ayurvidya.com

Issued by R3

About this certificate

This digital certificate with serial number 04:27:40:a4:cc:1d:32:d5:ae:63:0e:5f:92:30:86:bb:3b:71 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ayurvidya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:27:40:a4:cc:1d:32:d5:ae:63:0e:5f:92:30:86:bb:3b:71
Serial Number (int): 361806082305297529422228239187919979101041
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:f9:a2:70:67:14:64:9d:4c:de:2a:02:f4:0c:57:39:e3:17:bf:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:c1:aa:94:1e:5f:85:ca:61:31:f4:46:74:b9:35:90:bf:fb:30:47
Fingerprint (sha256): 05:77:61:a4:35:3b:1c:fa:49:29:b6:3a:aa:10:38:37:1d:f3:f6:75:7f:2d:4b:ee:63:ba:60:c2:57:82:43:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ayurvidya.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ayurvidya.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abcd-rpd-hr.com
*.acarkent.com
*.activpromo.com
*.agenziaigloo.net
*.aguaalkalina.com
*.allegoria.com
*.althosinsuranse.com
*.autoklima.com
*.ayurvidya.com
*.blackcardvip.com
*.brashfield.com
*.burrafato.com
*.camp21plastic.top
*.cibavision.com.au
*.classcomisc.com
*.clien.com
*.countyautoauctiononline.com
*.domainnameleasing.com
*.elxa.com
*.embarquei.com
*.expertpages.com.au
*.fangliao.com
*.gradisca.com
*.hamptoninnbarrie.com
*.houseparty.cm
*.howartslegacy.com
*.iscoveryplus.com
*.javbus.cm
*.jockygirls.com
*.lamulta.com
*.local-weather.co
*.ludost.com
*.medcertification.com
*.mikazukimomoko.com
*.mmgins.cm
*.nonpagare.com
*.northwestproperties.com
*.pinnterest.com
*.quanwei.com
*.qudai.com
*.rinks.com.au
*.skovborg.com
*.splashcard.com
*.thecitycafe.com
*.thenaturaldrinks.co
*.thexpress.com
*.thumskitchenthaicuisine.com
*.upawn.com
*.waterweeds.com
*.weiqing.com
abcd-rpd-hr.com
acarkent.com
activpromo.com
agenziaigloo.net
aguaalkalina.com
allegoria.com
althosinsuranse.com
autoklima.com
ayurvidya.com
blackcardvip.com
brashfield.com
burrafato.com
camp21plastic.top
cibavision.com.au
classcomisc.com
clien.com
countyautoauctiononline.com
domainnameleasing.com
elxa.com
embarquei.com
expertpages.com.au
fangliao.com
gradisca.com
hamptoninnbarrie.com
houseparty.cm
howartslegacy.com
iscoveryplus.com
javbus.cm
jockygirls.com
lamulta.com
local-weather.co
ludost.com
medcertification.com
mikazukimomoko.com
mmgins.cm
nonpagare.com
northwestproperties.com
pinnterest.com
quanwei.com
qudai.com
rinks.com.au
skovborg.com
splashcard.com
thecitycafe.com
thenaturaldrinks.co
thexpress.com
thumskitchenthaicuisine.com
upawn.com
waterweeds.com
weiqing.com

Other certificates including the domain name ayurvidya.com

(limited to 100 certificates)
www.redfrogdigital.com
ayurvidya.com
aggrro.com
ayurvidya.com
ayurvidya.com
skovborg.com
cryogenictransportation.com
ayurvidya.com
tickleabuse.co
bbarneys.com
cryogenictransportation.com
www.kidspic.com
autoklima.com

Certificate

The complete raw certificate details for ayurvidya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361806082305297529422228239187919979101041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 10:47:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 10:47:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ayurvidya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912839422110327323834465008817507450034106882572559596949290807452375879546337669623587319089145483248151117568363698208202126382117617253147300890088202979463150116678047005071632351909140042461559906756660485202566698502853432016791902704716102811287113355122668638552981802757942810742830923586007343007728545198426878909590644137693976113641793319050119251871886800228031265863236687268834003522392805321443808184188533984723766287566050695706177232033998395863440958968767886271065285077723149595254357051614596005764781608637610464449012958237012959604774059629705939943194081982091467330249132652715496230338265799196909598119034258444610156266257908389399047908994571239477794303583961594366014722294541541535941279412195778472264135409054160348042109649351125751826714756002520430673455683562300307476209639051661254204621031190035612663238607299183318502940557995270320689303479525616431483958341865857831371893931052962818640836511858797888806022806679851852557240972683652674173871699519690955554318687251996921058127662303860034091579562908057750298736816766108345712529810251181009600241345346226070342330774406945986967347742272914542613905457208141854972305127218923370448640108439912565566220782331178207097969925329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99f9a2706714649d4cde2a02f40c5739e317bf63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1768 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcd-rpd-hr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acarkent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agenziaigloo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aguaalkalina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allegoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.althosinsuranse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoklima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayurvidya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackcardvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brashfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burrafato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camp21plastic.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cibavision.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classcomisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countyautoauctiononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainnameleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embarquei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expertpages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fangliao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gradisca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamptoninnbarrie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houseparty.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howartslegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iscoveryplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javbus.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jockygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamulta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.local-weather.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ludost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medcertification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikazukimomoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mmgins.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nonpagare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northwestproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinnterest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quanwei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qudai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skovborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.splashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecitycafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thenaturaldrinks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thumskitchenthaicuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterweeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weiqing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcd-rpd-hr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acarkent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenziaigloo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aguaalkalina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'althosinsuranse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoklima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayurvidya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackcardvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brashfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burrafato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp21plastic.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibavision.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classcomisc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countyautoauctiononline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainnameleasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embarquei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertpages.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fangliao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gradisca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamptoninnbarrie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseparty.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howartslegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscoveryplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javbus.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jockygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamulta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'local-weather.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ludost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medcertification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikazukimomoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmgins.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonpagare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwestproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnterest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quanwei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qudai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skovborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splashcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecitycafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenaturaldrinks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumskitchenthaicuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterweeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiqing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a98aade2d00000403004630440220562fce88dde05ce46ce67a142d3dce8d1b7ec621c013e8717e1d090c3917786a02200a58106463ab74a824b7562460cfa9cf72551cc0bb82071add180be7708a53a7007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a98aade690000040300473045022048c5424cd87e64dc82964e5658c8a1b757a29e82928b7d39217e7520f6e3ae92022100a59faf01dd3946323b9a3d3087cf076162ff4218f589a8b8842cea3927a5e550
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002308c578b2fdcac03276bfb89ce6cc227123577646d7ee866691e4d46faea53bbaf9f75d9694393d7baf54092f152c38ca81dd7e808603f24af43d09ba5e8bf42ee96af13eaa470d0644fdba8b920d3dba48f1a5be7c95ecad409e4ddf6711d604af60d1f744afe8b7a00475d442b8061d6d5389ed12f3068fd36d7ed3c0ce4ef6dda926de17afdfec794630af2020be2dbb899c0f075d13ed2ac586d3c7887fc16560b6b221888239797d09379f6ed4d4a008c64bbe7bc097ba4ea83bb5f91d2ce0785681674c38c705cbaade2320ac669b835f17176f9252497d7c9beb491aadf2e36ee960e68d88df973d46c897dd85fc33734becaa0a628e1e20d8b9b0be