comtmz.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bd:0c:c6:6a:ad:eb:20:6e:81:f3:d2:42:e3:8f:06:6e:05 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=comtmz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bd:0c:c6:6a:ad:eb:20:6e:81:f3:d2:42:e3:8f:06:6e:05
Serial Number (int): 412779492049540423354255244918918000045573
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:b9:00:b8:6a:4d:be:f9:5b:33:4c:9d:ec:45:70:16:c9:48:f4:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:48:7b:fe:ca:49:e6:9d:98:89:b5:d2:88:79:25:95:11:65:1c:3f
Fingerprint (sha256): 0a:52:4c:c9:c6:c0:13:2e:bb:10:9a:6e:b1:9b:cb:57:f2:4c:01:02:8c:25:37:27:c9:98:45:2a:21:d8:cb:15

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate comtmz.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for comtmz.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alakeview.com
*.alliantenegy.com
*.ameay.com
*.amercinas.com
*.americabas.com
*.amydesk.com
*.anhamguera.com
*.bazarobrecho.com
*.benzcy-enterprises.com
*.broughtonhallfurniture.com
*.businessforhom.org
*.christianmusic.au
*.co-official.com
*.coach0.com
*.comtmz.com
*.conpaqi.com
*.crucifixion.au
*.ctwitter.com
*.dealerconenct.com
*.delegacia.eu
*.dropb0x.com
*.eardots.co
*.fantasy-sports.net
*.frankeresupply.com
*.gmacil.com
*.gnh.au
*.goldenroad.net
*.googlooe.com
*.hanyinku.com
*.homemadespeech.com
*.ipchcicken.com
*.jointeambbw.com
*.minecra.net
*.mlssoocer.com
*.myrandfpulse.com
*.onpiontcu.com
*.planningcenteonline.com
*.quickbooksonlilne.com
*.roulettebot.org
*.sabbiticalhomes.com
*.saltwaterliving.net
*.selfpicamateurs.com
*.spottheboule.co.uk
*.technicalfranchise.cn
*.thecanhub.com
*.toyotafincancial.com
*.weobo.com
*.whatsappwebb.com
*.wwweplfeedback.com
*.yoirube.com
alakeview.com
alliantenegy.com
ameay.com
amercinas.com
americabas.com
amydesk.com
anhamguera.com
bazarobrecho.com
benzcy-enterprises.com
broughtonhallfurniture.com
businessforhom.org
christianmusic.au
co-official.com
coach0.com
comtmz.com
conpaqi.com
crucifixion.au
ctwitter.com
dealerconenct.com
delegacia.eu
dropb0x.com
eardots.co
fantasy-sports.net
frankeresupply.com
gmacil.com
gnh.au
goldenroad.net
googlooe.com
hanyinku.com
homemadespeech.com
ipchcicken.com
jointeambbw.com
minecra.net
mlssoocer.com
myrandfpulse.com
onpiontcu.com
planningcenteonline.com
quickbooksonlilne.com
roulettebot.org
sabbiticalhomes.com
saltwaterliving.net
selfpicamateurs.com
spottheboule.co.uk
technicalfranchise.cn
thecanhub.com
toyotafincancial.com
weobo.com
whatsappwebb.com
wwweplfeedback.com
yoirube.com

Other certificates including the domain name comtmz.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for comtmz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412779492049540423354255244918918000045573
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 05:08:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 05:08:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'comtmz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745318018316901715109729306348201512042614113971302051922578155286111474731965622585021454150125130827008236921346763273110478926380238112959645964080779508724256277837028372869958650092663424449110458500008098930963483727829677679555536901329473214871202672131426045835131948218361724632655352250626213528820483023528139555365006196514905028919664965146819895883476908687539577986851477929288204922824250885889662213020919675783953151840120291519900865865227072505358552430475696840018018918432169391471581231594969934648112112453490194164247448252946872306342329403018917925536370781675204009633228265349922873614140598342996150823359713873674144017176096345678384539721496310724234859192456099067076532547408471798031187399585710386787164326389502376439636985107821792062774740693592263187700633596145143527699415918413673592349113049526899159511324816395899031942219798912711440323709855225757199109416746518948557246058282512387894339190447551023773609217666747515905478345492122789460090330577601993370126685596085289736176703234159391599279496882573106595953755544216335275171004634223598610371495432775832650266131994544429240038699343305435451699984629976042744154475270666576793690309624752952106786541955294464458455270977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ab900b86a4dbef95b334c9dec457016c948f4c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alakeview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alliantenegy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amercinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americabas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amydesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anhamguera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazarobrecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benzcy-enterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broughtonhallfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessforhom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christianmusic.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.co-official.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coach0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comtmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conpaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crucifixion.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealerconenct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delegacia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dropb0x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eardots.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasy-sports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankeresupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmacil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gnh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldenroad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googlooe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanyinku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homemadespeech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipchcicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jointeambbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlssoocer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myrandfpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onpiontcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planningcenteonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickbooksonlilne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roulettebot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabbiticalhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saltwaterliving.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selfpicamateurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spottheboule.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technicalfranchise.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyotafincancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatsappwebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwweplfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoirube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alakeview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliantenegy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amercinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americabas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amydesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anhamguera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazarobrecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benzcy-enterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broughtonhallfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessforhom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianmusic.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co-official.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coach0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtmz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conpaqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crucifixion.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerconenct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegacia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dropb0x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eardots.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy-sports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankeresupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmacil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenroad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlooe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanyinku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homemadespeech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipchcicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointeambbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlssoocer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrandfpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onpiontcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planningcenteonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickbooksonlilne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roulettebot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabbiticalhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltwaterliving.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfpicamateurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spottheboule.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalfranchise.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyotafincancial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weobo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsappwebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwweplfeedback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoirube.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d016f40ff0000040300483046022100bfed9dbe3953ca22db9e31fdb3adecdd165df1697003cac4a8a5df93997bd422022100b38be76f393a97f742e36ab1f186cb24eb23c5a36fa0bef52d4b1576963603b6007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d016f410e0000040300473045022100aebbed02e09778b9cf37ecf56551782e76867e6b835c16b119c8d638a685dc7b02204b56470a47e281df889357f4df1fde51aad5c2c7347b9f576cf9ef8cef679c27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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