prediksihongkong.info

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:98:6f:e6:a0:b4:28:9a:91:b9:9b:96:a7:b0:a2:9d:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prediksihongkong.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:98:6f:e6:a0:b4:28:9a:91:b9:9b:96:a7:b0:a2:9d:15
Serial Number (int): 406499769781597601184717135753937298824469
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:a9:b1:23:b3:aa:85:28:2c:d8:ef:db:02:da:6f:c4:f5:b4:4d:8c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c8:8f:2f:3d:b8:9f:74:9b:44:7e:27:8d:62:3a:15:2b:58:bc:e9:1f
Fingerprint (sha256): f7:4a:4c:e2:9d:21:e8:d4:bf:e4:e0:8e:d8:19:4d:d0:4e:5b:bb:24:1d:39:c2:42:eb:81:6d:76:01:37:b9:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prediksihongkong.info

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prediksihongkong.info

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airmax.pro
*.alphasigcornell.org
*.baumwollzelte.de
*.bycher531-biglobe.xyz
*.cargarus.co.uk
*.chiba-0003.xyz
*.completely.com.au
*.deloiyte.com
*.drugprevention.co.za
*.femoutland.com
*.flesjes.be
*.footbite.cc
*.gesichtsmuskeln.de
*.gsp-games.co.uk
*.hobartraces.com.au
*.hueftoperationen.de
*.inhome.com.au
*.kagga.de
*.macleod.net.au
*.marcopoloshoop.it
*.moutinho.eu
*.myalii.com
*.nazi.com.au
*.onestepconsult.com
*.otino.co.uk
*.petbed.com.au
*.pokertables.co.za
*.prediksihongkong.info
*.rentcollection.co.za
*.rstv.sk
*.rumpelstilchen.de
*.samtheman.com.au
*.schwartenbretter.de
*.silvesterkurzurlaub.de
*.stromtrife.de
*.tempestorders.co.uk
*.thesimplethings.com.au
*.trikuspidalklappe.de
*.wimpernpflege.de
*.workmens.org
*.wurzelrechnen.de
*.xn--bachbltenmischung-72b.de
*.xn--feldhockeyschlger-3qb.de
*.xn--gemsekalender-yob.de
*.xn--haarkmme-4za.de
*.xn--hkelmodelle-l8a.de
*.xn--motoradbrse-yfb.de
*.xn--trkeyurlaub-thb.de
*.xn--tularmie-4za.de
*.xtc.com.au
airmax.pro
alphasigcornell.org
baumwollzelte.de
bycher531-biglobe.xyz
cargarus.co.uk
chiba-0003.xyz
completely.com.au
deloiyte.com
drugprevention.co.za
femoutland.com
flesjes.be
footbite.cc
gesichtsmuskeln.de
gsp-games.co.uk
hobartraces.com.au
hueftoperationen.de
inhome.com.au
kagga.de
macleod.net.au
marcopoloshoop.it
moutinho.eu
myalii.com
nazi.com.au
onestepconsult.com
otino.co.uk
petbed.com.au
pokertables.co.za
prediksihongkong.info
rentcollection.co.za
rstv.sk
rumpelstilchen.de
samtheman.com.au
schwartenbretter.de
silvesterkurzurlaub.de
stromtrife.de
tempestorders.co.uk
thesimplethings.com.au
trikuspidalklappe.de
wimpernpflege.de
workmens.org
wurzelrechnen.de
xn--bachbltenmischung-72b.de
xn--feldhockeyschlger-3qb.de
xn--gemsekalender-yob.de
xn--haarkmme-4za.de
xn--hkelmodelle-l8a.de
xn--motoradbrse-yfb.de
xn--trkeyurlaub-thb.de
xn--tularmie-4za.de
xtc.com.au

Other certificates including the domain name prediksihongkong.info

(limited to 100 certificates)

Certificate

The complete raw certificate details for prediksihongkong.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406499769781597601184717135753937298824469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 18:50:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 18:50:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prediksihongkong.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752909482466935224386239491389698190555174489209577416836859891912115541291169323965087125486731604706747599166456238580879765352813034972440838594061361941918456005318676944386484646595627784578148008227879022990770613742169135299194200385778648227744622949111145488939204113294051607919856911910975200815426284108335688883686550606217868468802947465443689280381506003831164383742201438773299385323122710810525813059988884426362731041219925435658689620813758430256565675513304547060026864938834083884774015821585287169500465602790563337694571977985577534131838714421079929521615115879341050113539656808135025016780488199039346504042919667406290308312456432301497697448998511236150166308364276504190493685396291088766318571818324838729701282869530813610569262350154482360292748204300833741450528139167560806522904507516893138119601163361114472492056681485694005923982432292417108833649946316929453046962053082151489587617075873866873481492918346654526568834728076900000088817326218920725935947633713927232063715428050098910151453429984368099595853951528635258268225348041838546657672671695675971697909386432531141887584697979867675864308938296830023469182515945175758787596808321879563992891744437604573024265173225570821335185377417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1a9b123b3aa85282cd8efdb02da6fc4f5b44d8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airmax.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alphasigcornell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baumwollzelte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bycher531-biglobe.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cargarus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiba-0003.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.completely.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deloiyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drugprevention.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femoutland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flesjes.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footbite.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesichtsmuskeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsp-games.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobartraces.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hueftoperationen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kagga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleod.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcopoloshoop.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moutinho.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myalii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nazi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onestepconsult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petbed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokertables.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prediksihongkong.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentcollection.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rstv.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumpelstilchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samtheman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwartenbretter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvesterkurzurlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromtrife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempestorders.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesimplethings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trikuspidalklappe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wimpernpflege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workmens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wurzelrechnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bachbltenmischung-72b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--feldhockeyschlger-3qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--gemsekalender-yob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--haarkmme-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hkelmodelle-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--motoradbrse-yfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--trkeyurlaub-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tularmie-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xtc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airmax.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphasigcornell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baumwollzelte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bycher531-biglobe.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargarus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiba-0003.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completely.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deloiyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugprevention.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femoutland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flesjes.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footbite.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesichtsmuskeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsp-games.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobartraces.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hueftoperationen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kagga.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macleod.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcopoloshoop.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moutinho.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myalii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nazi.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onestepconsult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otino.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petbed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokertables.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prediksihongkong.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentcollection.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstv.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumpelstilchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samtheman.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwartenbretter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvesterkurzurlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromtrife.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempestorders.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesimplethings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trikuspidalklappe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wimpernpflege.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workmens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wurzelrechnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bachbltenmischung-72b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--feldhockeyschlger-3qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gemsekalender-yob.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--haarkmme-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hkelmodelle-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--motoradbrse-yfb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--trkeyurlaub-thb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tularmie-4za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtc.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e2f10a9bf0000040300473045022100c445f74f7750317f46e166e2de8adfe269034fd378fbe537945baaf3b65139a2022063e390d8183a3a2724e8bb4513398678b1f14d61000ae5a921d612a86bb67df9007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e2f10a9be0000040300483046022100abefe00087c3df2a07cb833c8c8a2448bd014735a70ec6123f5472ddb989c6c20221008ed085605abb848f4e71e55923152c67184fb9304bb61e6528bf64383fb35566
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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