b0cff29ca2436b69591db992c29530902c786c198af693f438822526583ec00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e3a36ef23000004030046304402207f1542ffa7b55dd3714d046d7f209dac4d0956374279afd4479c67228d2a264d022063affddea0d125ababbf2428a2748227d37b50209f62d88b4fbe22f07e4e0a93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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