safepointis.com

Issued by R3

About this certificate

This digital certificate with serial number 04:2e:3b:d1:2b:46:53:5b:f3:ec:7f:18:8a:66:62:1e:4e:8a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=safepointis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2e:3b:d1:2b:46:53:5b:f3:ec:7f:18:8a:66:62:1e:4e:8a
Serial Number (int): 364181643124914282474269251036254106963594
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:1b:3d:93:b5:4b:b0:e1:6c:db:6f:8b:ba:cf:39:09:8b:24:d0:5c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:69:e2:6e:d4:a6:b9:45:8c:8f:57:bc:fc:60:ac:61:9b:09:60:cd
Fingerprint (sha256): 1c:e5:98:f7:b0:29:65:82:8b:26:64:0b:a6:cb:13:80:49:bf:a1:ea:a1:bb:4e:79:18:66:0e:55:c4:ae:6a:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate safepointis.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safepointis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.07400.shop
*.18plusteens.net
*.3gf.me
*.42508.shop
*.4alarmclocks.com
*.adsierra.org
*.ahbindia.com
*.automotivediscount.eu
*.bsimports.us
*.canlibahiszone.info
*.charlevillenews.com.au
*.cll14.xyz
*.contentonline.us
*.danielsjewelry.com
*.deaconplacewake.com
*.deluxenailportsmouth.com
*.donatellafabio-shop.com
*.drnataschasantos.com
*.drumexpert.net
*.find-on.me
*.forexkereskedelem.info
*.fundsassetbank.com
*.garutigioielli.com
*.hgldh3.live
*.khanhxnguyen.com
*.leiting993.com
*.liferadio.org
*.myklpages.co
*.panamerican.tv
*.parisuhde.net
*.personalizationwithsystems.com
*.ppsford.co
*.queenslandtourism.com.au
*.radyolove.net
*.reveremag.com
*.rufusstarlight.com
*.safepointis.com
*.searchcode.co
*.shingogames.com
*.soghsorhosruuosrfhx.info
*.somethingforeveryone.net
*.startupdepression.com
*.storageinabox.net.au
*.ta39.xyz
*.tbart.net
*.teamrosin.com
*.usopen2015.org
*.usvacay.com
*.voicesfromthevillage.com
*.xiaosaobao.cn
07400.shop
18plusteens.net
3gf.me
42508.shop
4alarmclocks.com
adsierra.org
ahbindia.com
automotivediscount.eu
bsimports.us
canlibahiszone.info
charlevillenews.com.au
cll14.xyz
contentonline.us
danielsjewelry.com
deaconplacewake.com
deluxenailportsmouth.com
donatellafabio-shop.com
drnataschasantos.com
drumexpert.net
find-on.me
forexkereskedelem.info
fundsassetbank.com
garutigioielli.com
hgldh3.live
khanhxnguyen.com
leiting993.com
liferadio.org
myklpages.co
panamerican.tv
parisuhde.net
personalizationwithsystems.com
ppsford.co
queenslandtourism.com.au
radyolove.net
reveremag.com
rufusstarlight.com
safepointis.com
searchcode.co
shingogames.com
soghsorhosruuosrfhx.info
somethingforeveryone.net
startupdepression.com
storageinabox.net.au
ta39.xyz
tbart.net
teamrosin.com
usopen2015.org
usvacay.com
voicesfromthevillage.com
xiaosaobao.cn

Other certificates including the domain name safepointis.com

(limited to 100 certificates)
safepointis.com
safepointis.com
safepointis.com
monkies-shoes.com
monkies-shoes.com
safepointis.com
safepointis.com

Certificate

The complete raw certificate details for safepointis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364181643124914282474269251036254106963594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 18:01:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 18:01:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safepointis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831165213328504832652894267928646228203496251797124680502716805072732850904533704969845611649990725799617252971431452025254433326955601608109865634252557055443470236581742075454632881831371711796973379346020781737368930195644132344927767371471028812286804729899770996144748159747896446239200813765435970702446331405689213879679267906899493822039580611401275318797851614067825805641719392389325801627856075522620038033254135757880778672905922475644180665816572492983172947097548142275857922415144116531144457383081167302093101698625281598291457668734488275573565033440948507780895094000481547812647918911768841234731870541676091585979487737192595865356661115828766088064962872604174922917868888834605270503856886138935272587205035866229693474669012453001200194906228275201080515704308389015257862504012382425199499684950305470135946395950741520030807169772863442301834242224753646345408303258622752999322989007019789900822247018960097379979402412243485749702281346126417538353590880959296889453262185066145412030748785878768227238432883016060239158230300616650972721719240988246854025645654035419786842331523898192240228162895370083667550362390508169959150169790748777193559585041099010148744476334090012969147891780583089365509171227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b1b3d93b54bb0e16cdb6f8bbacf39098b24d05c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1886 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.07400.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18plusteens.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3gf.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.42508.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4alarmclocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adsierra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahbindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automotivediscount.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsimports.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canlibahiszone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charlevillenews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cll14.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contentonline.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielsjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deaconplacewake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deluxenailportsmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donatellafabio-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drnataschasantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drumexpert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.find-on.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexkereskedelem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundsassetbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garutigioielli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hgldh3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khanhxnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leiting993.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liferadio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myklpages.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panamerican.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parisuhde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalizationwithsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppsford.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queenslandtourism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radyolove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reveremag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rufusstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safepointis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shingogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soghsorhosruuosrfhx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somethingforeveryone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storageinabox.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ta39.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamrosin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usopen2015.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usvacay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicesfromthevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaosaobao.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '07400.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18plusteens.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3gf.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '42508.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4alarmclocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsierra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahbindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automotivediscount.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsimports.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canlibahiszone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlevillenews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cll14.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contentonline.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielsjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deaconplacewake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deluxenailportsmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatellafabio-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drnataschasantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drumexpert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'find-on.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexkereskedelem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundsassetbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garutigioielli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgldh3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanhxnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leiting993.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liferadio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myklpages.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamerican.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisuhde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalizationwithsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppsford.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenslandtourism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radyolove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reveremag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rufusstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safepointis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shingogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soghsorhosruuosrfhx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somethingforeveryone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storageinabox.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ta39.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamrosin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usopen2015.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usvacay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicesfromthevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaosaobao.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc140792a00000403004630440220552fc371cc472eddaa4f86cad319ee586a507029130fcfeadd513f17c09176170220480f316792d514878c2952ed9aa7315e3dfdd976ec6a1a5c816c7710220b072c00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cc14079ea000004030046304402200143e00fe8c4f6cc74b7e8c259ef2dcd1ed9fa4a8aefa3ea35883bad08ca0d05022065d9a2303bcfa3712219b3401ef438d94b1f78c2d0b80963a57bac3a34578410
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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