afascreenings.org

Issued by R3

About this certificate

This digital certificate with serial number 03:ea:b2:ef:fd:58:25:e8:1e:b7:6d:13:d1:93:bc:68:a1:b3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=afascreenings.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:b2:ef:fd:58:25:e8:1e:b7:6d:13:d1:93:bc:68:a1:b3
Serial Number (int): 341200780335412684825817480928167471915443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:a8:38:fd:e9:73:f7:8e:59:85:4a:fd:dd:9f:6d:b5:6e:ef:a8:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:d5:b3:e0:10:c5:20:3f:ed:c4:eb:bd:73:5e:d5:8f:1e:86:16:61
Fingerprint (sha256): 17:f0:29:10:00:7c:43:fb:c8:c9:0b:bb:6e:f7:b9:72:f6:f0:f7:3a:d2:8b:0a:4c:ab:85:3e:a0:32:76:a0:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate afascreenings.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afascreenings.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.afascreenings.org
*.africa-grid.org
*.anistar.co
*.baituli.co
*.bangi.com
*.ceeger.co
*.cfsbcn.co
*.cndzys.co
*.comoganhardinheiro.com
*.coolerbooks.com
*.critterscornerpetshop.com
*.dealplatter.co
*.dengvaxia.us
*.dentinger.com
*.dimensiones.com
*.domainsalarm.com
*.e-boks.co
*.ecnavi.co
*.erotique.com.au
*.espiao.com
*.fetish.cm
*.fxgiants.co
*.gandul.co
*.gralon.co
*.gunbrooker.com
*.halfbras.com
*.ikream.co
*.imovs.cc
*.inkpens.com.au
*.itokoo.co
*.joiedevie.com
*.kopetskyscarwash.net
*.mamedev.co
*.mamine.com
*.motionapex.com
*.naturalnchicmakeup.com
*.neoteo.co
*.netsea.co
*.nickelodon.com
*.nimbys.com
*.nojoda.com
*.picbob.co
*.pictonline.org
*.redage.co
*.rkf002.cc
*.sergur.co
*.shaindel.com
*.skarbonka.com
*.strikebitclub.com
*.vehiculeselectriques.com
afascreenings.org
africa-grid.org
anistar.co
baituli.co
bangi.com
ceeger.co
cfsbcn.co
cndzys.co
comoganhardinheiro.com
coolerbooks.com
critterscornerpetshop.com
dealplatter.co
dengvaxia.us
dentinger.com
dimensiones.com
domainsalarm.com
e-boks.co
ecnavi.co
erotique.com.au
espiao.com
fetish.cm
fxgiants.co
gandul.co
gralon.co
gunbrooker.com
halfbras.com
ikream.co
imovs.cc
inkpens.com.au
itokoo.co
joiedevie.com
kopetskyscarwash.net
mamedev.co
mamine.com
motionapex.com
naturalnchicmakeup.com
neoteo.co
netsea.co
nickelodon.com
nimbys.com
nojoda.com
picbob.co
pictonline.org
redage.co
rkf002.cc
sergur.co
shaindel.com
skarbonka.com
strikebitclub.com
vehiculeselectriques.com

Other certificates including the domain name afascreenings.org

(limited to 100 certificates)
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org

Certificate

The complete raw certificate details for afascreenings.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341200780335412684825817480928167471915443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 21:31:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 21:31:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afascreenings.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807247416238626776008219667511371990998543372580849957573957053364184617729853175911703794167980193910389974939256224743045137031114328548328261888565103412197510636108534155866816784322487567454186395840407848503506607251957255267723776728988933199269841071441352829998933376671531139379912969879841400647795062223864488145282736855541308779439219389042910855035831190503332102037247898869547191059385701449653854699255715548404030858333404146539709939416165980058114391992407956048772637839773022440289941163988505361921455526844189039839967197120630253416456717481026126382148349800658547746854677889397929609623908392779566296758442704661717431124640249837093715092881026125782592599913487096803223333356403332034140385377008271936331301137836810878957564267065501190507332852596791387848781942427031806510950736156298375058797830188291743326873279808458499510632823937559059208977399611437360001118297536506896217900824336816283376444696375069394830685637108778389472320654943013109525154454563019578857823386050962298831315039924520877508157900081729014512984120299569743067819854913031407942341723752859841995488235977102391503353161234544995328613092143964928885333462690215952491561647956278377726514125827227162412392259471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87a838fde973f78e59854afddd9f6db56eefa884
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africa-grid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anistar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baituli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceeger.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cfsbcn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cndzys.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comoganhardinheiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coolerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.critterscornerpetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealplatter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dengvaxia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dimensiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainsalarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-boks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecnavi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetish.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxgiants.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gandul.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gralon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gunbrooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halfbras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imovs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkpens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itokoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joiedevie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kopetskyscarwash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamedev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalnchicmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neoteo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netsea.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickelodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nimbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nojoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picbob.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkf002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sergur.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaindel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skarbonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strikebitclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vehiculeselectriques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa-grid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anistar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baituli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceeger.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfsbcn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cndzys.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comoganhardinheiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'critterscornerpetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealplatter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dengvaxia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimensiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainsalarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-boks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnavi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetish.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxgiants.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandul.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gralon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunbrooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfbras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imovs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkpens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itokoo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joiedevie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kopetskyscarwash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamedev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalnchicmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neoteo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netsea.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickelodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nojoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picbob.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkf002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sergur.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaindel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skarbonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strikebitclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiculeselectriques.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa5455bb700000403004630440220202c30f04a38b4fa8f04307720e654c427c8d0f7a01eb30ae3fdd63c3ced01900220615706c1f0d681b24daed6e57d3ab7b2f7c2aebbcaf5be6e6cf6ac86a1d706d20076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa5455bbb000004030047304502207f8177a7250501cec85439badcf61e799007f5b552e27a241f992fa953ee219e022100a69318110a30c4682a2dad340657bc2c206e5e6e5d9adeeedc9250b21928de33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b744a65ca6fd1b7ca1ffe4fca4cd58536659a97f78ae50509442398de4a948cce6d55f94d9d90013c2d79dd4a547666e15ae2de7d5bc89c7dad38dbca511d4c6af0737555609357b4c3547da87b7f6e6f711cb8c0b10b47abf94d6ccb97d3b114e679a2d86fcba3662ab4d458fd76a57a015cfb9fc1c06f63d04a4d44fe56c088261342ed51245dc502e4e62ec8e1b2097e3bf819fd1478c8cd60899b7852709291b3cd08d3b18e2dbf034a31e57608b083a9d7bfcc4631c2c12ccec392733939ea6ff4b4c17df8a2c99857f181f157fbe7fdfee49c6ed3f65e87b011b74a590809729b53d48a897e7676446368e1d755a5e5254e0617a4806b83e314ccffcf