ultil.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:ee:30:3c:36:bb:7d:ce:bd:76:c6:f1:d6:4e:ea:06:e7:71 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ultil.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:30:3c:36:bb:7d:ce:bd:76:c6:f1:d6:4e:ea:06:e7:71
Serial Number (int): 342388176714178002842734408953160897324913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:e8:26:25:b0:61:6c:1e:5a:69:54:4d:55:fb:7d:6a:20:1d:52:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:41:a6:f7:76:ce:b5:f0:54:82:9b:c7:1d:14:53:5d:60:b5:48:24
Fingerprint (sha256): 0f:a2:57:10:28:e2:90:83:3d:27:41:5d:d4:9c:b8:9a:da:e8:fc:e4:1d:c3:60:71:fe:8b:b0:74:f7:8e:51:46

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ultil.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ultil.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advisormatch.com.au
*.allround-roofing.co.uk
*.americanfrieght.us
*.annieappleseed.org
*.auzoscout24.de
*.bbcls.org
*.biolnnovations.net
*.bmtinfo.net
*.bogfinanzas.net
*.bouncy.com.au
*.brihaspati.net
*.broadbandspeedtest.net
*.chrunchyroll.de
*.constitioncenter.org
*.deccu.org
*.denver-electronics.de
*.descargamusica.me
*.designerhome.com.au
*.dryspace.cc
*.escalators.au
*.experin.co.uk
*.flyingmodels.org
*.friendlyinnfrankton.co.uk
*.gogoanime.org
*.healthallience.org
*.hotelcoupons.com.au
*.hymal.net
*.jumstart.org
*.livingpai.com
*.matrixalamls.net
*.minefield.us
*.minesotaworks.net
*.mistake.com.au
*.nationalspeechanddebate.org
*.njcti.org
*.ntxgsdrescue.org
*.nyccitycenter.org
*.papercraftplanet.net
*.peakfitnesssthelens.co.uk
*.postings.com.au
*.researchgat.net
*.survetmonkey.co.uk
*.taxicaborlando.com
*.tecnovales.com
*.toydogrescue.org
*.ultil.com.br
*.windelmom.de
*.wirginwines.co.uk
*.wwwicrimewatch.net
*.xepedia.com
advisormatch.com.au
allround-roofing.co.uk
americanfrieght.us
annieappleseed.org
auzoscout24.de
bbcls.org
biolnnovations.net
bmtinfo.net
bogfinanzas.net
bouncy.com.au
brihaspati.net
broadbandspeedtest.net
chrunchyroll.de
constitioncenter.org
deccu.org
denver-electronics.de
descargamusica.me
designerhome.com.au
dryspace.cc
escalators.au
experin.co.uk
flyingmodels.org
friendlyinnfrankton.co.uk
gogoanime.org
healthallience.org
hotelcoupons.com.au
hymal.net
jumstart.org
livingpai.com
matrixalamls.net
minefield.us
minesotaworks.net
mistake.com.au
nationalspeechanddebate.org
njcti.org
ntxgsdrescue.org
nyccitycenter.org
papercraftplanet.net
peakfitnesssthelens.co.uk
postings.com.au
researchgat.net
survetmonkey.co.uk
taxicaborlando.com
tecnovales.com
toydogrescue.org
ultil.com.br
windelmom.de
wirginwines.co.uk
wwwicrimewatch.net
xepedia.com

Other certificates including the domain name ultil.com.br

(limited to 100 certificates)
ultil.com.br
teamworld.com.au
gams2win.com
persafe.net
ultil.com.br
persafe.net
nylotteryny.org
ultil.com.br
bikeriding.com.au
ktht.info
ultil.com.br

Certificate

The complete raw certificate details for ultil.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342388176714178002842734408953160897324913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 04:27:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 04:27:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ultil.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757622735780387193182804989860625460685979017870605729857740721020015252399629273394765685279743410641808729851559488850383615696232920755702443241519082262928824380525141061419022325344428846252169602353451005185200497562916361067004122496650486005351057013486061863367043759563784955454600735693570583759421654506826579936369658914709765387327834199592333016894873749862483577932371552959943787357715502727648041793537316034195486663261637813487552301931121688073144987928235316407504133442736479365708384032241432627589637580321372059601284167438342625655320852870609177488718266787629160603366577818216351455170021094432524487334051312621333345509366113462503407916178478427270301101484016906621809109280226755656542767244536384319303106561721877400061174120313942616506918985764469513037597122642698041771382906751389218928595214129499354117126923828534435927820984950099486324420523065534193877051358768838569627451749258754846720383385120814983699322323706588175271793379211470520888059100762189100156876208869250792764725008926355250002355337309726998081659896492409583608426124071871132693013580750720740337670613905872543326162974429225217211700835751808189086363955910531458745516021484413992209763432667590758267056235759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ade82625b0616c1e5a69544d55fb7d6a201d5298
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1894 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advisormatch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allround-roofing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanfrieght.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annieappleseed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auzoscout24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbcls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biolnnovations.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmtinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bogfinanzas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bouncy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brihaspati.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadbandspeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chrunchyroll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constitioncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deccu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denver-electronics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.descargamusica.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designerhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dryspace.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escalators.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingmodels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendlyinnfrankton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gogoanime.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthallience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelcoupons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hymal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jumstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingpai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixalamls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minefield.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minesotaworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalspeechanddebate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njcti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntxgsdrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyccitycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peakfitnesssthelens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.researchgat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survetmonkey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxicaborlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnovales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toydogrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windelmom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wirginwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwicrimewatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xepedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisormatch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allround-roofing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfrieght.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annieappleseed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auzoscout24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolnnovations.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmtinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogfinanzas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouncy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brihaspati.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadbandspeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrunchyroll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constitioncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deccu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-electronics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descargamusica.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designerhome.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dryspace.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalators.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingmodels.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendlyinnfrankton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogoanime.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthallience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelcoupons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hymal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingpai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixalamls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minefield.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minesotaworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalspeechanddebate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njcti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntxgsdrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyccitycenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakfitnesssthelens.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchgat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survetmonkey.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxicaborlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnovales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toydogrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windelmom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wirginwines.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwicrimewatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xepedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d014a66220000040300483046022100f85516b83f9384648e385b1184e1dad14f073fdd6d1d87f4c2068a49f631d57b0221009eaebc2f855f5a8502d10d0ac3b2add3f9cf1d120792606629ed014741ed9a7f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d014a669c000004030047304502202fc57487d6a1751b1c8f7c9e97d2cfbf3185f607ff10c2618fc16847383e5084022100fb324bae9af93a6cdfe0b2157a021045c3f9e682854e8d98d3f249c182530d4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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