comtmz.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8a:8f:79:26:a2:c5:2d:dd:49:b5:90:19:7a:12:90:f4:eb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=comtmz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:8f:79:26:a2:c5:2d:dd:49:b5:90:19:7a:12:90:f4:eb
Serial Number (int): 308486533085314924841459365386361225934059
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:27:d9:71:63:99:94:20:a1:a2:b5:dd:4d:68:f6:58:c1:b7:de:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:f3:38:48:d8:8e:e5:05:25:4c:c2:ab:9b:3b:c4:33:d5:d1:e9:7d
Fingerprint (sha256): 03:90:51:59:91:41:fa:ca:5b:5a:91:79:45:36:fb:9d:f4:13:28:dc:7b:68:b9:e3:ad:69:32:11:6c:c0:df:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate comtmz.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for comtmz.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.58daydreams.com
*.abhayachauhan.com
*.amercinas.com
*.animefly.net
*.astrocafeastrology.com
*.atheanahealth.com
*.atoms.com.au
*.broughtonhallfurniture.com
*.businessforhom.org
*.bvincservices.com
*.caisse.com.au
*.coach0.com
*.comtmz.com
*.conpaqi.com
*.danbooru.us
*.dekalbmugs.com
*.fabswinngers.com
*.fantasy-sports.net
*.frankeresupply.com
*.gledajodmah.com
*.hupe-tec.de
*.ilowes.com
*.isnichwar.de
*.janine-habeck.de
*.kiaaccessories.com
*.lghub.com.cn
*.lolgmein123.com
*.mac-torrents.net
*.mybonsecour.com
*.myhyundaifinance.co
*.myrandfpulse.com
*.napresso.com
*.paliexpress.com
*.partyfavoritesblog.com
*.petstop.com.au
*.planningcenteonline.com
*.pressherlad.com
*.puffypersiankittens.com
*.rescuemeballoon.org
*.sabbiticalhomes.com
*.selfpicamateurs.com
*.shabihazaidimd.com
*.subaruaccessories.com
*.t-mobilelimited.com
*.watfir.com
*.weobo.com
*.wholegend.buzz
*.wwweplfeedback.com
*.wwwpaymycite.com
*.yahhhoo.com
58daydreams.com
abhayachauhan.com
amercinas.com
animefly.net
astrocafeastrology.com
atheanahealth.com
atoms.com.au
broughtonhallfurniture.com
businessforhom.org
bvincservices.com
caisse.com.au
coach0.com
comtmz.com
conpaqi.com
danbooru.us
dekalbmugs.com
fabswinngers.com
fantasy-sports.net
frankeresupply.com
gledajodmah.com
hupe-tec.de
ilowes.com
isnichwar.de
janine-habeck.de
kiaaccessories.com
lghub.com.cn
lolgmein123.com
mac-torrents.net
mybonsecour.com
myhyundaifinance.co
myrandfpulse.com
napresso.com
paliexpress.com
partyfavoritesblog.com
petstop.com.au
planningcenteonline.com
pressherlad.com
puffypersiankittens.com
rescuemeballoon.org
sabbiticalhomes.com
selfpicamateurs.com
shabihazaidimd.com
subaruaccessories.com
t-mobilelimited.com
watfir.com
weobo.com
wholegend.buzz
wwweplfeedback.com
wwwpaymycite.com
yahhhoo.com

Other certificates including the domain name comtmz.com

(limited to 100 certificates)
comtmz.com
comtmz.com
africanpornhub.com
achevie3000.com
comtmz.com
comtmz.com
comtmz.com
comtmz.com
firsttravelbenefit.com
comtmz.com
comtmz.com
achevie3000.com
comtmz.com
everified.us

Certificate

The complete raw certificate details for comtmz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308486533085314924841459365386361225934059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 05:45:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 05:45:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comtmz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854440144647552646400316563573245335304772848918194758079578385640890511525519101138650194445733721819762532063954141751400081532151743417529056108097728967770955961711848592871570460974089861528849341036293448851857920826862724531412834584949938395126549078768652805830929645323687829857764299160095955595436420794992188158173075003728575605057693845008045119372154321915794617524404466074913369946581926220968555444538622101600389310765102787647930270629474606190356564552700076337417698248664887861703239492492106267632395185886031161428875235165394827147655486417243424219634940131273794972768034232961382996845142681906951566873966844809774605813573485140244005828029301137055604099323168043666297968594273543534784057490705576910775105509415534219952971199191921921859569958846650281441791966972249946077410659221262642362250880014460970064662068521794186587554297993887552849555331663240988467499409473312473628453649959232553312958045209483065280892448901579773876453888628550622632809414602775697857390325349870930424432306812031937319948518718939208705054279779377234978969636013288615483851539774604854719794056850616540789214867671703914535425008521482612323531267970361538403116754085080968064540148198546638471155293103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab27d97163999420a1a2b5dd4d68f658c1b7de5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1868 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.58daydreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abhayachauhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amercinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animefly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrocafeastrology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atheanahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atoms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broughtonhallfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessforhom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bvincservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caisse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coach0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comtmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conpaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danbooru.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekalbmugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabswinngers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasy-sports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankeresupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gledajodmah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hupe-tec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isnichwar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janine-habeck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiaaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lghub.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lolgmein123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mac-torrents.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybonsecour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhyundaifinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrandfpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.napresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partyfavoritesblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petstop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planningcenteonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pressherlad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puffypersiankittens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rescuemeballoon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabbiticalhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selfpicamateurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shabihazaidimd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subaruaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-mobilelimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watfir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholegend.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwweplfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwpaymycite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahhhoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '58daydreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abhayachauhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amercinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animefly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrocafeastrology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atheanahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atoms.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broughtonhallfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessforhom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvincservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caisse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conpaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danbooru.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekalbmugs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabswinngers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy-sports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankeresupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gledajodmah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hupe-tec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilowes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isnichwar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janine-habeck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiaaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lghub.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolgmein123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac-torrents.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybonsecour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhyundaifinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrandfpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napresso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paliexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyfavoritesblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petstop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planningcenteonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressherlad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puffypersiankittens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rescuemeballoon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabbiticalhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfpicamateurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shabihazaidimd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subaruaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobilelimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watfir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholegend.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwweplfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwpaymycite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahhhoo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9796b4bc0000040300473045022100e97cbed8c8ebfd442751b3e77bb2cc52b30429b3a6c0b675ec617202673605c802200bd804c831cbff40e98a4f89b22109df6e20df577db8e92b0b8f2bedd02c37e20076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9796b4c40000040300473045022100c2fd9d6ddc29517912fbc84ba41586f642f90041b219fd9f37cca7f6fea2ce3b0220104ead1aa68c3e8bbb23b8d59e683cdfdfb77cd8482add143ad80d98ad7372ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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