husligt.com

Issued by R3

About this certificate

This digital certificate with serial number 04:4e:60:31:79:22:5e:e6:f4:8f:42:e7:a7:62:6c:fe:c4:3f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=husligt.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4e:60:31:79:22:5e:e6:f4:8f:42:e7:a7:62:6c:fe:c4:3f
Serial Number (int): 375119031113910297233090334667585024345151
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d3:63:60:d7:da:76:77:14:d1:36:62:c2:e4:cf:79:18:46:43:06:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:60:36:5e:e7:66:d2:83:1f:6d:98:0a:5b:af:18:5f:a7:14:45:bb
Fingerprint (sha256): 13:62:85:60:b8:0d:13:8e:77:52:22:20:18:a0:09:c5:0d:cd:67:49:33:dc:fd:6b:86:73:4d:9d:d0:e9:f5:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate husligt.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for husligt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2dm.space
*.avinven.xyz
*.baodauthau.com
*.californiahealthykids.org
*.cdcollege.com
*.cruisefinder.us
*.culturajuegos.com.ar
*.debelic.com
*.decorados.com.br
*.eckstone.com
*.elmcrestcollege.com
*.fian83.com
*.garen.vn
*.getconnected.com.au
*.googletest.com
*.husligt.com
*.icdrama.me
*.learnability.org
*.londeree.com
*.mcpk.com
*.minnon.com
*.movierulz.es
*.newzbin2.es
*.onrdictrack.com
*.optumarketplace.com
*.ordictrack.com
*.pacificoaksfcu.org
*.posusje.com
*.pvcsaving.com
*.pvcssaving.com
*.pxcgeneralmills.com
*.pxgeneralmills.com
*.retreatn.com
*.ridgeqallet.com
*.ridgewalket.com
*.ridgewaller.com
*.ridgewallwt.com
*.rifgewallet.com
*.rueckenshop24.de
*.sherre.com
*.silverscreen.com.au
*.sixwheels.com
*.soundpark.su
*.tf5.com
*.topend.com.au
*.tv21.org
*.ubrand.cool
*.vocacoes.com
*.wapphack.com
*.worldtracker.org
2dm.space
avinven.xyz
baodauthau.com
californiahealthykids.org
cdcollege.com
cruisefinder.us
culturajuegos.com.ar
debelic.com
decorados.com.br
eckstone.com
elmcrestcollege.com
fian83.com
garen.vn
getconnected.com.au
googletest.com
husligt.com
icdrama.me
learnability.org
londeree.com
mcpk.com
minnon.com
movierulz.es
newzbin2.es
onrdictrack.com
optumarketplace.com
ordictrack.com
pacificoaksfcu.org
posusje.com
pvcsaving.com
pvcssaving.com
pxcgeneralmills.com
pxgeneralmills.com
retreatn.com
ridgeqallet.com
ridgewalket.com
ridgewaller.com
ridgewallwt.com
rifgewallet.com
rueckenshop24.de
sherre.com
silverscreen.com.au
sixwheels.com
soundpark.su
tf5.com
topend.com.au
tv21.org
ubrand.cool
vocacoes.com
wapphack.com
worldtracker.org

Other certificates including the domain name husligt.com

(limited to 100 certificates)
husligt.com
monastra.com
mariayjuana.com
vivacomputers.com
mariayjuana.com
flatscity.com
vannara.com
blogway.com
k0hls.com
www.husligt.com
superatc.com
pannels.com

Certificate

The complete raw certificate details for husligt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375119031113910297233090334667585024345151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 07:04:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-13 07:04:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'husligt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 921974787588409971152105130277121208486667074681644245280011933409935299192749295298016413936932584092177556135969101574697287907514375782469446920594255205645028521897501599790808625360664262826826273296728493338292448888429272343809357373602927958580655526189573874403389929192946382367990748359642307681314577253034689117500765181215946349758611050008867994303518594067174429381049893814216311439387198566506804803190254382688540462783213239673548097128534652840278070487629982168907348300936336342661604388182085367339449349003847557205837737386188651291544183837658221073691267500234761318248251587815464806920694884073462261511017928401130067112885246502339610520636740206155053905153431552389082020469746814262868584445516606211230116823737888223461447518271114857702523468315275336253487650422350632951692728157748831604905420734819925599070479355902551897115170836118261462314729307385996722007168215075092985727767213533593678918712600406091012759439232377063445023647069362546636827394040416260368461007541163585591467009920297378236262880241753218310176044717680193365445923596936262582638640398552464370384716215114839930080330592495117374995081021402724272649780180016917446831571848346595214394914217260498747144547287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d36360d7da767714d13662c2e4cf791846430663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1670 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2dm.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avinven.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baodauthau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiahealthykids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruisefinder.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.culturajuegos.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.debelic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decorados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eckstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmcrestcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fian83.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garen.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getconnected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.googletest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.husligt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icdrama.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learnability.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londeree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minnon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movierulz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newzbin2.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onrdictrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optumarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ordictrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificoaksfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.posusje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvcsaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvcssaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pxcgeneralmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pxgeneralmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retreatn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgeqallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgewalket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgewaller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgewallwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rifgewallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rueckenshop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silverscreen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soundpark.su'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tf5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topend.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tv21.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubrand.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocacoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wapphack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldtracker.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2dm.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avinven.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baodauthau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiahealthykids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruisefinder.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturajuegos.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debelic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decorados.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eckstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmcrestcollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fian83.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garen.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getconnected.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googletest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'husligt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icdrama.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnability.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londeree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcpk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movierulz.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzbin2.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onrdictrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optumarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordictrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificoaksfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posusje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvcsaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvcssaving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxcgeneralmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxgeneralmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retreatn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgeqallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgewalket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgewaller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgewallwt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rifgewallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rueckenshop24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverscreen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundpark.su'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topend.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv21.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubrand.cool'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocacoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wapphack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldtracker.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017a0eb3165c0000040300473045022100c4debd738bd1750fb10a76944a2bf61dd0ad2e0df8f8ce1ccd33968a704fd2f90220314a602c7f12e274eb689fbc726ce16ac147b743d5d57d41d1f5bbbf5011c3e2007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017a0eb3167c000004030046304402203950e01e64bef00d9aa85ad92dcdefa22238345a69080f39991c24e4d0349c310220385a106f3310cef03484523556b3be4a95c68bb2079a27285b8412214b46fe4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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