giotnuoc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d2:67:d5:1b:0d:e7:e7:cf:d4:5d:a3:5d:4d:eb:c4:00:54 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=giotnuoc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:67:d5:1b:0d:e7:e7:cf:d4:5d:a3:5d:4d:eb:c4:00:54
Serial Number (int): 332934171840201328212235253753601912471636
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:8f:1d:3d:ff:98:28:dd:1b:dd:b3:0f:61:92:16:6f:d2:b8:69:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:ff:7d:d8:ec:7f:40:b6:66:50:82:5b:16:35:ea:a9:4a:4d:97:57
Fingerprint (sha256): 02:2e:5c:3f:2b:87:c9:88:ed:5a:11:c1:54:63:30:c1:53:fe:d1:a1:32:09:b9:aa:64:31:e4:b7:09:96:a6:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate giotnuoc.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giotnuoc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aboubacar.com
*.algunavez.com
*.almassar.com
*.anado.com
*.arejonandlizmarriedyet.info
*.atlantictires.com
*.beikmann.com
*.blendred.com
*.cemiteriomemorial.com
*.cinemaschool.com
*.cortebella.com
*.crpuzzles.com
*.diegel.com
*.ekvoetbal.com
*.gaillarde.com
*.galeriaespacio.com
*.gigisbridal.com
*.giotnuoc.com
*.godescarga.com
*.hadjar.com
*.harib.com
*.hironaga.com
*.ketzwellness.com
*.kexian.com
*.masfund.com
*.moon-page.com
*.myperfectpc.com
*.news-us.co
*.nutrilicious.com
*.okhotsk-chocolatier.com
*.oroszi.com
*.perahu.com
*.plugaru.com
*.portugalparabrasileiros.com
*.prepaidreload.com
*.proxycode.com
*.quitartatuajes.com
*.rte23.org
*.sagira.com
*.serweb.com
*.snugglie.com
*.snusk.com
*.solutionbrokers.com
*.terzolo.com
*.turbulencia.com
*.utilitiesservices.com
*.veleshta.com
*.wyles.com
*.xkirrabeach.com.au
*.yesica.com
aboubacar.com
algunavez.com
almassar.com
anado.com
arejonandlizmarriedyet.info
atlantictires.com
beikmann.com
blendred.com
cemiteriomemorial.com
cinemaschool.com
cortebella.com
crpuzzles.com
diegel.com
ekvoetbal.com
gaillarde.com
galeriaespacio.com
gigisbridal.com
giotnuoc.com
godescarga.com
hadjar.com
harib.com
hironaga.com
ketzwellness.com
kexian.com
masfund.com
moon-page.com
myperfectpc.com
news-us.co
nutrilicious.com
okhotsk-chocolatier.com
oroszi.com
perahu.com
plugaru.com
portugalparabrasileiros.com
prepaidreload.com
proxycode.com
quitartatuajes.com
rte23.org
sagira.com
serweb.com
snugglie.com
snusk.com
solutionbrokers.com
terzolo.com
turbulencia.com
utilitiesservices.com
veleshta.com
wyles.com
xkirrabeach.com.au
yesica.com

Other certificates including the domain name giotnuoc.com

(limited to 100 certificates)
giotnuoc.com
giotnuoc.com
propetysex.com
giotnuoc.com
keshishyan.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
tefillah.com
giotnuoc.com

Certificate

The complete raw certificate details for giotnuoc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332934171840201328212235253753601912471636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 21:17:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 21:17:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giotnuoc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853491196984909763485957021569232806204085715164744636222843495298401722545070267354053550820059611000442661395723924578818563110926778449741822014863450945799447886286126229892023092254444490193473162176246077217647666565811158501433114518452742010089445276000556961360118518601449345008600963372655025041156858429989214554245861124236259783910298697223916735732009407114586940944064778949731792962188451400837548711064929337382791157766833063857616614265093128682211964579250470925378586711873462716335029383398906583213755113580201881137186814119597394738320110924352749128928492743372199756080673429308471068878104876741143762141487162028229216892648720346410451570494862992302985155417064190707081620843313415073673800852215900427629824001202112940356686476546975370419515183219499011683040387160095676418283312843546397675586617920605363786548903397466567284572562536931483665498650030435584868171330531168609551172984242384495918327553596868758104095923909935033815089906512911811193946094444945232198074480290322502038905951597417224557099853346960634820629130083996495113126361088557380231995026675431884661526026492467343803297860572147713329281644394852833234962757074837370066525334369745254781217875789789246078282512167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb8f1d3dff9828dd1bddb30f6192166fd2b869aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboubacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almassar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantictires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beikmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cortebella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekvoetbal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaillarde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galeriaespacio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigisbridal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hadjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myperfectpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-us.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrilicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oroszi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plugaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxycode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sagira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snugglie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snusk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solutionbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terzolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turbulencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utilitiesservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veleshta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xkirrabeach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboubacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almassar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantictires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beikmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortebella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekvoetbal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaillarde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeriaespacio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigisbridal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadjar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myperfectpc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-us.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrilicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oroszi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plugaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxycode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sagira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snugglie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snusk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutionbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terzolo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbulencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utilitiesservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veleshta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xkirrabeach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0f33c5f80000040300483046022100ba7d750af2dad1dbbfe6fea2e394822aafe8bbfebff5a2dbbd7749ba231b5de202210094bdd54e6543f753f1cad78f771954031484a6468746798f8de175102147cef7007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d0f33c617000004030046304402205281c9b95bf75d68e964505323d6cc4f23158a76c4d35fef145d03872d78c69b022053e7d631119538b973d2ad8950141d13559f35913922c6047db3ed3422e81b15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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