gwtakko.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:f0:dc:1f:7f:dc:f4:47:ef:91:43:3a:1b:01:4c:55:27 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gwtakko.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:f0:dc:1f:7f:dc:f4:47:ef:91:43:3a:1b:01:4c:55:27
Serial Number (int): 435541304955062608613512608601482197751079
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:18:e0:ea:e5:2e:b9:a3:84:d0:39:7d:a0:f7:f0:82:b7:2e:14:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:b8:08:f2:d7:99:0d:0b:b8:4f:ea:4b:e9:f6:59:97:77:ca:40:e7
Fingerprint (sha256): 0d:0e:5b:c2:77:ff:50:f1:c1:4e:94:b4:3d:42:c7:ec:02:5f:a7:34:ea:2c:55:60:39:4d:59:3c:02:40:ef:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gwtakko.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gwtakko.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abletica.com
*.asnipfeed.co
*.camsexy.chat
*.candiceshoes.com
*.cargslist.com
*.chiefasian.com
*.commercialrealestatecompany.com
*.drhouse.co
*.e-oide.com
*.earenfro.com
*.esurnace.com
*.faatsidehustles.com
*.friendwire.com
*.gcontemporary.com
*.goldcoastprodetail.com
*.grownamerica.com
*.gwtakko.com
*.illinoisworkscoalition.com
*.ko-industries.com
*.l2wicked.net
*.maccosmatic.com
*.maeklangluang-hill.com
*.medicaiddental.com
*.mejortorrentes.org
*.modala.co
*.parisiantailorandcleaners.com
*.popepiusthethird.com
*.popsocker.com
*.popular-games.com
*.prestigebuildersinc.net
*.pure-ani.me
*.pureitpapp.com
*.qsupport.us
*.qualityfoldingwagons.com
*.quick-grill.com
*.resignationletter.info
*.respirics.com
*.reviewadultdating.com
*.sakuraexchangebitcoin.com
*.scheduleanywhere.co
*.solsamurais.com
*.stigertrucks.com
*.takeatour.com
*.theraagleela.com
*.tiptophindi.com
*.unitedstatesmint.com
*.uptmcidec.com
*.uspassaport.com
*.vinistechbuzz.com
*.wtspass.com
abletica.com
asnipfeed.co
camsexy.chat
candiceshoes.com
cargslist.com
chiefasian.com
commercialrealestatecompany.com
drhouse.co
e-oide.com
earenfro.com
esurnace.com
faatsidehustles.com
friendwire.com
gcontemporary.com
goldcoastprodetail.com
grownamerica.com
gwtakko.com
illinoisworkscoalition.com
ko-industries.com
l2wicked.net
maccosmatic.com
maeklangluang-hill.com
medicaiddental.com
mejortorrentes.org
modala.co
parisiantailorandcleaners.com
popepiusthethird.com
popsocker.com
popular-games.com
prestigebuildersinc.net
pure-ani.me
pureitpapp.com
qsupport.us
qualityfoldingwagons.com
quick-grill.com
resignationletter.info
respirics.com
reviewadultdating.com
sakuraexchangebitcoin.com
scheduleanywhere.co
solsamurais.com
stigertrucks.com
takeatour.com
theraagleela.com
tiptophindi.com
unitedstatesmint.com
uptmcidec.com
uspassaport.com
vinistechbuzz.com
wtspass.com

Other certificates including the domain name gwtakko.com

(limited to 100 certificates)
gwtakko.com
*.adulltsearch.com
gwtakko.com
respirics.com
respirics.com
gwtakko.com

Certificate

The complete raw certificate details for gwtakko.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435541304955062608613512608601482197751079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 11:35:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 11:35:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gwtakko.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814489260074016022353971548822556683951138229442156643053318799326541963153674856374607408740777665851873446483672804100529599740614863163764117773519899139633081966274923039873138260190608693770549936424077728072666963744345145761565371729321143710064642855057320456804924125401621853018014898968779990469462745605799029575699755279295120006147573450606642128907449553810590642505164957521146062609001456023329384575752724721020131783068865633230258218816662846519801152947640254398471835587463961214699775318493358530496758264556334779705669478789747677911662982814150020132480442125394626680561829977313405159031335018742402415691259270611560435726148040828735462377734796544123480934477527207860619646223462532457235827832626478277122905609350960451945216642445992667960907801702881118366226725442422656431658528708646524406228096034640757727499478491030134164279283983638466109424111373656980003294742092756755918148210571997046946420247638582639465043969975904530514882691358564716685923057057953990328723787165246957137505223518055626653023224960250473700290310407220072482118683521445227016734999288942910650104485209802909043045137147142622712482180491781134912641452895682341476420261477786800739232163428116934609664372343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b018e0eae52eb9a384d0397da0f7f082b72e1405
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abletica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asnipfeed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camsexy.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candiceshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cargslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiefasian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercialrealestatecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drhouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-oide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earenfro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esurnace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faatsidehustles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcontemporary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcoastprodetail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grownamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwtakko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illinoisworkscoalition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ko-industries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.l2wicked.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maccosmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maeklangluang-hill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicaiddental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mejortorrentes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modala.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parisiantailorandcleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popepiusthethird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popsocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popular-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prestigebuildersinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pure-ani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pureitpapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qsupport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityfoldingwagons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quick-grill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resignationletter.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.respirics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviewadultdating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sakuraexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scheduleanywhere.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solsamurais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stigertrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takeatour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theraagleela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiptophindi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedstatesmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uptmcidec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uspassaport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinistechbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wtspass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abletica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asnipfeed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camsexy.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candiceshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargslist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiefasian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialrealestatecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drhouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-oide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earenfro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esurnace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faatsidehustles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcontemporary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcoastprodetail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grownamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwtakko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisworkscoalition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ko-industries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l2wicked.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maccosmatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maeklangluang-hill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicaiddental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mejortorrentes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modala.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisiantailorandcleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popepiusthethird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popsocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popular-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestigebuildersinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pure-ani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureitpapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsupport.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityfoldingwagons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick-grill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resignationletter.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'respirics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviewadultdating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakuraexchangebitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduleanywhere.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solsamurais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stigertrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeatour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theraagleela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiptophindi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstatesmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uptmcidec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspassaport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinistechbuzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtspass.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0ba0508a00000403004830460221009b4b8aea06a93461efed77932064fe69616eb74ee316e3a1eb06e3c5544960a60221008abaec49730e0c1ae92546299e788c696e00d24b472f58dd32f99b850eae3f0b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0ba050890000040300473045022073a557ac90bb325c3167938c6035d51179d1f3254d37d8a5b70d6a8a290038b6022100a3a47dbaf92580a17768b1491dad11ca81911e715754eea4cec41be352971573
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002842e4af75a167cc4ec7a48e574d4e96d43b6ad80fac5e45673a7b498efce0c64675ef431a822b35c6004c347eb75dfec0776c1e4e5d45350f19be40af78c76054ca3876255df99f0b28b2af7d61bfa0e784f2f13ab8b5c42d7cf00e67a87e72a98c5d356531b949482bfb8bef0e55f09a809077a341eba9cfdbbbfa080b5d06767f51a673f3a911d5b2df96b42226a132ce7a3329bf0da4b686d88419368e1d921978c1c9617d4c393bf098446d293bec5b4b83cedacd8a568221fc04373077720c4807ad254af3f915224bb838e1e4721c918d3cb52f3805947a41fd70e2860ad82e3e6eeca75a54cde5b64c2ad9d92559acf35f6e4a46d6f839f504edbe69