dmenz.de

Issued by R3

About this certificate

This digital certificate with serial number 03:04:04:87:4e:ae:2b:27:38:39:04:15:a8:b8:ab:d5:24:97 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dmenz.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:04:87:4e:ae:2b:27:38:39:04:15:a8:b8:ab:d5:24:97
Serial Number (int): 262704006730850540290292516179989201495191
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:b9:83:bc:3e:b6:bd:3a:7f:5f:5a:09:bc:ed:2e:c7:94:83:8f:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:70:35:35:74:73:03:39:d6:73:bd:25:09:74:7e:e4:73:da:98:3f
Fingerprint (sha256): f6:58:2c:64:cd:97:e0:71:a9:6b:1c:6c:c2:b9:96:d0:1d:12:6d:1d:e0:0c:92:42:67:92:b7:8f:d3:e2:87:7d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dmenz.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dmenz.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a10magazine.com
*.abecarteologia.com
*.academiapinup.com
*.acecsn.com
*.affinitywayer.co.uk
*.albohes.com
*.auctioncity.us
*.biorichdayspa.com
*.consumerrights.co.za
*.disto.tv
*.dmenz.de
*.dodoolan.com
*.doppelschwert.de
*.enzosgvpizza.com
*.equilibrio.es
*.euthyreose.de
*.fixedagent.com.au
*.fnks23.com
*.freepornohub.biz
*.gallenblasenpolypen.de
*.grefe.eu
*.handymanonline.com.au
*.ibyway.com
*.internationalconference2023.org
*.intrrove.com
*.janatadalunited.online
*.krankenversicherungde.de
*.loginausi.com
*.logitech-driversupport.com
*.look8.club
*.mirtilhos.eu
*.multicsforo.com
*.myelolipom.de
*.newztype.com
*.nikki-todd-catering.co.uk
*.onlinereceipts.com.au
*.pcbloging.com
*.pharmaciedelaportejeunelafayette.com
*.pinhighleft.com
*.rotationurinary.com
*.rotor-syndrom.de
*.schwellenpotential.de
*.sheacranial.com
*.sirenmovingcompany.com
*.theozonestudio.com
*.vdjplus.com
*.windows7bulgaria.com
*.xn--ksehersteller-bfb.de
*.xn--skandinavischembel-r3b.de
*.xrosemarysev.com
a10magazine.com
abecarteologia.com
academiapinup.com
acecsn.com
affinitywayer.co.uk
albohes.com
auctioncity.us
biorichdayspa.com
consumerrights.co.za
disto.tv
dmenz.de
dodoolan.com
doppelschwert.de
enzosgvpizza.com
equilibrio.es
euthyreose.de
fixedagent.com.au
fnks23.com
freepornohub.biz
gallenblasenpolypen.de
grefe.eu
handymanonline.com.au
ibyway.com
internationalconference2023.org
intrrove.com
janatadalunited.online
krankenversicherungde.de
loginausi.com
logitech-driversupport.com
look8.club
mirtilhos.eu
multicsforo.com
myelolipom.de
newztype.com
nikki-todd-catering.co.uk
onlinereceipts.com.au
pcbloging.com
pharmaciedelaportejeunelafayette.com
pinhighleft.com
rotationurinary.com
rotor-syndrom.de
schwellenpotential.de
sheacranial.com
sirenmovingcompany.com
theozonestudio.com
vdjplus.com
windows7bulgaria.com
xn--ksehersteller-bfb.de
xn--skandinavischembel-r3b.de
xrosemarysev.com

Other certificates including the domain name dmenz.de

(limited to 100 certificates)
dmenz.de
dmenz.de
xn--privatvertrge-lfb.de
pzpz.fun
dmenz.de
distinctive.nl
grapefruitkernoel.de
xn--ksehersteller-bfb.de
steuererklaerungs.de
debtrecovery.co.za
dmenz.de

Certificate

The complete raw certificate details for dmenz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262704006730850540290292516179989201495191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 20:06:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 20:06:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dmenz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708577955056487473973498151446604701685322510566269719103590185681357949276806024881936742268566549351953430717527728584624820031280115298424246317907548333487671450593344184489279952414729701721883539318625234155644148989691338748264293642996652280382597882854709408436017317524484460449479829871077142925632984229339967473358569775401671028349606737706000472933633027631256723571151084143430342916813324939260297771603334501621227720262083550106623102170073607697443297637034647651987435114093997115518066812455539292430899659684585973090098372325850564213310167252337069213757404578025859610059622418998657967303860519608933303236413717753141041230061527092644097632366447527945275989764737485406918168641417590881137380014626646288080242986652665938940673764840688009235282097577901485930916195424137330522211096197364430345272678998881042609375405688974358160841119052975528888219403730189816904846004398425467612219710991043914883793220568074381457441752640966158751154486722866541465777847685687301393926785197280724576353370879602439776203249705339348336938382592586354358955070597970382577060894689484709903017033907649742813038756761233846288070218040194059091737139217852227298587664787260998884827359511280227052566168689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7b983bc3eb6bd3a7f5f5a09bced2ec794838faa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a10magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abecarteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.academiapinup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acecsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affinitywayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albohes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctioncity.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biorichdayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumerrights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodoolan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doppelschwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enzosgvpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equilibrio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euthyreose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixedagent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fnks23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freepornohub.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallenblasenpolypen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grefe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handymanonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibyway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internationalconference2023.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intrrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janatadalunited.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krankenversicherungde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loginausi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech-driversupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.look8.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirtilhos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multicsforo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myelolipom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newztype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikki-todd-catering.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinereceipts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcbloging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmaciedelaportejeunelafayette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinhighleft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotationurinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotor-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwellenpotential.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheacranial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sirenmovingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theozonestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vdjplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windows7bulgaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ksehersteller-bfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--skandinavischembel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xrosemarysev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a10magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abecarteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academiapinup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acecsn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitywayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albohes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctioncity.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biorichdayspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerrights.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodoolan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doppelschwert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enzosgvpizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equilibrio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euthyreose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixedagent.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnks23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freepornohub.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallenblasenpolypen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grefe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handymanonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibyway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internationalconference2023.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrrove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janatadalunited.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krankenversicherungde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginausi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitech-driversupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'look8.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirtilhos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multicsforo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myelolipom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newztype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikki-todd-catering.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinereceipts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbloging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmaciedelaportejeunelafayette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinhighleft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotationurinary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotor-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwellenpotential.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheacranial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirenmovingcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theozonestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdjplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows7bulgaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ksehersteller-bfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--skandinavischembel-r3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrosemarysev.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2f5633770000040300473045022100b525230558de07d674c3d602b8c81e9f119a5c16e4c3d3912e7a600d33420b6202202ae9e1b85aef1244195476aed8238c2a4b911a6241357ae4996b605c1797a86300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2f5633ce0000040300473045022100f7ff1f6c3aed476c9dd7f7dc8ae9bdfd2fe5b346099a71a21bfd7ea9de313af702202d75425e3e55007dfdc67354b36dc612feeb19d024ee31001980a3bd967650cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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