software-engin.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:7e:19:3d:b9:0d:60:b5:ef:6d:be:e3:49:26:da:b5:f5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=software-engin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:7e:19:3d:b9:0d:60:b5:ef:6d:be:e3:49:26:da:b5:f5
Serial Number (int): 391492335745857931862619563545340549969397
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:25:55:e7:dc:5e:54:c9:a6:41:09:ae:0b:04:6d:db:21:6e:70:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:51:24:84:5e:4c:6b:06:83:22:cc:69:20:fa:88:49:17:91:de:b7
Fingerprint (sha256): 1d:1e:ee:04:36:b1:b0:bc:8f:02:a7:46:ae:d5:70:3a:92:14:96:0b:b8:f6:69:1b:e5:82:52:bf:2a:d8:1b:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate software-engin.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for software-engin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aarpmedicareadvantage.com
*.aidcard.com
*.amazoncombat.com
*.ancsetory.com
*.billgonzales.com
*.caasetify.com
*.clairebondage.com
*.clubsscholastic.com
*.coingig.com
*.domfactov.com
*.endsclothing.com
*.familydocter.org
*.furniturebyknossos.com
*.idmsdealersocket.com
*.ifitsfloors.com
*.linoleumstore.com
*.longdalepub.com
*.lufthansad.com
*.lxquick.com
*.maezpass.com
*.mailboxixchange.com
*.manasquanwatertaxi.com
*.mauians.com
*.mellowmaturewomen.com
*.mompovtube.com
*.mywebsiteurl.com
*.mywecu.com
*.pelerins-compostelle.com
*.phpspreadsheet.com
*.pxnanarchy.com
*.racal.com
*.rishra.com
*.sharethesave.com
*.slectspecs.com
*.socrstive.com
*.software-engin.com
*.supportpdp.com
*.syrianwebsites.com
*.teleproformance.com
*.thebaltimoresun.com
*.ticketeck.com
*.tiramedica.com
*.torranceadultschool.com
*.touchingnews.com
*.treadlightly.com
*.tsmsports.com
*.twistersgym.com
*.unitedhealthecareonline.com
*.ups-jobs.com
*.upsplash.com
aarpmedicareadvantage.com
aidcard.com
amazoncombat.com
ancsetory.com
billgonzales.com
caasetify.com
clairebondage.com
clubsscholastic.com
coingig.com
domfactov.com
endsclothing.com
familydocter.org
furniturebyknossos.com
idmsdealersocket.com
ifitsfloors.com
linoleumstore.com
longdalepub.com
lufthansad.com
lxquick.com
maezpass.com
mailboxixchange.com
manasquanwatertaxi.com
mauians.com
mellowmaturewomen.com
mompovtube.com
mywebsiteurl.com
mywecu.com
pelerins-compostelle.com
phpspreadsheet.com
pxnanarchy.com
racal.com
rishra.com
sharethesave.com
slectspecs.com
socrstive.com
software-engin.com
supportpdp.com
syrianwebsites.com
teleproformance.com
thebaltimoresun.com
ticketeck.com
tiramedica.com
torranceadultschool.com
touchingnews.com
treadlightly.com
tsmsports.com
twistersgym.com
unitedhealthecareonline.com
ups-jobs.com
upsplash.com

Other certificates including the domain name software-engin.com

(limited to 100 certificates)
software-engin.com
software-engin.com
equifaxworkforcesolutions.com
wnpr.com
peacockc.com
lxquick.com
applegraphicsinc.mobi
software-engin.com
software-engin.com
alquran-syaamil.com
pdfmood.com
peacockc.com
lxquick.com
officialpanterashop.com
domfactov.com
software-engin.com
ihukup.com

Certificate

The complete raw certificate details for software-engin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391492335745857931862619563545340549969397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 10:29:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 10:29:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'software-engin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714739666141383564535090503032925324839411797525708231201223640573758946974814017243690048088632152619382090820487263696043104547023450165031004648056674017032666564426479129992489461288516708842377962244279564507741789149339457768930655616563368792269513180032552549762389390555108457595483537623792049984962632756708020938017372894217427510780391833485737748045458226097529144803448142578794253745990634789602659967707673544060577889851825690693899976786814098668232027636512581661244473647351640095943812925741491474261657005784391080632636728544905459137979254256271378139785750402637266670315772770828816647537683759550341201832019693560910986990460375016861755460856608167683528389482334282020556531920976358458184919831155829794894703294151630555155527346042966119205292633757600265712590679953610048411526680576955672715938737193230707953047826961909276721079180237409155379424962715102163102444266070628128619499800944457237774157436519974701937619652989064191596158505110596615581908140871501245276720471593674239153265927728539439885217030771630468324231760777215527013142302408381481116377207000055358404497443816785164660314771054634192433559624817451836534582454417655670145686519926698424661004720541024771774619547577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							382555e7dc5e54c9a64109ae0b046ddb216e7051
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aarpmedicareadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aidcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazoncombat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancsetory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billgonzales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caasetify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clairebondage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubsscholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coingig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domfactov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endsclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familydocter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furniturebyknossos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idmsdealersocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifitsfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linoleumstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longdalepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lufthansad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lxquick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maezpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailboxixchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manasquanwatertaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mellowmaturewomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mompovtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywebsiteurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywecu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelerins-compostelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phpspreadsheet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pxnanarchy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.racal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rishra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharethesave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slectspecs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socrstive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.software-engin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syrianwebsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teleproformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebaltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiramedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torranceadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treadlightly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsmsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twistersgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedhealthecareonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ups-jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upsplash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aarpmedicareadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazoncombat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancsetory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billgonzales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caasetify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clairebondage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsscholastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coingig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domfactov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endsclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familydocter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furniturebyknossos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idmsdealersocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifitsfloors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linoleumstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longdalepub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lufthansad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lxquick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maezpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailboxixchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manasquanwatertaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mellowmaturewomen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mompovtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywebsiteurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywecu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelerins-compostelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phpspreadsheet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxnanarchy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rishra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharethesave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slectspecs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socrstive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'software-engin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportpdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syrianwebsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleproformance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebaltimoresun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiramedica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torranceadultschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchingnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treadlightly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsmsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twistersgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedhealthecareonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ups-jobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upsplash.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018baeb1d0d30000040300483046022100880923e233094e3950fbf39dd5337814c2633f1d4685248e0eb3da1d961e4d0e022100ed29a09d4fc3b908981ab769af524f3eacf3b16bb2d2d1f188b90a227a74f41f00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018baeb1d1100000040300463044022067deb562f816ae9b963d761cfe15ab4a95628140a6108475b0601daa496a828d022048fb378d822e96c71cbc7aab5c6d95a414f0eb6e4c122e525d57679857619de5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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