minoritytastes.com

Issued by R3

About this certificate

This digital certificate with serial number 03:31:44:fa:9e:19:08:0e:7e:26:3e:27:c7:de:f8:07:5d:17 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=minoritytastes.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:44:fa:9e:19:08:0e:7e:26:3e:27:c7:de:f8:07:5d:17
Serial Number (int): 278102382558938647476425858449289704332567
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:0f:63:38:98:22:a2:81:1e:b6:1d:d4:33:35:01:69:d7:2a:6b:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:48:6d:8e:c4:18:61:48:03:36:ff:0a:6e:4e:ac:68:74:5d:a0:6f
Fingerprint (sha256): 0c:c1:d0:6b:a7:7d:a1:96:9b:76:7d:84:ff:fa:ce:bf:f6:22:18:e6:9b:f9:4d:c8:62:75:14:a0:7b:8a:12:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate minoritytastes.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minoritytastes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airlockpurifieusa.com
*.ap607.com
*.asplundhourcareerpages.com
*.carbob2cobalt.com
*.carrefourpagofacil.com
*.ceasarseats.com
*.corean19.com
*.cryptodeskfinanceltd.com
*.dealsbed.com
*.directech.com
*.dmvohio.com
*.enlightensmile.com
*.erlitong.com
*.helptogetitdone.com
*.imgupsclaer.com
*.jjxrewards.com
*.krungthaistreetgrill.com
*.loveholdays.com
*.maple-maple.com
*.meshech.com
*.midisouslalune.com
*.minnesotastate.com
*.minnetonkacleaningcompany.com
*.minoritytastes.com
*.missanfinance.com
*.monitress.com
*.moveonward.com
*.mrnoob.com
*.mymartmove.com
*.myschoollapps.com
*.mysftix.com
*.notalegal.com
*.nsgagree.com
*.otomotifstyle.com
*.perfectlypricilla.com
*.pixelbarks.com
*.popourri.com
*.reverendomariosantos.com
*.sealandtech.net
*.shopforaureli.com
*.stationmetro.com
*.subsence.com
*.theworldasiknowit.com
*.unitiedairlines.com
*.waehrungsechner.com
*.weddingdresseswithsleeves.com
*.willingnessandability.com
*.wwwprepaidciti.com
*.xn--wgbk8a.com
airlockpurifieusa.com
ap607.com
asplundhourcareerpages.com
carbob2cobalt.com
carrefourpagofacil.com
ceasarseats.com
corean19.com
cryptodeskfinanceltd.com
dealsbed.com
directech.com
dmvohio.com
enlightensmile.com
erlitong.com
helptogetitdone.com
imgupsclaer.com
jjxrewards.com
krungthaistreetgrill.com
loveholdays.com
maple-maple.com
meshech.com
midisouslalune.com
minnesotastate.com
minnetonkacleaningcompany.com
minoritytastes.com
missanfinance.com
monitress.com
moveonward.com
mrnoob.com
mymartmove.com
myschoollapps.com
mysftix.com
notalegal.com
nsgagree.com
otomotifstyle.com
perfectlypricilla.com
pixelbarks.com
popourri.com
reverendomariosantos.com
sealandtech.net
shopforaureli.com
stationmetro.com
subsence.com
theworldasiknowit.com
unitiedairlines.com
waehrungsechner.com
weddingdresseswithsleeves.com
willingnessandability.com
wwwprepaidciti.com
xn--wgbk8a.com

Other certificates including the domain name minoritytastes.com

(limited to 100 certificates)
minoritytastes.com
minoritytastes.com
middlekingdom.com
minoritytastes.com
rencontredemavie.com
yrllowpages.com
minoritytastes.com
rentaceter.com
meshech.com
meanderwedstrijd.info
wrxgphjv.info
yourgunstop.com
meshech.com

Certificate

The complete raw certificate details for minoritytastes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278102382558938647476425858449289704332567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 08:07:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 08:07:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minoritytastes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 603194906359241163904427263643027957579106136957343121001824700202080630393539974676251419175003386815325985131779005439375241429119480025735813952993802334682504106021425528186801419481497225084683443431407424863638704463968679410123578541801686479270655589473684751327217127261826513346357439844530057728149050376647626900851861358745860825790980749473338801340960385599758878967487940313747277862276164654785218139152497850351790026714471143164741218884175617224175890324897088606002236754250998672957120138141231456853848707015829068080596035569185740806754469661839137369509742600709189655983526129125703846929870917870832678147591642807715677494090072914311638888632314993554876972865160613298288033136524274074876457251130719652375174652122576497654862989957847499255278268086382955590896827395478915546685416393143159242684979505517861228672293338207618761496765079219309588746743247161207186849586274675145818089394608580139499886694546176397126575291130144998453719050824486043202334791695256954760371492152960148868278763258310758354813537269479196437634063344078229641473948552916680549951441897346001689645587682724905100106628233464786243517867277984052797360424021995892821861452880030700771176935841111905563850138161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c0f63389822a2811eb61dd433350169d72a6b11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1942 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airlockpurifieusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap607.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asplundhourcareerpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbob2cobalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefourpagofacil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceasarseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corean19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptodeskfinanceltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealsbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmvohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enlightensmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erlitong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helptogetitdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgupsclaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjxrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krungthaistreetgrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loveholdays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maple-maple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meshech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midisouslalune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minnesotastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minnetonkacleaningcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minoritytastes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monitress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moveonward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrnoob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymartmove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myschoollapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysftix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsgagree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otomotifstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectlypricilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelbarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popourri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reverendomariosantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sealandtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopforaureli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stationmetro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subsence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theworldasiknowit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitiedairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waehrungsechner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddingdresseswithsleeves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willingnessandability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwprepaidciti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wgbk8a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airlockpurifieusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap607.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asplundhourcareerpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbob2cobalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefourpagofacil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceasarseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corean19.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptodeskfinanceltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealsbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmvohio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enlightensmile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erlitong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helptogetitdone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgupsclaer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjxrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krungthaistreetgrill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveholdays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maple-maple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meshech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midisouslalune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnetonkacleaningcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minoritytastes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moveonward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrnoob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymartmove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myschoollapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysftix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notalegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsgagree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otomotifstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectlypricilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelbarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popourri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reverendomariosantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealandtech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopforaureli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stationmetro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subsence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theworldasiknowit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitiedairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waehrungsechner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingdresseswithsleeves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willingnessandability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwprepaidciti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wgbk8a.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c05bbbed000000403004730450220516b30715930aab2a8b4085c312fa20584cf01b6ff9fc5e889ff2db1d26a6591022100e5c0a9cac2c5c5e3a8279e06fe1f5ade1f277eaa521f34d40f52e789d6c7596600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c05bbbf5b0000040300473045022100811d0c656fa14ab2b594fc4af0423669458b0adc64926098c729e0a778d8150d02206424dfd9dc0290f9ec860a70c6ffd8a7f4b8c6c8e1b49b711cf5b198c2f28ba5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007dd665554a6152ecd83388f7d296d9afecfa6f97074ca3ab94cec65c18b38622b28651ac55cc2d44e30777bc4a7a286c1d24264a8a2f1e0b52f4cf515b4f7399d97b42a0ba858b0f7fe660b7e01d45991a18b2d1ddad9911151697240eae5159eec5b4c6e0e1a7afe2e4e9fc7a9bffedaf795f0d8a813f171aef0a01ba06a284f85e6f24d0881481db1045023ce37fadd737ce59d0ebf71f1f34499f31fae097822c042dd688d69d8c66088f1d73bde7b2a415fbe37ac20da255cd25249509f0531268f467b38884449e658deca204d237c906bbf74c669973ab05942896905a4759e965073e501caa9ba5164cd5b9bf978d6caa13ed1abca1e14282dfef106a