goyaa.io

Issued by R3

About this certificate

This digital certificate with serial number 04:a8:e4:7c:04:ea:5c:bb:ee:05:9f:c4:99:0d:3c:87:97:89 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=goyaa.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:e4:7c:04:ea:5c:bb:ee:05:9f:c4:99:0d:3c:87:97:89
Serial Number (int): 405920289297305795842993875362786792937353
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:cb:3b:83:9f:15:b9:0d:6f:8d:b3:b8:00:69:ba:45:eb:44:53:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:ac:33:82:32:f2:df:f1:af:6c:87:6a:e1:fb:48:bb:bd:ea:2d:98
Fingerprint (sha256): 03:58:cd:25:d6:0a:90:d2:e5:2f:c5:9d:a7:da:bd:86:84:97:ca:e1:f2:a3:ec:bb:4c:92:6c:ac:1c:49:78:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate goyaa.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goyaa.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.24dose.net
*.2kmovies.net
*.adamsmarkhotel.com
*.adventurescuba.com
*.alexandergrahambell.com
*.alimentostransgenicos.info
*.baret.com
*.bigthundergoldmine.com
*.bowelmovements.com
*.century21dnd.com
*.childcareconnect.co
*.contesto.me
*.creativewebdesigns.com
*.devanlowe.com
*.fdz.com.pl
*.frontiertel.com
*.ggarvin.com
*.glcmcrusaders.org
*.goolfstat.com
*.gotanyx.com
*.goyaa.io
*.gracecarrers.com
*.hoshinosora.com
*.hsbcrewards.com
*.jmttw.me
*.ltf.com.au
*.luftansaair.com
*.managerock.com
*.mobilnigeria.com
*.mytrailgroomer.com
*.nerflux.com
*.oleron-caravanes.com
*.olkowiczcvk.com
*.poodleskirt.com
*.royalcaribeancruiseline.com
*.smartdeals360.com
*.stapeseasyrebates.com
*.stillsmokingwi.com
*.studiotex.pro
*.surecutter.com
*.tasteofthecityny.com
*.threewheelbike.com
*.topdon.pro
*.tvkim02.com
*.urdupiont.com
*.webpagecontest.com
*.wiltonprinting.com
*.zubasearch.com
*.zuukoo.co
*.zypherhillswater.com
24dose.net
2kmovies.net
adamsmarkhotel.com
adventurescuba.com
alexandergrahambell.com
alimentostransgenicos.info
baret.com
bigthundergoldmine.com
bowelmovements.com
century21dnd.com
childcareconnect.co
contesto.me
creativewebdesigns.com
devanlowe.com
fdz.com.pl
frontiertel.com
ggarvin.com
glcmcrusaders.org
goolfstat.com
gotanyx.com
goyaa.io
gracecarrers.com
hoshinosora.com
hsbcrewards.com
jmttw.me
ltf.com.au
luftansaair.com
managerock.com
mobilnigeria.com
mytrailgroomer.com
nerflux.com
oleron-caravanes.com
olkowiczcvk.com
poodleskirt.com
royalcaribeancruiseline.com
smartdeals360.com
stapeseasyrebates.com
stillsmokingwi.com
studiotex.pro
surecutter.com
tasteofthecityny.com
threewheelbike.com
topdon.pro
tvkim02.com
urdupiont.com
webpagecontest.com
wiltonprinting.com
zubasearch.com
zuukoo.co
zypherhillswater.com

Other certificates including the domain name goyaa.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for goyaa.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405920289297305795842993875362786792937353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 16:22:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 16:22:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goyaa.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807909681688288763215188007457584837856281804585887535155259537942926217185604043321065416588598232082860869233908699969987474754160183143231944036545158063664262311373686798765544783381752368556655675694374244380066370511449348276634723378415885343754118709867702807451834127384824147672628280707685532133776172768763168160924761341072598378516721750370115574889365809927406218204701537760175386167489511078070273512207822184713369992863987624047807778821069216271687792449923356218437981798368932431232570290542000718213470856472155674528580522737112678853551028047735709689873767395085512150944212204153547303889876801844477889210870195517790512682586637905620699358177887362985316121075931502085749949586034794003614906676056987841661668943662793668080800967771876646696562470155752176996513293667079190136729624306262831665779228418282536996475308933684955938698012352970633546818883004867885701786949374577033653415547714950410528990197748245925300942685074309127530455467288522550868756535774093223134998842294646452615181928470425825725642600183531879668104540018992926776056691488082615865755801352813155084098397199647000576776448963080098708453085413277820096450079495596285759760526188813109929055760354612916944065980153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ecb3b839f15b90d6f8db3b80069ba45eb445336
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24dose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2kmovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alimentostransgenicos.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childcareconnect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contesto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glcmcrusaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goolfstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotanyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goyaa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gracecarrers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoshinosora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmttw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managerock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytrailgroomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nerflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oleron-caravanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olkowiczcvk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartdeals360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stillsmokingwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studiotex.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surecutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tasteofthecityny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topdon.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvkim02.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuukoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zypherhillswater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24dose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2kmovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alimentostransgenicos.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childcareconnect.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contesto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glcmcrusaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goolfstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotanyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goyaa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracecarrers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoshinosora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmttw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managerock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytrailgroomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oleron-caravanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olkowiczcvk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdeals360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillsmokingwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiotex.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surecutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasteofthecityny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topdon.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvkim02.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuukoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zypherhillswater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e529600840000040300483046022100fd78d7d35c278c0e66d8bb4040486a9497ed35dd437e9fd4fd64fd89b0f4fb8e022100a381729c5f6956afc2d5570374397c5d70deca287b75e9af2f330f420a55e819007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e5296015b0000040300483046022100ec2f0e563c7da0c74f141c594be4aa02f540ea0038cb24d89c6ed52258a82244022100f12e3455921bd8da61e91fb0c5e8dff5559dfc283c838037ce97ac26d1404b66
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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