betika.co

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:ea:68:a4:08:20:c1:2b:e7:82:77:7c:4d:7d:99:08:c5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=betika.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:ea:68:a4:08:20:c1:2b:e7:82:77:7c:4d:7d:99:08:c5
Serial Number (int): 322899266517895758648929876526608649095365
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:61:26:6f:db:03:99:38:89:ec:54:ff:e2:27:b0:30:ac:d5:9c:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:b1:7b:a3:c3:7e:53:9b:27:c6:af:e3:14:d6:1b:81:9e:9e:a8:e7
Fingerprint (sha256): f9:7d:22:a4:42:87:a8:e1:39:61:ae:83:18:b6:54:8d:80:90:04:be:78:43:6e:d7:6b:79:71:c3:cd:ab:44:ae

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate betika.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for betika.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1xbot.org
*.agneswateraccommodation.com.au
*.amaurosis-fugax.de
*.ather.net
*.auskultation-der-lunge.de
*.australianwebsurvey.com.au
*.bannister.com.au
*.basements.com.au
*.betika.co
*.blow-out-fraktur.de
*.characteas.com
*.christ-chan.net
*.cruisejob.com.au
*.designershirts.com.au
*.electricknife.com.au
*.femoroacetabulaeres-impingement.de
*.fotb416.com
*.gebaermutterspiegelung.de
*.glcarbon.com
*.globaltextil.com
*.gtvbrasil.online
*.heisshungeranfaelle.de
*.hkmoaxmessydesk.com
*.hongrg5.cc
*.hotredheadnextdoor.com
*.immunologisches-gedaechtnis.de
*.installers.com.au
*.intrazytoplasmatische-spermieninjektion.de
*.legacyhadinh.com
*.llamberbarcelona.com
*.mitralklappenprolapssyndrom.de
*.mund-fuss-krankheit.de
*.myjobsuccess.com.au
*.mynsm.co
*.nadiesabeloquevaapasarmana.info
*.norwoodresourcecenter.org
*.notfall-globuli.de
*.popoutposter.com
*.representatives.com.au
*.ricepudding.com.au
*.skater.com.au
*.smana.net
*.stumpremovals.com.au
*.thuja-homoeopathie.de
*.tracksuit.com.au
*.welches-homoeopathische-mittel.de
*.xn--billigeflg-ieb.de
*.xn--hmatopneumothorax-qqb.de
*.xn--hmoglobinabbau-5hb.de
*.yulenft.net
1xbot.org
agneswateraccommodation.com.au
amaurosis-fugax.de
ather.net
auskultation-der-lunge.de
australianwebsurvey.com.au
bannister.com.au
basements.com.au
betika.co
blow-out-fraktur.de
characteas.com
christ-chan.net
cruisejob.com.au
designershirts.com.au
electricknife.com.au
femoroacetabulaeres-impingement.de
fotb416.com
gebaermutterspiegelung.de
glcarbon.com
globaltextil.com
gtvbrasil.online
heisshungeranfaelle.de
hkmoaxmessydesk.com
hongrg5.cc
hotredheadnextdoor.com
immunologisches-gedaechtnis.de
installers.com.au
intrazytoplasmatische-spermieninjektion.de
legacyhadinh.com
llamberbarcelona.com
mitralklappenprolapssyndrom.de
mund-fuss-krankheit.de
myjobsuccess.com.au
mynsm.co
nadiesabeloquevaapasarmana.info
norwoodresourcecenter.org
notfall-globuli.de
popoutposter.com
representatives.com.au
ricepudding.com.au
skater.com.au
smana.net
stumpremovals.com.au
thuja-homoeopathie.de
tracksuit.com.au
welches-homoeopathische-mittel.de
xn--billigeflg-ieb.de
xn--hmatopneumothorax-qqb.de
xn--hmoglobinabbau-5hb.de
yulenft.net

Other certificates including the domain name betika.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for betika.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9h+3VBw7WszFENlubag8
C+20vjtNp90Dc9Ix+2ROyML6GoNYKSVnhc00a8z5BELBZsDy4+DlFnhgsBoNiLYA
1V4Iy6JCmX8j1MVDGmba/omKf8jI22dNi9899x0O5HQ7fKAhJpsDuLQVGPjXcncn
Yc3pAueTlL27dOrh4S+qMG1UtolKh14oB5ebjROwGLOziYKgUPyKYwqJGYm3eF/D
OVekcN9azqy8RCAbLIxrU/nXox6qpEPfloYEJxnHRCe2pFOkrL9dAXUbLzlhrZjp
tJCX7DntI7Jhw5iT76PS9UvUD5M6Sx+nvjjRJD+I6MvTxVWO2/XGsL/xbiekLjwC
Cq2ADHAZCtJ+4rUahggCBkO1PYI921Wmn0ag/roFSh7IHxYfr75KsssjP1ZK96zI
vx7mDinjAEmrNHHOZIzPbOEM0uez+ER8P18Wovyep6iRm6271kpOFX//1klSIqAd
g90iwgb/41txiE18eFTKQZmzaFqd+W+FDk0sDxODBvYD3ME/BY3CAVB5ARoM994e
9ZN5t92b4VV/EznnsMt2QVTdWWYTW9q4QdRwTyJDwDG6Qo6zhQ3FHhOyPv2xLU8+
i0QBUOmPKiA74fsGiWB15kum6TrO1hwO9pvKHWmSc/Y9eX7FO/3tiRNvYL+wQnQr
cfA60DxJph//TLqzqptKO+ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322899266517895758648929876526608649095365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 21:24:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-09 21:24:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'betika.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1004097872412927284386426952286251648408290448489354596735549158317406918116252551000159006853608126486030899668228655004930683952581262756848880182423654326254960499559328613708216182371660189539021334918181653739395100274755567114553254094453257366598060435182704560776492292704368035975161292583329157877785573564131986670951241779626925179935770257022462002504087141195076253344282949906808765730694149153176543621386900065269044195472809391203754478134675983078774910456598171997839390883783789973766685984817998362079405485487400514550235185208971416928839077456172444536645418053742663297857797017135173328332842539434207646067057258026991507948609054355143070025026917959385128097894453333061120203288027157540433475993298359775513696747999936024867055983946859256139873017579315542332197826664274659082848450892698309597731577797074782368464829894033666264643077819740152912047149306477380367309640647462938838118043896050852842265957638875511250811272582221197257671340743178179867489018716689592392295931260097843579277278242231098289658234417199477325465365586048549452846262916830084932933721486118572627907725978864512782765428830355213265053340382523667957638952665068312173598822209614150907478168131264898841484868577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce61266fdb03993889ec54ffe227b030acd59cd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1xbot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agneswateraccommodation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amaurosis-fugax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ather.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auskultation-der-lunge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.australianwebsurvey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bannister.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basements.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betika.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blow-out-fraktur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.characteas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christ-chan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruisejob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designershirts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electricknife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femoroacetabulaeres-impingement.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotb416.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gebaermutterspiegelung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glcarbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globaltextil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtvbrasil.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heisshungeranfaelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkmoaxmessydesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongrg5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotredheadnextdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immunologisches-gedaechtnis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.installers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intrazytoplasmatische-spermieninjektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacyhadinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llamberbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitralklappenprolapssyndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mund-fuss-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myjobsuccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynsm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nadiesabeloquevaapasarmana.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norwoodresourcecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notfall-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popoutposter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.representatives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ricepudding.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skater.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stumpremovals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thuja-homoeopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tracksuit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welches-homoeopathische-mittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--billigeflg-ieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmatopneumothorax-qqb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmoglobinabbau-5hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yulenft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1xbot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agneswateraccommodation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaurosis-fugax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ather.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auskultation-der-lunge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'australianwebsurvey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannister.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basements.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betika.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blow-out-fraktur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'characteas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christ-chan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruisejob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designershirts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electricknife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femoroacetabulaeres-impingement.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotb416.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebaermutterspiegelung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glcarbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltextil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtvbrasil.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heisshungeranfaelle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkmoaxmessydesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongrg5.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotredheadnextdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunologisches-gedaechtnis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrazytoplasmatische-spermieninjektion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyhadinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llamberbarcelona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitralklappenprolapssyndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mund-fuss-krankheit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjobsuccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynsm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nadiesabeloquevaapasarmana.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norwoodresourcecenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notfall-globuli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popoutposter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'representatives.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricepudding.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skater.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stumpremovals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thuja-homoeopathie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracksuit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welches-homoeopathische-mittel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--billigeflg-ieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmatopneumothorax-qqb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmoglobinabbau-5hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yulenft.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e2f9e1e1a0000040300473045022073ae2cad8b52c65e9ed9a4ecbf0778b94af54fb8edee401746b0b420e940e583022100c7455b2002ece50a9407d27081600366f2f72bddb886f28121cc0f3b34f94579007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e2f9e1de50000040300483046022100b9961d533c50417bc9b7032fb3381cbf9864473f0047dfc2030c9148fee2ba7e022100dfc8a80e6f4bc551bab5228eca605bd6546860e58ece3ba3e0c01394e766a1d5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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