pmlfca.com

Issued by R11

About this certificate

This digital certificate with serial number 04:e6:93:77:aa:4e:cb:b1:a7:ac:4d:25:c6:f4:22:54:f2:8b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pmlfca.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e6:93:77:aa:4e:cb:b1:a7:ac:4d:25:c6:f4:22:54:f2:8b
Serial Number (int): 426910105971815850986450409415981627929227
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:ca:42:04:5b:81:26:ac:3b:20:c8:af:57:a4:59:33:e5:7a:8c:81
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 75:30:37:8f:1c:c5:58:c0:af:30:1e:e9:22:41:72:6d:69:c6:e4:2c
Fingerprint (sha256): 0b:7e:7e:fb:bb:5a:e3:a5:3d:86:76:ad:f9:df:6a:d7:4f:85:d7:7b:db:f7:cc:6d:16:3b:a8:9f:7e:a3:44:54

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate pmlfca.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pmlfca.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acupuncturecenterofcapeann.com
*.alt36networks.com
*.backlnks.com
*.broadwaygourmetnyc.com
*.businessflights.xyz
*.calcioga.com
*.casediriposoanziani.it
*.castlehillgroup.com.au
*.chiefeland.com
*.datasite.com.au
*.dbqinc.com
*.donchemo.com
*.flightfinder.it
*.freshfinds.xyz
*.funimationfree.com
*.fusanv.com
*.hebron.es
*.heraldrysociety.us
*.hillstownplanner.com.au
*.huddamhoca.com
*.hunonicbacgiang.com
*.i5bt.online
*.kaplann.com
*.krewehar.com
*.krzysztofpegiel.com
*.lnea.se
*.lojaliquidsom.com
*.medicaleducation.com
*.meusfilmestorrent.com
*.michiganbridges.com
*.modavivendi.com
*.nydj.co
*.oktoberfestdubai.de
*.ozelgunsipariscisi.com
*.pmlfca.com
*.prograsive.com
*.qgamez.net
*.randol.biz
*.retornoamigo.com
*.rt2050.co.uk
*.ruthiejplatinum.com
*.suerchatlive.com
*.superchalive.com
*.suv-deals-39368.com
*.suv-deals-98990.com
*.therockdining.com
*.torrentdia104.com
*.turniitin.com
*.vinagroup.us
*.voyagemarketinggroup.com
acupuncturecenterofcapeann.com
alt36networks.com
backlnks.com
broadwaygourmetnyc.com
businessflights.xyz
calcioga.com
casediriposoanziani.it
castlehillgroup.com.au
chiefeland.com
datasite.com.au
dbqinc.com
donchemo.com
flightfinder.it
freshfinds.xyz
funimationfree.com
fusanv.com
hebron.es
heraldrysociety.us
hillstownplanner.com.au
huddamhoca.com
hunonicbacgiang.com
i5bt.online
kaplann.com
krewehar.com
krzysztofpegiel.com
lnea.se
lojaliquidsom.com
medicaleducation.com
meusfilmestorrent.com
michiganbridges.com
modavivendi.com
nydj.co
oktoberfestdubai.de
ozelgunsipariscisi.com
pmlfca.com
prograsive.com
qgamez.net
randol.biz
retornoamigo.com
rt2050.co.uk
ruthiejplatinum.com
suerchatlive.com
superchalive.com
suv-deals-39368.com
suv-deals-98990.com
therockdining.com
torrentdia104.com
turniitin.com
vinagroup.us
voyagemarketinggroup.com

Other certificates including the domain name pmlfca.com

(limited to 100 certificates)
pmlfca.com
pmlfca.com
pmlfca.com

Certificate

The complete raw certificate details for pmlfca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426910105971815850986450409415981627929227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-19 10:25:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 10:25:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pmlfca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841727100876256979782992398630726036972619989158853414577458374581489404977239097778532446153900045925533117870745649484778548989781130547021116500013001582546904055966763401220720767707133270573122832405579949772689784303506045283972551480091145861565436536277806234870825350104964965250069093721408324944746077407069698608489806772754659183225652882195882465835506666876723380799545369687371623079213954615557424406351786247952666621923118265142672272793656270511528658763708373704250943117997109015666454096302056472567495391953989776664031494615240933060772075120965680351165257414875763985414643815097820326262938226846614389619354471190801024096300485113278456667712961717757592368326034651428370943368413839031786406111667066683327552662087056601475595904761296039214386917976341635835841546870188796885390721905102669291102597574654153610274944038674843902650626782752817028267126310345699980816403834379000893319141629904968457221217601084343348529035730506341025757392422559455443130182048886742054767832818314580649591807114342951249971711056046580289568466555179014035401419014522797606026630784669440325488074527295432417433223536172040380155961295183533354813861046853788973232982161310633129309518577090631282558478721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							caca42045b8126ac3b20c8af57a45933e57a8c81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1886 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acupuncturecenterofcapeann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alt36networks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backlnks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadwaygourmetnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessflights.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calcioga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casediriposoanziani.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castlehillgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiefeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datasite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dbqinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donchemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightfinder.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshfinds.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funimationfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fusanv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hebron.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heraldrysociety.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillstownplanner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huddamhoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hunonicbacgiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i5bt.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaplann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krewehar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krzysztofpegiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnea.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojaliquidsom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicaleducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meusfilmestorrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michiganbridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modavivendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nydj.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oktoberfestdubai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozelgunsipariscisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmlfca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prograsive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qgamez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randol.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retornoamigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rt2050.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruthiejplatinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suerchatlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superchalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suv-deals-39368.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suv-deals-98990.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therockdining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentdia104.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turniitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinagroup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyagemarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acupuncturecenterofcapeann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alt36networks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backlnks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadwaygourmetnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessflights.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcioga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casediriposoanziani.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlehillgroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiefeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datasite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbqinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donchemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightfinder.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshfinds.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funimationfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusanv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebron.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heraldrysociety.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillstownplanner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huddamhoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunonicbacgiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i5bt.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaplann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krewehar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krzysztofpegiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnea.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojaliquidsom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicaleducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meusfilmestorrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganbridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modavivendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nydj.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oktoberfestdubai.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozelgunsipariscisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmlfca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prograsive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qgamez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randol.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retornoamigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt2050.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruthiejplatinum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suerchatlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superchalive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suv-deals-39368.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suv-deals-98990.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therockdining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentdia104.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turniitin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinagroup.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyagemarketinggroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e00000190303e66b10000040300483046022100c8122af970b2aab51f8e568f15aca8c9dd45c874fa26d32d7adf32fc7f791444022100d995489230f3d8d38430dfd147e3c21c08fed186e5c3521b4ea74366e686f08c007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000190303e66ba0000040300483046022100e420a2338b95a08148c103b451c799ca352c5837d41e25d7b490188d42d59981022100b8155e380276e04ce2538d0e25ef4f3734b14f14c5b972d8ee97468d00427bba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096517398b8442a4a5665830b23f61aa881d3da134fcd90f0ce1b580ad1710e4573e09e344c9f22bef7e2a527bfd500a99ec5f1bc212ebfa67ee75769d4592a4150a969093a3bd4e5a0286dacead30e5f327f1c8ba1feb70aeaaa37a10ee28b479efe96f8882ac6fd08deeec6daaaf86145b6603e7d5e8ea30ae40fea934cdb51d26f318b61c6d69cc848cb60a7710e60bdbb1193a60c8d51cf901e47295c20876a963d3728f4f6b4dd270cca3fa36c7751eaac2b871841792325f56f86cdcceed835f420fceede923d05c40af2d52fc2e0a970e8ce1f9fdbef59484a228b234e9b6b3dfabca9c1eee1953db74898320dd33c587b20dda61eb67345931ee1bc75