maruim.com

Issued by R3

About this certificate

This digital certificate with serial number 03:51:e2:b6:57:32:38:bf:b3:cc:2d:c6:13:f9:b6:31:b6:3c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=maruim.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:e2:b6:57:32:38:bf:b3:cc:2d:c6:13:f9:b6:31:b6:3c
Serial Number (int): 289201081809501006364169814707079065220668
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:de:83:4b:5a:6a:e6:4e:20:a8:01:36:d8:bf:0a:32:1a:a2:49:93
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:8f:0d:f2:bc:89:4b:f2:34:69:37:a0:83:91:04:86:8b:4f:4e:02
Fingerprint (sha256): 10:74:86:e7:f0:85:05:61:d4:b5:09:4a:58:1f:28:3d:a5:96:a2:29:d4:72:30:db:3d:94:10:87:aa:37:ef:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate maruim.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maruim.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bayfederalcreditunion.com
*.chatcurtain.top
*.chevannes.com
*.classicfirarms.com
*.clickworket.com
*.decoar.com.br
*.delander.com
*.desit.com
*.desjardinns.com
*.elementsupply.com
*.encabezado.com
*.eventsone.com
*.fb1.us
*.flofest.com
*.gahnstrom.com
*.galas.com
*.gannie.com
*.gotoasssist.com
*.grandxing.com
*.happinessgoalz.com
*.huette.com
*.ibraryco.kr
*.insolesupport.com
*.jjhenglish.co
*.jomcuci918.co
*.lagrappe.com
*.lidl-conekt.de
*.luxurypreowned.com
*.maruim.com
*.masterclss.com
*.myruschs.com
*.mytraveles.com
*.nfcjuice.com
*.pakistanlive.com
*.rriteaid.com
*.safetyresearch.com.au
*.setupslingbox.com
*.sheffieldfinancial.co
*.shohuo.com
*.sqlconsole.com
*.stanleylin.co
*.thegreatourses.com
*.thelivechannel.com
*.triolis.com
*.vinko.com.au
*.webtoons.co
*.wiimsg.co
*.wwwmixbook.com
*.wwwswifttrans.com
*.xn--selbstbruner-ncb.de
bayfederalcreditunion.com
chatcurtain.top
chevannes.com
classicfirarms.com
clickworket.com
decoar.com.br
delander.com
desit.com
desjardinns.com
elementsupply.com
encabezado.com
eventsone.com
fb1.us
flofest.com
gahnstrom.com
galas.com
gannie.com
gotoasssist.com
grandxing.com
happinessgoalz.com
huette.com
ibraryco.kr
insolesupport.com
jjhenglish.co
jomcuci918.co
lagrappe.com
lidl-conekt.de
luxurypreowned.com
maruim.com
masterclss.com
myruschs.com
mytraveles.com
nfcjuice.com
pakistanlive.com
rriteaid.com
safetyresearch.com.au
setupslingbox.com
sheffieldfinancial.co
shohuo.com
sqlconsole.com
stanleylin.co
thegreatourses.com
thelivechannel.com
triolis.com
vinko.com.au
webtoons.co
wiimsg.co
wwwmixbook.com
wwwswifttrans.com
xn--selbstbruner-ncb.de

Other certificates including the domain name maruim.com

(limited to 100 certificates)
maruim.com
tubulares.com
tubulares.com
www.maruim.com
laava.com
chateauparkcity.com
setupslingbox.com
pnwhacks.com
maruim.com
maruim.com
maruim.com
www.utahstemcell.net
setupslingbox.com
directlin.com

Certificate

The complete raw certificate details for maruim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289201081809501006364169814707079065220668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 11:00:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 11:00:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maruim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764251890738849286309766794670355224484886118977664494623759116349806693125632637722935144741313035850565701300931596647064723837034353376661434050410670724560984515986540061549674585481416609305694368294420202049076041297287818444322282526597005308033164844797070861805740895229914904899399612702747310265343442596260225013502508562522702555705554443692740439271676699125712535006988451306464883440176256608110711413701912104555902896779468585895528032249780778397873337936563890382537797261336140637299409669552750992222236875842058349830976083535347369273772728493376919522301338721776556384190284227555195325599485373764740456276026225286794105519165810388371505575617809695493880920302061738067068606122280470382260582095083415866088254497442620462600611007440528108693566531087695437491063530849483518199241951786416037988069622664647847642681595524733867034105727607683684630350551597948219238540573186728054990292099348619759314240681510697634874890488433497545203818945376550285844419142084305557530166446561962438848988706476902511465480918032773212886114635748837570726349137706631538878424211466477314996204801497578090788085288810352441917785805147394356737311039969674985176796663947350235761028107535844894132872876511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cde834b5a6ae64e20a80136d8bf0a321aa24993
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1706 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayfederalcreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatcurtain.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chevannes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classicfirarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clickworket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decoar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desjardinns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elementsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encabezado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eventsone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fb1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flofest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gahnstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gannie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotoasssist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grandxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happinessgoalz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibraryco.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insolesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjhenglish.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jomcuci918.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagrappe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lidl-conekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxurypreowned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maruim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masterclss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myruschs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytraveles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfcjuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakistanlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rriteaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetyresearch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setupslingbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheffieldfinancial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shohuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqlconsole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stanleylin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegreatourses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelivechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinko.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webtoons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiimsg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmixbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwswifttrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--selbstbruner-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayfederalcreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatcurtain.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chevannes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicfirarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickworket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoar.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desjardinns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encabezado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventsone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flofest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gahnstrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gannie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotoasssist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happinessgoalz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibraryco.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insolesupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjhenglish.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jomcuci918.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrappe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidl-conekt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxurypreowned.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maruim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterclss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myruschs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytraveles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfcjuice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakistanlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rriteaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetyresearch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setupslingbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheffieldfinancial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shohuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqlconsole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanleylin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatourses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelivechannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinko.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtoons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiimsg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmixbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwswifttrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--selbstbruner-ncb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcdb492d20000040300483046022100c3bf38ba5e3b9b4eae54b4ddeff2d8176d3875b68f3899975a70562f51105b49022100c2f329e4be0d114d36f925936ade4f78545889432106271ebb25f375b4334aee007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcdb492d100000403004730450221008feeacbb54489b002453988fa779b313a0f5fff24ed62640a8b73fe95f75019602207c8132319d47c204c4a80cd93031a386423f8dc1e9cb12db8188e8e56d8f229b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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