billigerfluege.ch

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:44:8e:e4:50:05:1a:2d:75:af:ed:44:61:80:70:5a:79 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=billigerfluege.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:a9:44:8e:e4:50:05:1a:2d:75:af:ed:44:61:80:70:5a:79
Serial Number (int): 406047993177276094842206474899305991789177
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fa:3c:d7:0a:00:e5:1a:bb:7c:7c:6e:0b:4f:e6:d9:df:25:26:6b:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:c8:c7:e8:19:df:9c:5e:7d:80:ee:e7:79:6a:36:0b:e0:ef:e4:1c
Fingerprint (sha256): f7:67:2e:86:af:73:4c:74:20:be:63:49:e3:ab:5e:36:fe:c6:af:46:5a:2d:b1:47:e8:2c:53:3a:40:38:39:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate billigerfluege.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for billigerfluege.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.athenag.com
*.bestprograminglanguagefor.me
*.bestsapps.com
*.billigerfluege.ch
*.boatie.com.au
*.brostata.de
*.cardreader.co.za
*.checkershistory.com
*.dakryozystitis.de
*.farshir.com
*.fitoutsolutions.com.au
*.gantert.eu
*.ggtcagba.org
*.hax.life
*.jewal.eu
*.leriche-syndrom.de
*.lovetoshoprewards.co.uk
*.markschwammniere.de
*.mdr69.cc
*.mrsolves.com
*.natuurwinkels.be
*.nerinaazad.cc
*.neutrophilie.de
*.noticializando.com
*.perfectcaresalons.com
*.pesonaedusolution.com
*.pikyanga.com
*.polos.com.au
*.prebu.net
*.president-men.com
*.recentmagazine.com
*.sejongstudent.com
*.shuchstore.co.uk
*.stromabrechnungen.de
*.sumeru.group
*.surveyboard.cc
*.taschenklappen.de
*.thekicklahoma.com
*.wohnungspflanzen.de
*.x0n0x.com
*.xn--auszugsschrnke-gib.de
*.xn--berzuckerung-clb.de
*.xn--cholesterindit-iib.de
*.xn--hngeampel-v2a.de
*.xn--hpftier-n2a.de
*.xn--lid-una.de
*.xn--mikrne-eua.de
*.xn--sextauschbrse-rmb.de
*.xn--travestieknstler-szb.de
*.youteb.de
athenag.com
bestprograminglanguagefor.me
bestsapps.com
billigerfluege.ch
boatie.com.au
brostata.de
cardreader.co.za
checkershistory.com
dakryozystitis.de
farshir.com
fitoutsolutions.com.au
gantert.eu
ggtcagba.org
hax.life
jewal.eu
leriche-syndrom.de
lovetoshoprewards.co.uk
markschwammniere.de
mdr69.cc
mrsolves.com
natuurwinkels.be
nerinaazad.cc
neutrophilie.de
noticializando.com
perfectcaresalons.com
pesonaedusolution.com
pikyanga.com
polos.com.au
prebu.net
president-men.com
recentmagazine.com
sejongstudent.com
shuchstore.co.uk
stromabrechnungen.de
sumeru.group
surveyboard.cc
taschenklappen.de
thekicklahoma.com
wohnungspflanzen.de
x0n0x.com
xn--auszugsschrnke-gib.de
xn--berzuckerung-clb.de
xn--cholesterindit-iib.de
xn--hngeampel-v2a.de
xn--hpftier-n2a.de
xn--lid-una.de
xn--mikrne-eua.de
xn--sextauschbrse-rmb.de
xn--travestieknstler-szb.de
youteb.de

Other certificates including the domain name billigerfluege.ch

(limited to 100 certificates)
billigerfluege.ch
billigerfluege.ch
xn--hpftier-n2a.de
billigerfluege.ch
kedvezokolcsont.hu
sportmassage.com.au
billigerfluege.ch
billigerfluege.ch
billigerfluege.ch
bmw5.com.au
xn--autobungsplatz-jsb.de
billigerfluege.ch
xn--auszugsschrnke-gib.de

Certificate

The complete raw certificate details for billigerfluege.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406047993177276094842206474899305991789177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 20:56:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 20:56:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'billigerfluege.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 660000694818315322376055462011045765451282854348730273096056133899709733483284853555482002827266020999794248476431442949892407266320767335477802103234830976928251522999852125265422776084838300561736410042194490326620651500623953077426086137808977411809227678891680540403093906928336319589411953729430219016961539427302912226447095077588479280190679204616173415688560008535159114175337226895379356711966312888466888926936143338490573881250154873584431908743370894486443906958687705579532113047628057906865367070130825952504762698093191230145459719955655300375804164199989157627849534639818987215128016192795664398530969829416053786411926927853743900502651449763760123904422507482775867645818107202084062177612745545051479135614869087830665367900118088833983182925385947213965688400856715735667115010005834337167728699224073349162517311221449018486916208185770354908926481928771225469370412430055421449307623207012594767099373570518155602541399673746755759694484808514137253334463342555211306365351890247147478450397137167408989309686437302272991800019039062218914632309201847489489024984585656559612673588617597087408398860541427191717973948050561131218744521518965519101807778601141875041711468324139803144437379644766151709052212931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa3cd70a00e51abb7c7c6e0b4fe6d9df25266b94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athenag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestprograminglanguagefor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billigerfluege.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardreader.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkershistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dakryozystitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farshir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitoutsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gantert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggtcagba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hax.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewal.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leriche-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovetoshoprewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markschwammniere.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdr69.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrsolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natuurwinkels.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nerinaazad.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neutrophilie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noticializando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectcaresalons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pesonaedusolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pikyanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prebu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.president-men.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recentmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sejongstudent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuchstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromabrechnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sumeru.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surveyboard.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taschenklappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekicklahoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wohnungspflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x0n0x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--auszugsschrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--berzuckerung-clb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--cholesterindit-iib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hngeampel-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hpftier-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lid-una.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mikrne-eua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sextauschbrse-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--travestieknstler-szb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youteb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athenag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestprograminglanguagefor.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billigerfluege.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brostata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardreader.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkershistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakryozystitis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farshir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitoutsolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gantert.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggtcagba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hax.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewal.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leriche-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovetoshoprewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markschwammniere.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdr69.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrsolves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natuurwinkels.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerinaazad.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neutrophilie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noticializando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectcaresalons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pesonaedusolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikyanga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'president-men.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recentmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejongstudent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuchstore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromabrechnungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumeru.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveyboard.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taschenklappen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekicklahoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnungspflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x0n0x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--auszugsschrnke-gib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--berzuckerung-clb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cholesterindit-iib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hngeampel-v2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hpftier-n2a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lid-una.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mikrne-eua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sextauschbrse-rmb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--travestieknstler-szb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youteb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6481a417000004030046304402204d3e3b639f6114e3133b757fabec96ca20f39c135c5871ce7c9ab41b897b09fd02204a91d3f4054511fe9f9b99c6549b61520ce5368825266dcb082580d5a949e8700076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f6481a4270000040300473045022100b7458beee1d07403a9b7d42a1bc39fe5a2cc5e60850d0543346ccd05e200317b0220158bfa1e89504659eba01f965ebd43f511493a3670704d4afccf65749df91455
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005adba47bb462a6d4badcfad6ab1a60d34ce833f7c11b252117d2ee2b9ec5d9746ce7b4a444c77d386dda40fe21ac23151c1086eb012ebe690d1cff839fa371eb8a0678c2feccb6af809c1bbfdb25e2f752978831b7b85413e4858182a8be37877752ba384ba8b127321cc3e8e91ff06cd1559ae196168c82628c3c8b4824a442b20464f45f0c7165ee92290e4cc88960fb137db54acbc7d75a8e859b041c6a53ad1cf27af5e612b037ccbb32be72d848af140cc71372b00f8f2223d319bd1ce925fcc62d2e3e67c1de35db063a01ec477ac4b6f894b6078f87813a0871b17d99cced2c9c03c18a08d58e599fa3b24ff965e04e2637b126a61467ff340b0a2ed0