dumbaranaturals.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c1:9c:10:9e:c1:64:6a:25:42:fc:8d:b7:cd:2a:95:74:26 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dumbaranaturals.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c1:9c:10:9e:c1:64:6a:25:42:fc:8d:b7:cd:2a:95:74:26
Serial Number (int): 414331086406817123033641148809394385155110
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:db:ba:c4:21:29:c9:27:bd:44:a0:20:a9:d3:a4:f4:83:2e:6f:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:20:5d:09:07:23:5b:42:49:cc:9e:d0:89:52:ab:6a:ac:f8:ea:66
Fingerprint (sha256): 1c:fa:b0:4a:15:bf:b3:30:89:f1:86:a9:dc:1a:f0:d8:a5:31:7a:fe:45:ea:8e:39:33:72:d0:94:a2:e3:6d:43

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dumbaranaturals.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dumbaranaturals.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ahmadnusyirwan.com
*.aimforthemoonshop.com
*.alvinigroup.com
*.atkinsontoyota.com
*.briixgroup.com
*.bujinkanbanzaiperu.com
*.camminidipotere.com
*.coinnemo.com
*.comerciamas.com
*.divisionmagyarul.com
*.doofinc.com
*.dumbaranaturals.com
*.dvdfilm.net
*.extension.media
*.flurtbook.com
*.gacourtnews.com
*.hangersrestaurant.com
*.heartwarmersonline.com
*.indianmyra.com
*.interviewfox.com
*.jamesconcreteservice.com
*.keyakitime.com
*.librosparadescargargratis.com
*.lisapasseridesign.com
*.loganwifi.com
*.lspower.xyz
*.lyricnilu.com
*.mcedit.com
*.mobilescores.com
*.mybabyworldcenter.com
*.parcgreenwichs.com
*.pelisplus-hd.com
*.pointshoe.com
*.punjabchicks.com
*.radio33.com
*.rawauthenticwear.com
*.rdigitalmart.com
*.reformat.com
*.sciencegist.com
*.shop-apothe.com
*.signetdiagnostic.com
*.slackademics.com
*.sunshine-live.com
*.themanymindsofme.net
*.tskarmen.com
*.watchmms.com
*.wenwenfan.com
*.wishmalokaya.com
*.wrighttherapy.com
*.writemypaper.com
ahmadnusyirwan.com
aimforthemoonshop.com
alvinigroup.com
atkinsontoyota.com
briixgroup.com
bujinkanbanzaiperu.com
camminidipotere.com
coinnemo.com
comerciamas.com
divisionmagyarul.com
doofinc.com
dumbaranaturals.com
dvdfilm.net
extension.media
flurtbook.com
gacourtnews.com
hangersrestaurant.com
heartwarmersonline.com
indianmyra.com
interviewfox.com
jamesconcreteservice.com
keyakitime.com
librosparadescargargratis.com
lisapasseridesign.com
loganwifi.com
lspower.xyz
lyricnilu.com
mcedit.com
mobilescores.com
mybabyworldcenter.com
parcgreenwichs.com
pelisplus-hd.com
pointshoe.com
punjabchicks.com
radio33.com
rawauthenticwear.com
rdigitalmart.com
reformat.com
sciencegist.com
shop-apothe.com
signetdiagnostic.com
slackademics.com
sunshine-live.com
themanymindsofme.net
tskarmen.com
watchmms.com
wenwenfan.com
wishmalokaya.com
wrighttherapy.com
writemypaper.com

Other certificates including the domain name dumbaranaturals.com

(limited to 100 certificates)
dog11.net
dumbaranaturals.com
bygardendesign.com
seabrightdistribution.com
dumbaranaturals.com
dumbaranaturals.com
dumbaranaturals.com
dumbaranaturals.com

Certificate

The complete raw certificate details for dumbaranaturals.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414331086406817123033641148809394385155110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 14:18:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 14:18:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dumbaranaturals.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1013214306790275045894625319812393000809317469965456929507392009082012030309075612121515049228268417649281782702327488243262941677276664945601093163888367961397289587400749139414593582090030275864810051549186402270207417471877466378243841579521034953631627248713671089053891043092141381786876851379263448887953522398792758909323712460633278788213179249067078469522550702775220127196589609267366442858702337804761179879871976098078077451336524604796685451506653765006617821806067307004087956664563338077328925934900662702425276209508016847804061751258798337220532559656182468646888601966074346500631132571315255434128512190024701051505674730165164482985531603371682205417561859723441259937717081508098988208853219768303406382126054799636550667831097399957471730257091563335767392897699663610011312487355190421460220233161865185727756914183194538105296451953649265162334473880416448942893335538466104172095351918515553657107149754578725255953772800243612448309696608502605269254073206119246415812063408250656059896813037675009086640953990001193856963462623338461490698494863500511849766510296729359195983505233328182127778562161897024151334158936483850685011293447307609754582551642804632836471377584766431800541124407645663089592272449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5edbbac42129c927bd44a020a9d3a4f4832e6f88
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahmadnusyirwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aimforthemoonshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alvinigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atkinsontoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briixgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bujinkanbanzaiperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camminidipotere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinnemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comerciamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divisionmagyarul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doofinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dumbaranaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvdfilm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extension.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flurtbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gacourtnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hangersrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartwarmersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianmyra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interviewfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamesconcreteservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keyakitime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.librosparadescargargratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisapasseridesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loganwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lspower.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyricnilu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilescores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybabyworldcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parcgreenwichs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelisplus-hd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pointshoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.punjabchicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radio33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rawauthenticwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rdigitalmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reformat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciencegist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shop-apothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signetdiagnostic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slackademics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunshine-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themanymindsofme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tskarmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wenwenfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wishmalokaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrighttherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.writemypaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahmadnusyirwan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimforthemoonshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alvinigroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atkinsontoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briixgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bujinkanbanzaiperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camminidipotere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinnemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comerciamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divisionmagyarul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doofinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumbaranaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvdfilm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extension.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flurtbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gacourtnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangersrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartwarmersonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianmyra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interviewfox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesconcreteservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyakitime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librosparadescargargratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisapasseridesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loganwifi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lspower.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyricnilu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcedit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilescores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybabyworldcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parcgreenwichs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelisplus-hd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointshoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punjabchicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio33.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rawauthenticwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdigitalmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reformat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciencegist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-apothe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signetdiagnostic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slackademics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunshine-live.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themanymindsofme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tskarmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchmms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenwenfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wishmalokaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrighttherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writemypaper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cabdb3aec0000040300463044022009cfe79da950d50855dd4d91a21353847ed05e6f81f1cee47d44808db66a753202207cb5a6b06424d1e9036343288009a9cfcae287d770b0354173ac59c49e6a0c1800770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018cabdb3bb00000040300483046022100e82ae62cc6a99bd432d9c46df049bd6056a4225a7c4619f0c8d9b2a344cb99c1022100cefcc19de0a720bee1cc01a2d901d673a45ae2f334759c95f76db06e564d1f24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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