rosimo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:41:ed:87:01:e8:e9:cc:96:ef:da:24:17:aa:f8:c2:23:cf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rosimo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:ed:87:01:e8:e9:cc:96:ef:da:24:17:aa:f8:c2:23:cf
Serial Number (int): 370883225610714614623119035893186310579151
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:ac:73:80:bc:03:0b:85:e0:82:e1:0a:56:9f:c0:2c:8b:7d:09:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 77:e8:ec:ce:2d:38:80:b3:8b:c4:a0:0c:a6:56:5f:0c:90:ca:d6:1e
Fingerprint (sha256): 09:79:e4:30:5e:dc:8a:cb:be:06:40:65:37:bc:e3:c7:a3:04:96:fb:50:61:fd:ea:fa:89:b5:8e:19:58:47:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rosimo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rosimo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.annyaylor.com
*.autmatensuche.de
*.avtoall.co
*.bahunek.com
*.bimito.co
*.blockchainungdung.com
*.buyucoin.co
*.cccitu.co
*.chewen.co
*.chibueze.com
*.corespreads.co
*.ddnavi.co
*.detaly.co
*.divany.co
*.donstu.co
*.duikers.com
*.eslint.co
*.expressinsuranceinfo.co
*.ezilon.co
*.fushar.co
*.growthbookacademy.com
*.havaldar.com
*.hervia.co
*.hohotv.co
*.hrbust.co
*.itedou.co
*.itspak.co
*.jiufen.com
*.jodies.co
*.karupsow.co
*.kokabi.com
*.leitor.co
*.llivia.com
*.mydocx.co
*.natoos.co
*.photolsb.me
*.plotek.co
*.productosdelimpieza.com
*.rosimo.com
*.smiall.co
*.studmed.co
*.swbbsc.co
*.tewes.com
*.theiet.co
*.thesores.com
*.titiza.co
*.topito.co
*.ufficioformazione.net
*.xmissy.co
*.xxxtor.co
annyaylor.com
autmatensuche.de
avtoall.co
bahunek.com
bimito.co
blockchainungdung.com
buyucoin.co
cccitu.co
chewen.co
chibueze.com
corespreads.co
ddnavi.co
detaly.co
divany.co
donstu.co
duikers.com
eslint.co
expressinsuranceinfo.co
ezilon.co
fushar.co
growthbookacademy.com
havaldar.com
hervia.co
hohotv.co
hrbust.co
itedou.co
itspak.co
jiufen.com
jodies.co
karupsow.co
kokabi.com
leitor.co
llivia.com
mydocx.co
natoos.co
photolsb.me
plotek.co
productosdelimpieza.com
rosimo.com
smiall.co
studmed.co
swbbsc.co
tewes.com
theiet.co
thesores.com
titiza.co
topito.co
ufficioformazione.net
xmissy.co
xxxtor.co

Other certificates including the domain name rosimo.com

(limited to 100 certificates)
cupertinorealtors.com
rosimo.com
afascreenings.org
thenomadyurt.com
rosimo.com
www.aluvyon.com
filmesub.net
newlooklinen.com
buklet.com
rosimo.com
rosimo.com
afascreenings.org
africa-grid.org
buklet.com
buklet.com

Certificate

The complete raw certificate details for rosimo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILXjCCCkagAwIBAgISBEHthwHo6cyW79okF6r4wiPPMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTUyMDQ3NDhaFw0yNDA2MTMyMDQ3NDdaMBUxEzARBgNVBAMT
CnJvc2ltby5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCYYy5q
66CDTXLpTq+l93Rk53XT5Ucbch+0d7JMjTLN0kSFY5j/WWhiO1XlWPbVH+8XlzGH
And7dRlro171k2cs0byl3MpKGCftYmJhLWMJsy7Ebkk+TtHP9Rcx8RYHnsKnWUL6
OEk4vHOiTXBmWzb/MGrwb2CGHj2uDbzyBoa3oYqVLbpVzUn5Zkf4UeRjkgHURfap
EUDfyWfqgmr9gIP4LH+51vWbJHSNGpEpy8H7g/LrueBvkeyeARq9W4JuTWi+5Bwz
yUyYO1SsGC2yVvmzrV3IHA4CG4VZQ1p5f9pwDUFHixEM9l4SWKlx2UUZHoBCOmqW
dgQsobsaGeVuluo/GYB0F1xfyZPHcTTrg+qqZu+2qp4TdJq83vp0EZ4dC0YVJf6P
bMCn8hBj7uTAxeIvBPTDL4W6+xY41O4UBg/BQNI8tcquZIF6YDbiwoMbk7sVU+vT
+G36hG2Vo/in0XZRsoD91ffN0GNwBm5OKNR7G1x9FNmCxs0zmzxTQdAiy+/YU767
bnsTv3tW5fbgkwZT/kVVhLfyb6BwTsRtZJefiKS0UCjH3MZskehrsc1GG0Ua5m0c
ZIhsm03EV60DrE5SA+Wqt0Zi9X0bVbPyKWL0k2W1gWN9HaTHg2Jp++L0LJMGGI8d
0tjC6EiIff/E3IGli5utQv4U0wXpYbGu0l42zQIDAQABo4IHiTCCB4UwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBRxrHOAvAMLheCC4QpWn8Asi30JtDAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzCCBY8GA1UdEQSCBYYwggWCgg8qLmFubnlheWxvci5jb22C
EiouYXV0bWF0ZW5zdWNoZS5kZYIMKi5hdnRvYWxsLmNvgg0qLmJhaHVuZWsuY29t
ggsqLmJpbWl0by5jb4IXKi5ibG9ja2NoYWludW5nZHVuZy5jb22CDSouYnV5dWNv
aW4uY2+CCyouY2NjaXR1LmNvggsqLmNoZXdlbi5jb4IOKi5jaGlidWV6ZS5jb22C
ECouY29yZXNwcmVhZHMuY2+CCyouZGRuYXZpLmNvggsqLmRldGFseS5jb4ILKi5k
aXZhbnkuY2+CCyouZG9uc3R1LmNvgg0qLmR1aWtlcnMuY29tggsqLmVzbGludC5j
b4IZKi5leHByZXNzaW5zdXJhbmNlaW5mby5jb4ILKi5lemlsb24uY2+CCyouZnVz
aGFyLmNvghcqLmdyb3d0aGJvb2thY2FkZW15LmNvbYIOKi5oYXZhbGRhci5jb22C
CyouaGVydmlhLmNvggsqLmhvaG90di5jb4ILKi5ocmJ1c3QuY2+CCyouaXRlZG91
LmNvggsqLml0c3Bhay5jb4IMKi5qaXVmZW4uY29tggsqLmpvZGllcy5jb4INKi5r
YXJ1cHNvdy5jb4IMKi5rb2thYmkuY29tggsqLmxlaXRvci5jb4IMKi5sbGl2aWEu
Y29tggsqLm15ZG9jeC5jb4ILKi5uYXRvb3MuY2+CDSoucGhvdG9sc2IubWWCCyou
cGxvdGVrLmNvghkqLnByb2R1Y3Rvc2RlbGltcGllemEuY29tggwqLnJvc2ltby5j
b22CCyouc21pYWxsLmNvggwqLnN0dWRtZWQuY2+CCyouc3diYnNjLmNvggsqLnRl
d2VzLmNvbYILKi50aGVpZXQuY2+CDioudGhlc29yZXMuY29tggsqLnRpdGl6YS5j
b4ILKi50b3BpdG8uY2+CFyoudWZmaWNpb2Zvcm1hemlvbmUubmV0ggsqLnhtaXNz
eS5jb4ILKi54eHh0b3IuY2+CDWFubnlheWxvci5jb22CEGF1dG1hdGVuc3VjaGUu
ZGWCCmF2dG9hbGwuY2+CC2JhaHVuZWsuY29tggliaW1pdG8uY2+CFWJsb2NrY2hh
aW51bmdkdW5nLmNvbYILYnV5dWNvaW4uY2+CCWNjY2l0dS5jb4IJY2hld2VuLmNv
ggxjaGlidWV6ZS5jb22CDmNvcmVzcHJlYWRzLmNvgglkZG5hdmkuY2+CCWRldGFs
eS5jb4IJZGl2YW55LmNvgglkb25zdHUuY2+CC2R1aWtlcnMuY29tggllc2xpbnQu
Y2+CF2V4cHJlc3NpbnN1cmFuY2VpbmZvLmNvggllemlsb24uY2+CCWZ1c2hhci5j
b4IVZ3Jvd3RoYm9va2FjYWRlbXkuY29tggxoYXZhbGRhci5jb22CCWhlcnZpYS5j
b4IJaG9ob3R2LmNvgglocmJ1c3QuY2+CCWl0ZWRvdS5jb4IJaXRzcGFrLmNvggpq
aXVmZW4uY29tgglqb2RpZXMuY2+CC2thcnVwc293LmNvggprb2thYmkuY29tggls
ZWl0b3IuY2+CCmxsaXZpYS5jb22CCW15ZG9jeC5jb4IJbmF0b29zLmNvggtwaG90
b2xzYi5tZYIJcGxvdGVrLmNvghdwcm9kdWN0b3NkZWxpbXBpZXphLmNvbYIKcm9z
aW1vLmNvbYIJc21pYWxsLmNvggpzdHVkbWVkLmNvgglzd2Jic2MuY2+CCXRld2Vz
LmNvbYIJdGhlaWV0LmNvggx0aGVzb3Jlcy5jb22CCXRpdGl6YS5jb4IJdG9waXRv
LmNvghV1ZmZpY2lvZm9ybWF6aW9uZS5uZXSCCXhtaXNzeS5jb4IJeHh4dG9yLmNv
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA
ouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGORBXitQAABAMARzBF
AiEAsTyUVyt4c8z8d+FXAeL6aNgrLVVFHZ13BvYoxmpptLQCIA0uCholMKsik7Qz
Oh2brcBWNGMpmfyw/HBvj9iYBTrYAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGORBXitwAABAMASDBGAiEAmB0PVLb41mVCwO3iT/L/++CQ7lDT
M8IKVYvFU7GID14CIQC5RLnPWa3tTWc9Z9h1o2FRDU19QguDTEDFSMYQZnwh/TAN
BgkqhkiG9w0BAQsFAAOCAQEADpQtLfTJ7Bn18Ld5lD0ckaze/qcsZGc7DWSKF9xi
0nZbV3T/jsK0XXugDC8frOBh6/cCffeJmY/wEvte+ckd9hdkqIfynmhUWFYnDAxz
rxKO9pvHPW/g6ld+XJFlW6TmG1harKDGG5x+yPIanwi0Hh/O6nych1TQ8737uyjT
f/i86BQDbwzMJtYpHxVh/XRwUzwGrH+0qDfe4+peFmezhmIH7UG47PypC7MT3hs8
ciqAKP7zaIns5NeAowtjMZ2kn7ma+dMnKJI5wDLZoQ9BW9tM3SusYuYApur0h3rG
iJluS4gfxSMwS9bt+erVDCXmy0qCtaQk3dOUywI4zsFxow==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370883225610714614623119035893186310579151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 20:47:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 20:47:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosimo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 621686462712572100268976239895545938267187296029352675905394504010688966146223271480640768196930419928544106594777776018950215554689422361149088631545635703934950803704634082216635150876460154447201540379573001769239749376531647079956676456284664114114174907338350002093450393656196654428729600160178556239007052138857360729709071417905925880394737282319585877638482517862846836101929449369582041039148095250659266869880240716130435393494574484680575757379917488092724551756472491588832309200648516116533176912782870399990663367104343026357690890975047981952177031487615714393916153624074345524528901463859908292148973068812305351443110280736771456272314044680777698194936092245813902207006419982936225239125096508092988408454017617817490857677968700863827928592164679194196965983860906125524561547081563501469994293666357700356730143769733765395837909477845783775521314254307419570717965593920692411710402960088980771077785486929230545967757747958802291821268687820675829368285561642321888757130927890370226097339638026976733393102174815173722164860447322502269186520322036845405262425234416217487339997383647795097070194723158529793081672067980397363881201490928070753787657639183689179105606405351356463525673228324676153118701261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71ac7380bc030b85e082e10a569fc02c8b7d09b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1414 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annyaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autmatensuche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avtoall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bahunek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bimito.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockchainungdung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyucoin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cccitu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chewen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chibueze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corespreads.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddnavi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detaly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divany.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donstu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duikers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eslint.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressinsuranceinfo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezilon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fushar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growthbookacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havaldar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hervia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hohotv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrbust.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itedou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itspak.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiufen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jodies.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karupsow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kokabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leitor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llivia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydocx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.natoos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photolsb.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plotek.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productosdelimpieza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smiall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studmed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swbbsc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tewes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theiet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titiza.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topito.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ufficioformazione.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xmissy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxxtor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annyaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autmatensuche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avtoall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahunek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bimito.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainungdung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyucoin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccitu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chewen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chibueze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corespreads.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddnavi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detaly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divany.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donstu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duikers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eslint.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressinsuranceinfo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezilon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fushar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growthbookacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havaldar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hervia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hohotv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrbust.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itedou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itspak.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiufen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodies.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karupsow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leitor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llivia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydocx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natoos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photolsb.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plotek.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productosdelimpieza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studmed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swbbsc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theiet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titiza.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topito.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ufficioformazione.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmissy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxxtor.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4415e2b50000040300473045022100b13c94572b7873ccfc77e15701e2fa68d82b2d55451d9d7706f628c66a69b4b402200d2e0a1a2530ab2293b4333a1d9badc05634632999fcb0fc706f8fd898053ad800770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4415e2b70000040300483046022100981d0f54b6f8d66542c0ede24ff2fffbe090ee50d333c20a558bc553b1880f5e022100b944b9cf59aded4d673d67d875a361510d4d7d420b834c40c548c610667c21fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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