meridiancu.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:f4:10:8a:e6:f6:9c:67:b7:7b:b1:f3:6f:d2:2f:09:98 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=meridiancu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:f4:10:8a:e6:f6:9c:67:b7:7b:b1:f3:6f:d2:2f:09:98
Serial Number (int): 293307535443920598149039764403556879108504
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:1b:b6:52:36:7c:f2:35:71:d2:17:ab:31:25:11:27:2c:98:14:f1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:11:a4:14:9b:b3:48:b5:4c:15:b0:dc:a0:18:53:1d:97:2b:9d:0a
Fingerprint (sha256): 12:3a:d1:f0:32:a9:64:f3:a2:2f:14:b2:d0:9f:6e:42:53:6d:8e:93:74:d1:17:06:1c:9b:ae:53:cd:58:e6:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate meridiancu.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meridiancu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5gnc.com
*.acheconcursos.com
*.anchorimpart.com
*.asprobeachbarrhodes.com
*.autoescolaalianca.com
*.bed.cm
*.brandocorsets.com
*.bsrclaysus.com
*.carnetdecoche.net
*.cinemalibero.co
*.classactioninc.com
*.delta-dental.co
*.djgeovane.com
*.florence.florist
*.fullpsycheahead.com
*.globenti.com
*.home130.com
*.jkturkey.com
*.kea.au
*.keith.graphics
*.keith.parts
*.keiths.guru
*.kentucky.singles
*.laminairun.com
*.libecca.com
*.licolnproject.us
*.meridiancu.com
*.milwaukee.farm
*.nanjing.photos
*.narod-novosti.com
*.olor-musique.com
*.onetouch9.com
*.opierday.com
*.orgyahoo.com
*.orrcadillac.com
*.outletpass.net
*.ovesrstock.com
*.ovoerstock.com
*.party4kiddies.com
*.prachimiscream.com
*.selcuksports.live
*.sockcop.us
*.solarnayoga.info
*.techgeekspace.com
*.terafile.io
*.tina.clothing
*.torshak.com
*.truth.cm
*.ttwiri.com
*.tummathailand.com
5gnc.com
acheconcursos.com
anchorimpart.com
asprobeachbarrhodes.com
autoescolaalianca.com
bed.cm
brandocorsets.com
bsrclaysus.com
carnetdecoche.net
cinemalibero.co
classactioninc.com
delta-dental.co
djgeovane.com
florence.florist
fullpsycheahead.com
globenti.com
home130.com
jkturkey.com
kea.au
keith.graphics
keith.parts
keiths.guru
kentucky.singles
laminairun.com
libecca.com
licolnproject.us
meridiancu.com
milwaukee.farm
nanjing.photos
narod-novosti.com
olor-musique.com
onetouch9.com
opierday.com
orgyahoo.com
orrcadillac.com
outletpass.net
ovesrstock.com
ovoerstock.com
party4kiddies.com
prachimiscream.com
selcuksports.live
sockcop.us
solarnayoga.info
techgeekspace.com
terafile.io
tina.clothing
torshak.com
truth.cm
ttwiri.com
tummathailand.com

Other certificates including the domain name meridiancu.com

(limited to 100 certificates)
meridiancu.com
lolvids.com
meridiancu.com
fashionforcharity.com
bllomindales.com
smp-inc.com
cineblog01.gratis
meridiancu.com
cineblog01.gratis
kidzhealth.org
cineblog01.gratis
*.1300seonow.au
tomberland.com
kidzhealth.org
kidzhealth.org
www.desfasados.com

Certificate

The complete raw certificate details for meridiancu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293307535443920598149039764403556879108504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 18:57:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 18:57:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meridiancu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864524192759589547331022991436695862640399827968502811021106903131045153693659911830684095114446125855484202123124117268065814615342343758484156530115768926035952338611585471880331525888722170979990776332498416659686330798938896699012020785064636409381108039930416253473112838384021406175889955312614146156322958483057337353429251882819324939547261495651119558736390650187959189636556700276599823468973657584549176460334884061751618628836887726760212313354999537800439185315718209069160844970644244254540952352075065998562527162121385122047024816122165585379382426756714584682343380143665894351448543261355624401026105354169900346207274623786634866773479425277116257844888760031112074616449303163556548644576028383977842511583219553114330808903689859396521931394877730931071612230830426680695885501945718658222621541425293666307421813889382982795139977238443486243750591625604151097884357719361209925105060473563506531202645781684532135248853341395363968671419138372302869733728408751617146052615739108623520766873746836777810504417892171413060323123811364015482643238541687992639923124082851319032459894309086518626698477430404537957050232494857267416530135914364853792024544329466801260018008438049848913404587964468643080048011399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de1bb652367cf23571d217ab312511272c9814f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1710 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5gnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acheconcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anchorimpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asprobeachbarrhodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoescolaalianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandocorsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnetdecoche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemalibero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classactioninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delta-dental.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djgeovane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florence.florist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullpsycheahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.home130.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkturkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kea.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keith.graphics'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keith.parts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keiths.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kentucky.singles'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laminairun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libecca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licolnproject.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milwaukee.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanjing.photos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narod-novosti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olor-musique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onetouch9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opierday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outletpass.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.party4kiddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prachimiscream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selcuksports.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sockcop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarnayoga.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techgeekspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terafile.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tina.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torshak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truth.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttwiri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tummathailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acheconcursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchorimpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asprobeachbarrhodes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoescolaalianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandocorsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnetdecoche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemalibero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classactioninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta-dental.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djgeovane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florence.florist'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullpsycheahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home130.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkturkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kea.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keith.graphics'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keith.parts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keiths.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kentucky.singles'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laminairun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libecca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licolnproject.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milwaukee.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanjing.photos'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narod-novosti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olor-musique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetouch9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opierday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outletpass.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'party4kiddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prachimiscream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selcuksports.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sockcop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarnayoga.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techgeekspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terafile.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tina.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torshak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truth.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttwiri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tummathailand.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d51a6395a000004030047304502206ae739647753683ea6f71bb0224ad2325d6fcf81841f43257a2ca6c3569ade9d022100c0ce8343cfe4a2ffa3b2a27a8e98a9497bb66685687e1712cf596892b41aea92007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d51a6395b0000040300473045022100e6697558d1c328662d4e85f60bbb9b14ba06f569d2b10f095847cf232b160f9002206c1d42b343954b8ad7e4a46eac9816ce7248bbb772af366b71f211dd30ef1b61
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053971845dd65c49e8e4ed7d0e63f347fc42bb607c0ca8acf897ebd7765d57b008c8c266c5dba8463d3fbcc289736c3e608d7e5362d9791cabd64a30040fca158048a87ed55f035dfb94b2caa8d6e63e0c9b5fc20bfaaad751ba02e65f58cebc45b3b8c443b67e107204b9361faddccf3754b0e3ad3ec3924277fa67f8fc8390d20d53c2f6313340ab38c36e33a30e0169508b87beade42fcfa7b53288d7f682d8bf5e13821889fc5f1df609629376e5327afab50acff0b78fb5bb81a80a9143706a63fe3f4c25543fd2e15841750d60c6f742d784b2a911a519cc96dd258616956f4867b4f160680c001112669c6cd680c585b9a43a997968e7237d56ab052bd