friontier.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:6d:99:ed:3b:e3:b8:43:46:1b:5a:f6:c9:8d:e7:d5:b2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=friontier.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:6d:99:ed:3b:e3:b8:43:46:1b:5a:f6:c9:8d:e7:d5:b2
Serial Number (int): 298913603241219896090676123873046092567986
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:31:e5:de:c7:44:9b:16:88:50:63:2e:d5:40:aa:d2:24:0e:2c:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:17:65:8e:46:f6:8f:51:e5:a8:c2:35:8b:a8:51:88:48:78:99:97
Fingerprint (sha256): fe:c7:a7:57:30:d1:9c:ee:b5:7f:8d:16:f2:37:aa:0b:78:12:05:b1:15:9b:ed:cf:fa:70:f6:27:4c:9b:6d:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate friontier.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for friontier.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.beisner.eu
*.binsonsmedicalsupply.com
*.cognizantbenefit.com
*.coinify.co.in
*.cubs.co.za
*.diagnosis.com.au
*.dietplans.com.au
*.ezcarfinance.com
*.fhrschule.de
*.freerepublc.com
*.friontier.com
*.gantrycranes.net.au
*.gayhookuponline.com
*.geicologin.com
*.gesichtsfeldmessung.de
*.getsnackpass.com
*.golf3.dk
*.historyofwwe.com
*.holidaycheckde.de
*.honorable.org
*.kategorien.de
*.livetheorangelive.com
*.mcomenity.net
*.midimole.com
*.onlinelibrary.com.au
*.pantyhose.com.au
*.patekphillipe.com
*.protecrive.com
*.prpbtp.com
*.realtyklngs.com
*.schiffsreien.de
*.shortcut.com.au
*.smalllivingspace.com
*.spicybigbutts.com
*.steuererklaeurng.de
*.sungtop.com
*.technick.de
*.thetrumpet.org
*.twick.tv
*.ump.de
*.van-tol.nl
*.volltilgungsrechner.de
*.wallbuiders.com
*.weheartpitbulls.com
*.xn--perlschnurvorhnge-3qb.de
*.xn--rauchgerte-x5a.de
*.xn--vietnamflge-1hb.de
*.xn--www-patientenverfgung-pic.de
*.zhr.de
*.zsp.com.au
beisner.eu
binsonsmedicalsupply.com
cognizantbenefit.com
coinify.co.in
cubs.co.za
diagnosis.com.au
dietplans.com.au
ezcarfinance.com
fhrschule.de
freerepublc.com
friontier.com
gantrycranes.net.au
gayhookuponline.com
geicologin.com
gesichtsfeldmessung.de
getsnackpass.com
golf3.dk
historyofwwe.com
holidaycheckde.de
honorable.org
kategorien.de
livetheorangelive.com
mcomenity.net
midimole.com
onlinelibrary.com.au
pantyhose.com.au
patekphillipe.com
protecrive.com
prpbtp.com
realtyklngs.com
schiffsreien.de
shortcut.com.au
smalllivingspace.com
spicybigbutts.com
steuererklaeurng.de
sungtop.com
technick.de
thetrumpet.org
twick.tv
ump.de
van-tol.nl
volltilgungsrechner.de
wallbuiders.com
weheartpitbulls.com
xn--perlschnurvorhnge-3qb.de
xn--rauchgerte-x5a.de
xn--vietnamflge-1hb.de
xn--www-patientenverfgung-pic.de
zhr.de
zsp.com.au

Other certificates including the domain name friontier.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for friontier.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+g8COjuAS4KTf6Pxw6Lt
dR994ca42g0Vvcurr2rPwxoHM0N/B/Inm0KCyI4fQO2dlNzf9Io3TXgp23ioizWM
r6O38ukWUnRYqMvcIBc59qo2X3wyN06riXEezXPUycNz6Ka/Z8mJXPBmqkVhe3Jx
BsCQvcEcXR3FgFqcEkOuwwZkc+PSJ1GgAgI6vS4bdiLDVnGgGzPxiqflS0GhH2s/
cmnYg9K2fkKl8ZpmTPVzyi++MKj7+SzPXPaSkdlnpkEs4sUu0MNLhhdyI/lUA4fY
uTCXVF4V/rFSB+7vT7MYMEnwEjhVgrgKDQ7/XWkud/de7DsaSuzoEzOJKV/tSpjd
jzNila2V+RsxHb5iS9mfGTIOljGSNrHAXFn0LySTA51z7IeojBVSDJSiGxwmacai
1xSE5JY7an9JnTvCUU4bp9y6NI6OwmK/Vmfq2mxVN6/KeLhUyz1wVd1aJhrtdhRe
aVWputcMFDbsLJnu8rUx1gL+9BV8pYIVEoCdiVzUPq++sMVcsK15HuZ9WW2kFoJr
sUJ1wSE+9hyp87N5wgGHd3yNxXqqvQf5ObgxucCpmRc14TTxY+Yc3IwFUewXkVt0
2S2s9mFS8zJiFIZIW+traqER+u7uplmhYv1iXNfBbCNGbw7wpyr7KU0Z1pEvLax2
98/MJLQNmHRywYZANNCP1G8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298913603241219896090676123873046092567986
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 10:57:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 10:57:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'friontier.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1020150197310629655827144307105363197287983627716581617824398632104828904767566090276703944255513009206883946151404538228315250080879145893336674612974523094064383204490806632837320721586819924052248753846975945998805194925617927969843124656910867588402810537129812066778255097419607266314038981588132972970652057994251827370685055079502801048657108993901184732474028355061195270889443719199788632018644586114187351061370209250255965488884701553420675605196815823655168298355948550978190272843686645316447784872525361570468431145501956593471640781841389025651107567394299699310733516911160415269465946932345532095008902149906548853697105547068935620067475597551460373613630214652283217158732655299705877506758328218910776756365770857796385411919958878912010453745596843524964509116045337756763619960485762296033331302128744314612081765866025625901461249172155785484835326507009158722432677029388750256037641214291869644205948134516129527361672012567844089039424852839390635737681587667041849204958183970935946429384998988906072453239280229469546803120630451175756546959070406926991830620047895719714651459343503592786778024523178917087988561352050918765957683444525213021707542474083540029013018778179594733393733137221030608546813039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da31e5dec7449b168850632ed540aad2240e2cb2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1866 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beisner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binsonsmedicalsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cognizantbenefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinify.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cubs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diagnosis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dietplans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezcarfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fhrschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freerepublc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gantrycranes.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gayhookuponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geicologin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesichtsfeldmessung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getsnackpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golf3.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historyofwwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holidaycheckde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honorable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kategorien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livetheorangelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcomenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midimole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinelibrary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pantyhose.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patekphillipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protecrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prpbtp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realtyklngs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schiffsreien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortcut.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smalllivingspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spicybigbutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererklaeurng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sungtop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetrumpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ump.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.van-tol.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volltilgungsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallbuiders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weheartpitbulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--perlschnurvorhnge-3qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--rauchgerte-x5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vietnamflge-1hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--www-patientenverfgung-pic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zsp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beisner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binsonsmedicalsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cognizantbenefit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinify.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietplans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezcarfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fhrschule.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freerepublc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friontier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gantrycranes.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayhookuponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geicologin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesichtsfeldmessung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsnackpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golf3.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historyofwwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaycheckde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorable.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kategorien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetheorangelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcomenity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midimole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinelibrary.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantyhose.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patekphillipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protecrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prpbtp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtyklngs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schiffsreien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortcut.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smalllivingspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicybigbutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererklaeurng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sungtop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrumpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twick.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ump.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'van-tol.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volltilgungsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallbuiders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weheartpitbulls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--perlschnurvorhnge-3qb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--rauchgerte-x5a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vietnamflge-1hb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--www-patientenverfgung-pic.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zsp.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018baecb85640000040300473045022008c05197ea389895da50af71a21778606d5988542a951d113fe113452706825d022100afc045cc926f6bb63282de772a3076f382c215532822821af5becbeac3cd571c00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018baecb85b20000040300483046022100b3db5ea80785ca7f8a6d5dd0ad975b3323a64dc2d2802a5733497a4a7eeb043e022100b6b6a0e8cfba9390e27229a73d149e7a28cc828c8a19b19f48ceae71f4aa3849
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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