handem.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e7:12:23:98:e6:93:a7:ab:0d:d1:58:ff:db:a3:51:e2:a6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=handem.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e7:12:23:98:e6:93:a7:ab:0d:d1:58:ff:db:a3:51:e2:a6
Serial Number (int): 339966195489526136332760376705403271111334
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:30:2b:f0:09:73:7c:e2:00:8f:40:55:c7:95:01:c9:fe:bc:f9:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:ce:62:49:3b:ac:77:a2:6a:73:4a:77:42:71:96:d5:c5:5a:48:37
Fingerprint (sha256): 0b:bc:ec:1d:56:07:40:25:aa:7f:94:dc:71:dc:0b:7c:e8:1e:d6:dc:b8:35:2b:e9:c0:76:61:55:c6:78:9e:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate handem.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for handem.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.6502.com
*.995tk.net
*.artisangroup.com
*.bioliefprints.com
*.boniu.info
*.bricklink.cm
*.cayoscochinos.com
*.contexto.com
*.daisuki.com
*.danburyhousing.com
*.dfq.in
*.digitaleskingdom.com
*.dutchmaster.com.au
*.faca.net
*.fancyflyers.com
*.fietsenkleding.com
*.gmailhangout.com
*.gozio.com
*.habiaunavez.com
*.habiballah.com
*.handem.com
*.hongkan.com
*.houblon.com
*.how-to-root.com
*.ishirts.com
*.johanny.com
*.kintzer.com
*.kitchenary.com
*.lajkovi.com
*.mannernotchnewly.com
*.marrada.com
*.mche.org
*.merei.com
*.misyu.com
*.mobiloabs.com
*.obfirefighting.com
*.ohanes.com
*.onlinealkhalifi.com
*.petitspois.com
*.potsandplantsvizag.com
*.pujaanddipan.com
*.rmaarp.com
*.rujiao.com
*.sukasaha-antenna.net
*.thamer.com
*.tuen.net
*.urmj.com
*.usmilitarycontracting.com
*.watchcars.com
*.wwwkatia.es
6502.com
995tk.net
artisangroup.com
bioliefprints.com
boniu.info
bricklink.cm
cayoscochinos.com
contexto.com
daisuki.com
danburyhousing.com
dfq.in
digitaleskingdom.com
dutchmaster.com.au
faca.net
fancyflyers.com
fietsenkleding.com
gmailhangout.com
gozio.com
habiaunavez.com
habiballah.com
handem.com
hongkan.com
houblon.com
how-to-root.com
ishirts.com
johanny.com
kintzer.com
kitchenary.com
lajkovi.com
mannernotchnewly.com
marrada.com
mche.org
merei.com
misyu.com
mobiloabs.com
obfirefighting.com
ohanes.com
onlinealkhalifi.com
petitspois.com
potsandplantsvizag.com
pujaanddipan.com
rmaarp.com
rujiao.com
sukasaha-antenna.net
thamer.com
tuen.net
urmj.com
usmilitarycontracting.com
watchcars.com
wwwkatia.es

Other certificates including the domain name handem.com

(limited to 100 certificates)
handem.com
handem.com
maspion.group
hotelmonteleone.co
hotelmonteleone.co
noivo.com
relire.com
handem.com
xhilemx.com
handem.com
handem.com
wadl.com

Certificate

The complete raw certificate details for handem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339966195489526136332760376705403271111334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 09:07:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 09:07:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'handem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824559148484509385370630096312071917107967942950180306489703078028527725031057944959046193944772623978430259854676391570300001746016340515931621167769082877889043429137054566611348432964140731765533927054935135597910668013444937411158056765232369601587866626577126336162576308253733716242139506488132052446993778649477328949576490831373361678402259918603986596437216100035694605553874269310134432381212711262080262351435301792254988311007000653912839787361707416094217884774070850039606398493434977519186903293731493347030849283487878595887104104147676045646806739746338109285785965980865923580216468697970094760327295056547433203719939940767117659556417895509461655925460693116852298811627031242693571189000720956782417988242766141936844111847658350302218496951234800994084720050206852781003243529493103450086960969383882550732100534654234290681695142322533144819236551538382015306236902654319398201150083001235167137130924720432808847645705488765300435797717107239497574804582247195790597616702167260059986483234675323615880966598816044743322041788098286403016815933824182636562416641221144699556196255030319210347077468820516275114659592794591705944407868878249294204656983251701527257160221842173787914517263854285660537424532087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a302bf009737ce2008f4055c79501c9febcf936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1620 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.995tk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artisangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioliefprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boniu.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bricklink.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cayoscochinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daisuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danburyhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfq.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitaleskingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dutchmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancyflyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fietsenkleding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmailhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gozio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habiaunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habiballah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongkan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houblon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.how-to-root.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johanny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kintzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchenary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lajkovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mannernotchnewly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marrada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobiloabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obfirefighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinealkhalifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petitspois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potsandplantsvizag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pujaanddipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmaarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rujiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sukasaha-antenna.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usmilitarycontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwkatia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '995tk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artisangroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioliefprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boniu.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricklink.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cayoscochinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danburyhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfq.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaleskingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutchmaster.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancyflyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fietsenkleding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmailhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gozio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habiaunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habiballah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houblon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'how-to-root.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johanny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kintzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajkovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannernotchnewly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marrada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mche.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiloabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obfirefighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinealkhalifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petitspois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potsandplantsvizag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pujaanddipan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmaarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rujiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukasaha-antenna.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usmilitarycontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwkatia.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001882e549abe00000403004730450220658e8fa510a5a333c3689e1b09d68040ac53a360d3d4b8c6628ccebf04ce79ad022100be7bdeed05c8e94591768e1462d781d5f8b7f827bb85ad43cdbb0a66a97e7c77007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001882e549af300000403004830460221009689024c540fd4f5c233046d8bdc5bfde09c820cdeea094eb39b30c0fd80f23d022100ed7befdd7fec4511b2799265c47cb5a77e612592b52b5df5701ae3e8077e805f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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