san-ion.avast.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5e:1b:d9:c9:81:28:f8:1b:dc:f2:2a:91:e6:a5:bc:38:1c was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=san-ion.avast.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:1b:d9:c9:81:28:f8:1b:dc:f2:2a:91:e6:a5:bc:38:1c
Serial Number (int): 293360420257150892935494307162086736410652
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8f:59:2c:b1:9d:e3:a1:9d:dc:3e:a8:87:7f:d4:f2:41:20:22:76:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:c1:18:e2:d4:a5:b3:11:55:aa:f7:ea:e4:dc:b2:07:63:3f:0a:dc
Fingerprint (sha256): 03:f8:91:e2:c3:7b:e9:00:58:a9:3a:d1:58:9c:db:fd:ad:c5:79:20:68:90:4f:9c:c7:9a:a8:30:03:bf:07:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate san-ion.avast.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san-ion.avast.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets-client.avastbrowser.com
assets-client.avgbrowser.com
assets-client.ccleanerbrowser.com
assets.securebrowser.com
avast.ru
avgthreatlabs.com
beta-assets-client.avastbrowser.com
beta-assets-client.avgbrowser.com
beta-assets-client.ccleanerbrowser.com
beta-assets.securebrowser.com
beta-onboarding.avastbrowser.com
beta-onboarding.avgbrowser.com
beta-onboarding.ccleanerbrowser.com
blogs.avg.com
dev-assets-client.avastbrowser.com
dev-assets-client.avgbrowser.com
dev-assets-client.ccleanerbrowser.com
dev-assets.securebrowser.com
dev-onboarding.avastbrowser.com
dev-onboarding.avgbrowser.com
dev-onboarding.ccleanerbrowser.com
explabs.com
forum.avast.com
my-android.avast.com
my-android.ff.avast.com
my-devices.avast.com
my-devices.ff.avast.com
my-ios.avast.com
my-ios.ff.avast.com
my-mac.avast.com
my-mac.ff.avast.com
my-win.avast.com
my-win.ff.avast.com
onboarding.avastbrowser.com
onboarding.avgbrowser.com
onboarding.ccleanerbrowser.com
order.partners.avg.com
press.avast.ru
san-ion.avast.com
secure.grisoft.com
t.av.st
tune-up.com
tune-up.it
tuneup-software.co.uk
tuneup.de
tuneup.es
tuneup.kr
tuneup.mx
tuneup.pl
tuneup.ru
www.avast.cz
www.avast.ru
www.avgthreatlabs.com
www.blogs.avg.com
www.explabs.com
www.hmavpn.com
www.secure.grisoft.com
www.secure.me
www.tune-up.com
www.tune-up.de
www.tune-up.it
www.tuneup-software.co.uk
www.tuneup-software.com.br
www.tuneup-software.nl
www.tuneup.cn
www.tuneup.cz
www.tuneup.de
www.tuneup.es
www.tuneup.fr
www.tuneup.jp
www.tuneup.kr
www.tuneup.mx
www.tuneup.pl
www.tuneup.pt
www.tuneup.ru

Other certificates including the domain name avast.com

(limited to 100 certificates)
*.avast.com
business-auth.dev-europe-west3.smbrm.avast.com
*.ff.avast.com
*.avast.com
*.avast.com
*.avast.com
foundation.avast.com
www3.avast.com
support.business.avast.com
campaign.avast.com
*.backup.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
partners.avast.com
business-vpn-device.dev-europe-west3.smbrm.avast.com
*.avast.com
shop.avast.com
www.avast.com
*.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
foundation.avast.com
*.avast.com
*.ff.avast.com
*.avast.com
buy-qa4.norton.com
dls.norton.com
*.avast.com
blog.avast.com
*.avast.com
*.avast.com
*.avast.com
nsone-proxy.ff.avast.com
vpscache.avast.com
maps.avast.com
*.avast.com
partners-int.norton.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
maps.avast.com
*.avast.com
ipm.store.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com
*.avast.com
shepherd.ff.avast.com
*.avast.com
www3.avast.com
ks.norton.com
*.avast.com
*.avast.com
web.backup.norton.com
*.avast.com
*.avast.com
*.avast.com
business-patch-device.prod-europe-west3.smbrm.avast.com
business-dm-device.prod-us-west1.smbrm.avast.com
subscriptions-test.avast.com
*.avast.com
*.avast.com
*.avast.com
update.bullguard.com
*.ff.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
*.avast.com
viruslab.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
xls-int.norton.com
*.ff.avast.com
*.eu.main.dev.iden.avast.com
store.avast.com
software-cleanup.ff.avast.com
*.avast.com
*.avast.com
easycare.ch.fcm.travel
stage.www.avast.ua.cms.int.avast.com
*.avast.com
*.avast.com
*.avast.com
shop.avast.com
*.avast.com
*.ff.avast.com
alpha-license-dealer-test.ff.avast.com
*.avast.com
vcp-portal.ff.avast.com
www.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com

Certificate

The complete raw certificate details for san-ion.avast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN5wHT7aBgOBctj+yOu7
AcvcuaWMTQndfRTGAXzUbtA7LIAmY067hvt/RrZXE9ghIW7PBGWGNb6mFfNHUtZM
C3C16eMLypUgdqGQSZMgGYuL70eY7atCxpvCTBFjo60PQDwBxakFvxch4x2ne9WV
P4Q+iarrXqXGu5HVJ0r+kwLUDTZqDqaSyvJ56MUbfOxanNzV4cLK/wabPJawY5hd
0EAAHGUFcHkuFsdOWMlu3DSvEKNn5qAgjwxDC+9LfX7qQ30F9jpQx58r/MNynuSU
b2n0Xq2ryDzJ6hSimsTfWUhBJ4BOf2b8xt/3BiJlTRQivgIEfJEirUB2cBcadtLT
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293360420257150892935494307162086736410652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 08:10:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 08:10:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'san-ion.avast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25357349232644827291973146016767057810009679603931022013886887448864256276730201308345268907896854314090080867120538500822955630686710148723228773326809792348639767399309372560353471766848135083554237766330872639824059834349353571350442347619336683176245859341670673096634989900841617048336685184748338104657263309037102528088341315618637160576655734801814288994194770139473286959356880392289494406560381544326917617394996451841951579438547300205188286526269921969367844704987574931684538404259645646736375182641478973548418392177104896512174175803226488032768503135312221257646871294526263508270674523409391975322621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f592cb19de3a19ddc3ea8877fd4f24120227635
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-client.avastbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-client.avgbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-client.ccleanerbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.securebrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avast.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avgthreatlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-assets-client.avastbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-assets-client.avgbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-assets-client.ccleanerbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-assets.securebrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-onboarding.avastbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-onboarding.avgbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-onboarding.ccleanerbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-assets-client.avastbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-assets-client.avgbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-assets-client.ccleanerbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-assets.securebrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-onboarding.avastbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-onboarding.avgbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-onboarding.ccleanerbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-android.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-android.ff.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-devices.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-devices.ff.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-ios.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-ios.ff.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mac.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-mac.ff.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-win.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-win.ff.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.avastbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.avgbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.ccleanerbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.partners.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.avast.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san-ion.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.grisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.av.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tune-up.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tune-up.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneup-software.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneup.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneup.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneup.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuneup.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avast.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avast.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avgthreatlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blogs.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hmavpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.grisoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tune-up.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tune-up.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tune-up.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup-software.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup-software.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup-software.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuneup.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189631dfe7d00000403004630440220393a5492881d5e0628373e4ff0677e89d4c13de3442851819a7ffb56911161ae02206f48b4b9a9092f1427b2f387082ba34724cd2a3d00ad2f36a550f420ce2a331e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189631dfe9e00000403004730450220730bee43560635c94c8438b49d244144b24a8370efe93d881a90f1e13499e8a902210091f229cfc3f137e3cabb1a92c604f918e26af9eb417ee29ee230748954ec220b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e43d3667b892d55665b3db9631d7aebf326d50d27700875e70ce9e24a2f285ac3143fd4322d580782daf378e8b867da12a5c79483eb05813287caeb2ffa12c57cd90f9260ef673e5fe21944f04a54e775b32fbb1ad9a5c21b47e954993724ef9a9f6995bc6349e660025cb3db129e881a3a9c8d43cf08d59bc71d8a2243b4317998534e06c80a7df0dc8938bacca025ef6b25fcd57dc1a3c0e833f97efff6a0c31ea3b0a9aab823d7214419dd5a6f4b7dff6c96e78a2b7cf561bf2676eb8b6bf17858350b5a37073ab70bf51dd599b0d0fb781c4756be370eca370b37664f3145bd503de2342b5c0c40bf6ba8def61539d6ed029635c4d6f9f034a049ad9a77