citivestfunds.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e9:40:2a:7f:ac:3b:6c:07:4b:d4:fc:f2:2e:15:13:22:4f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=citivestfunds.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:40:2a:7f:ac:3b:6c:07:4b:d4:fc:f2:2e:15:13:22:4f
Serial Number (int): 427820226477329595482327129714358154895951
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:6a:e2:0b:4f:a3:65:53:ea:61:7a:ba:27:c0:59:22:83:aa:84:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:d8:58:f1:62:32:90:f6:43:d0:00:e3:87:2e:8c:b2:83:d8:73:eb
Fingerprint (sha256): 16:6a:bb:03:c5:e1:f1:5e:72:43:7e:46:fd:1d:09:9e:2b:3d:2e:7b:85:90:7f:aa:8f:22:f9:d4:67:68:3b:79

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate citivestfunds.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citivestfunds.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.18-23.com
*.abdallhabobakr.me
*.acidco.com
*.adalgisa.com
*.askar.com
*.attarhome.com
*.begensinler.com
*.bilionaire.com
*.bourdieu.com
*.buyfarma.com
*.cambodiangenocide.org
*.citivestfunds.com
*.classy.name
*.contrucci.com
*.demenciasen.org
*.drpez.net
*.e-textiles.com
*.easternmediterranean.com
*.elcondado.com
*.esportsmic.me
*.eugenijus.com
*.eyberg.com
*.ezanimations.com
*.hathorfi.com
*.ibnsina.com
*.iranbarkat.com
*.jzhpz.com
*.keyindiagraphics.com
*.kinezo.co
*.lacasuca.com
*.lauracampbelltrainingacademy.co.uk
*.loserpower.com
*.lyckrea.com
*.malabarista.com
*.mangues.com
*.marjeyoun.com
*.merchantaccountsservices.com
*.motke.com
*.mysupersearch.net
*.nabuk.com
*.new-dawn.net
*.nudistbeauty.com
*.robuxplanet.com
*.russian-nude.net
*.tadia.com
*.toret.com
*.tourxishuangbanna.net
*.traice.com
*.tusrecursos.com
*.waili.com
18-23.com
abdallhabobakr.me
acidco.com
adalgisa.com
askar.com
attarhome.com
begensinler.com
bilionaire.com
bourdieu.com
buyfarma.com
cambodiangenocide.org
citivestfunds.com
classy.name
contrucci.com
demenciasen.org
drpez.net
e-textiles.com
easternmediterranean.com
elcondado.com
esportsmic.me
eugenijus.com
eyberg.com
ezanimations.com
hathorfi.com
ibnsina.com
iranbarkat.com
jzhpz.com
keyindiagraphics.com
kinezo.co
lacasuca.com
lauracampbelltrainingacademy.co.uk
loserpower.com
lyckrea.com
malabarista.com
mangues.com
marjeyoun.com
merchantaccountsservices.com
motke.com
mysupersearch.net
nabuk.com
new-dawn.net
nudistbeauty.com
robuxplanet.com
russian-nude.net
tadia.com
toret.com
tourxishuangbanna.net
traice.com
tusrecursos.com
waili.com

Other certificates including the domain name citivestfunds.com

(limited to 100 certificates)
citivestfunds.com
citivestfunds.com
citivestfunds.com
citivestfunds.com

Certificate

The complete raw certificate details for citivestfunds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427820226477329595482327129714358154895951
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 21:44:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 21:44:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citivestfunds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777174606308174299218910351347418565769511858902574017748175333890877945889149938620851456244439376973728351638989857861073267095523075241271526380517559733839958717542319027058665380289912150559010921181505945964561737263216768382389332839650232767374983919739068473902617118443831360279603169252867488601771790603228661911195599188016918977662989616271624090524144762040339392512427791077999192467727352802595783271942101062481099132962069937637176520088577842143355460721838860882596450562314955849091794072917361587905646393888978275081356995905755200663675989260454767229485601760269981174457228102454386129443377252147740535373183290995313888215644129263398477031820628028006794363366921490960962220166628585336904290353245254893848783156436608177329111029550130302127245508982080187106546514148480927223086178584754123563351865176069667248503746986078155416736190066639547530666898815128016486476349489641091063456460460493619162273811292318109463772820440866071286682805791558941372293823436627050809013919114393126846176465122622938804271282993147211351844723769199746993861126384488541221476701455591654445520650148376023254291438864181224898283320140354614464085301309441367547342434022379013176649799140477295565841835883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf6ae20b4fa36553ea617aba27c0592283aa8440
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18-23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abdallhabobakr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acidco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adalgisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attarhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.begensinler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bilionaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bourdieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambodiangenocide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citivestfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classy.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contrucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demenciasen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drpez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-textiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easternmediterranean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elcondado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esportsmic.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eugenijus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezanimations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hathorfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibnsina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iranbarkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jzhpz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keyindiagraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinezo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacasuca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lauracampbelltrainingacademy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loserpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyckrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malabarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marjeyoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merchantaccountsservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysupersearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nabuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.new-dawn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudistbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robuxplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russian-nude.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tadia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tourxishuangbanna.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tusrecursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18-23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdallhabobakr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acidco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adalgisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attarhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'begensinler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilionaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourdieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambodiangenocide.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citivestfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classy.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demenciasen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drpez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-textiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easternmediterranean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elcondado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportsmic.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eugenijus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezanimations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hathorfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnsina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iranbarkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jzhpz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyindiagraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinezo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasuca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauracampbelltrainingacademy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loserpower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyckrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malabarista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marjeyoun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchantaccountsservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysupersearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-dawn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudistbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robuxplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russian-nude.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourxishuangbanna.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusrecursos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waili.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa5512b42000004030048304602210081b5b325357198f76d5b578a5790e43e8d4796f82c1898ba8aef2db29881a5b402210096fe214852165b0173545eb3fa371fde94177ac4187103da983f9bcf8cd2e6590077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa5512d570000040300483046022100abdf769454f61274981d9e56070b1aaa44cca6bb0a5a34a0e030f96150393506022100b9eb051e883d3ff5b01a9c89a31a62422ba42aaa747186c59652e0ce2c1eec5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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