czechian.com

Issued by R3

About this certificate

This digital certificate with serial number 03:70:bc:e4:af:c8:e8:66:db:9b:12:26:1b:52:b6:06:ba:67 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=czechian.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:bc:e4:af:c8:e8:66:db:9b:12:26:1b:52:b6:06:ba:67
Serial Number (int): 299699565162656395984241032520710662568551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: df:e4:cf:3e:9a:d8:d4:7b:fa:68:38:89:01:e1:8e:17:8f:4e:7c:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 17:3d:0f:84:9d:02:50:a4:99:9c:a9:26:62:f3:d1:48:b5:5c:8c:44
Fingerprint (sha256): 11:c1:44:b6:e3:30:ce:10:78:c1:82:60:fd:e7:8f:8b:e9:1f:d1:e6:6c:d3:ca:91:b1:4e:79:34:1c:25:55:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate czechian.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for czechian.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5yedu.com
*.actionregister.com
*.amazononlineshopping.org
*.aminas.com
*.baccker.com
*.basmaci.com
*.begle.com
*.bras4men.com
*.brendalyn.com
*.cheapsignups.com
*.compascove.com
*.coonialpenn.com
*.couvillion.com
*.czechian.com
*.dash.cm
*.elcomic.com
*.embras.com
*.exprresspros.com
*.freightamazon.com
*.ganca.com
*.godworshipers.com
*.harpham.com
*.hekinan.com
*.hoppner.com
*.indeedc.com
*.iwach.com
*.keeseville.com
*.lackster.com
*.lalangue.com
*.megasolucoes.com
*.mezzanineinvestor.com
*.muskegonmi.com
*.nngu.com
*.nonsite.com
*.olortegui.com
*.optimisedconstructions.com.au
*.reisehit.com
*.safevieh.com
*.sasitheatre.com
*.shirayuki.com
*.smokersavings.com
*.spencersgift.com
*.steubenglass.com
*.thelakesideapt.com
*.trgovinica.com
*.vargasfakesproduction.com
*.walgredns.com
*.websolutionsquard.com
*.worldbookonline.co
*.wrangler.cm
5yedu.com
actionregister.com
amazononlineshopping.org
aminas.com
baccker.com
basmaci.com
begle.com
bras4men.com
brendalyn.com
cheapsignups.com
compascove.com
coonialpenn.com
couvillion.com
czechian.com
dash.cm
elcomic.com
embras.com
exprresspros.com
freightamazon.com
ganca.com
godworshipers.com
harpham.com
hekinan.com
hoppner.com
indeedc.com
iwach.com
keeseville.com
lackster.com
lalangue.com
megasolucoes.com
mezzanineinvestor.com
muskegonmi.com
nngu.com
nonsite.com
olortegui.com
optimisedconstructions.com.au
reisehit.com
safevieh.com
sasitheatre.com
shirayuki.com
smokersavings.com
spencersgift.com
steubenglass.com
thelakesideapt.com
trgovinica.com
vargasfakesproduction.com
walgredns.com
websolutionsquard.com
worldbookonline.co
wrangler.cm

Other certificates including the domain name czechian.com

(limited to 100 certificates)
tubgals.com
czechian.com
dilevary.com
sarubbish.com
czechian.com
czechian.com
theredlioninn.com
czechian.com
rawstamina.com
czechian.com
czechian.com
czechian.com
favoritecos.com

Certificate

The complete raw certificate details for czechian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299699565162656395984241032520710662568551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 08:13:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 08:13:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'czechian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787455882008535812360355528616031082192845677770222278080537548243437279842886363617318188400465644278585032689061079919655322897950208399071470113457568942592329443550993473131626558498330480014315728479631627529963415965042360946551168740172187447998388811282973666026252077456351282148646627614854276113976836167232086517363889786379469687489544896089596382524482036424052416439035123984177422665768576575690733218593999998887190474091930818361739812658553312401029042644609062227359213113584430708253192894784579920804250793906267713690893390655126104462959818517087751775918294499864709926294457942102716222325465491267868958861487106852845384523683311527705562276619550319911201673537654536289436557183886551073961607752663375112100743308427525785970481188875621762063926352692464604980648684378418097052392222269334581363469258194461471095266113455037915308179793371773554980572224149455060808352909748693415612080025981570364627998326722283510100288029685879800002510694269360893759726583974113057665128074750871179274763327879991585114917625222140297758194689105639110596118634394158215685420533637209460592273560655218937417656144985767704429898480007574999070810213093811158477802020778132819728693165561682568249124638727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfe4cf3e9ad8d47bfa68388901e18e178f4e7c77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1702 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5yedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actionregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazononlineshopping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aminas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baccker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basmaci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.begle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bras4men.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brendalyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapsignups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compascove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coonialpenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.couvillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.czechian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dash.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elcomic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exprresspros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freightamazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ganca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godworshipers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harpham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hekinan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoppner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indeedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keeseville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lackster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalangue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megasolucoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mezzanineinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muskegonmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nngu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nonsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olortegui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optimisedconstructions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reisehit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safevieh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sasitheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirayuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smokersavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spencersgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steubenglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelakesideapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trgovinica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vargasfakesproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walgredns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websolutionsquard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldbookonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrangler.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5yedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionregister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazononlineshopping.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aminas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baccker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basmaci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bras4men.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brendalyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapsignups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compascove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coonialpenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'couvillion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czechian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcomic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exprresspros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freightamazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godworshipers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harpham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hekinan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoppner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeedc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keeseville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lackster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalangue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megasolucoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mezzanineinvestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muskegonmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nngu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olortegui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimisedconstructions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reisehit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safevieh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasitheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirayuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokersavings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spencersgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steubenglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelakesideapt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trgovinica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vargasfakesproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walgredns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websolutionsquard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldbookonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrangler.cm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c100e75150000040300483046022100c701a4f8812e5fbb3170b46b100d97342e6c8bc90340c0cfc70d5cdd05f362e4022100f8748ad1de1ecc9f21524f68a322893645abb70fd7ab064841e0345e070474490076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c100e75200000040300473045022100b5c133aa1a7b477cefe88ceee60985f16dcd0a7e7978726deef2abfa866c2ac902201a9b6ef8e354bc55e8ccc6de52d3848f624a8be2bf9314093df961821d07c25c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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