andrewfewsmith.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ce:97:b3:3f:8f:e0:05:0e:7c:39:14:d8:6f:c9:12:95:10 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=andrewfewsmith.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ce:97:b3:3f:8f:e0:05:0e:7c:39:14:d8:6f:c9:12:95:10
Serial Number (int): 418748955450446273115733505494763342828816
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5a:2a:72:2c:b7:31:9d:39:d8:e6:f3:2a:ae:26:fd:77:c9:55:b1:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0c:b4:a9:55:55:d0:93:73:8e:ed:52:68:1c:7d:5f:84:c6:0e:27:6d
Fingerprint (sha256): 1f:87:74:c3:e5:2a:c9:a7:d9:ba:b7:bd:c6:6b:03:f9:46:c1:73:17:00:8c:56:2d:0e:eb:2c:eb:73:56:ef:20

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate andrewfewsmith.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for andrewfewsmith.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.10000wx.com
*.3daydiet.us
*.99sites.us
*.adcommittee.us
*.analfolter.de
*.andrewfewsmith.com
*.astonpacificmonarch.com
*.bjuui.com
*.blanchardpolice.us
*.businesssystemacademy.com
*.cakovan.com
*.christopherdsouza.us
*.clubpenguin.cc
*.cocinandoencasa.com
*.crackerhome.com
*.custom-review.us
*.cutepomskiesbreeder.us
*.darmdurchbruch.de
*.datouandalicia.com
*.draham.com
*.dunkys.com
*.filmez.eu
*.fussballkuchen.de
*.gave-syndrom.de
*.hzisa.com
*.ikhwan-muslimoon-syria.org
*.insaneyetisquirrel.com
*.jmerchanfotografia.com
*.kolen.co
*.lifeand100books.com
*.locu.in
*.maquinasarcade.com
*.meyourpa.com
*.payambar-azam.com
*.prikollar.com
*.readvitality.com
*.richrecruiter.com
*.saboresdelhogar.com
*.sarelli-se.com
*.sauerkraut.com.au
*.smartgames.com.au
*.titrologie.net
*.vcainternational.org
*.vidadentalcentral.com
*.weekeinde.com
*.wwwaffinitywater.co.uk
*.xaries.pl
*.xn--frhlingsdekoration-n6b.de
*.xn--spermaksse-geb.de
*.xn--u2ua769m.com
10000wx.com
3daydiet.us
99sites.us
adcommittee.us
analfolter.de
andrewfewsmith.com
astonpacificmonarch.com
bjuui.com
blanchardpolice.us
businesssystemacademy.com
cakovan.com
christopherdsouza.us
clubpenguin.cc
cocinandoencasa.com
crackerhome.com
custom-review.us
cutepomskiesbreeder.us
darmdurchbruch.de
datouandalicia.com
draham.com
dunkys.com
filmez.eu
fussballkuchen.de
gave-syndrom.de
hzisa.com
ikhwan-muslimoon-syria.org
insaneyetisquirrel.com
jmerchanfotografia.com
kolen.co
lifeand100books.com
locu.in
maquinasarcade.com
meyourpa.com
payambar-azam.com
prikollar.com
readvitality.com
richrecruiter.com
saboresdelhogar.com
sarelli-se.com
sauerkraut.com.au
smartgames.com.au
titrologie.net
vcainternational.org
vidadentalcentral.com
weekeinde.com
wwwaffinitywater.co.uk
xaries.pl
xn--frhlingsdekoration-n6b.de
xn--spermaksse-geb.de
xn--u2ua769m.com

Other certificates including the domain name andrewfewsmith.com

(limited to 100 certificates)
andrewfewsmith.com
solflere.com
solflere.com

Certificate

The complete raw certificate details for andrewfewsmith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418748955450446273115733505494763342828816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 21:04:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 21:04:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'andrewfewsmith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 628941882173535080290401743751268875635473287253340128509501826827994401611331488583547359425033191858421506605986324377472617333403885883658086432800619054780270116926275268152589508202742206702546667723216759149956382773301962753867871520156501094618700187381431344211937564815115510866898574107170972833923873211054766879355318305291502521034573725529914954874411226486199589104165295776113631613035832783452690947340429726699617958486540174746180886440895578626197284339564821402788177530754249254070197144510578198849344833524318714094326168664052024250372671919831992473504851326718181261487129218772834689702029595746762864369963686991752801007694403229145967328480214902519071722948231891804579448360881807401056316025784435073709690522413743206711394151965622519548845061779439916486102023795383210137612716361001520439408192315428679334649184040890037387146309741904730149740959036601549095567134398458715571236035182171833000449715024300190574686675091098405076158245867708033176088648582800638497124923136787730122013027364806796896332428198530648163853244728903824459609598181691138679826830194356683217019285818506450524165751081666530188651914098379130875190068465388586696553966980771190292432860548586276992565469561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a2a722cb7319d39d8e6f32aae26fd77c955b10a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10000wx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3daydiet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99sites.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adcommittee.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analfolter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andrewfewsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astonpacificmonarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjuui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blanchardpolice.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesssystemacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cakovan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christopherdsouza.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubpenguin.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocinandoencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crackerhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custom-review.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cutepomskiesbreeder.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darmdurchbruch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datouandalicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunkys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmez.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fussballkuchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gave-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hzisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikhwan-muslimoon-syria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insaneyetisquirrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmerchanfotografia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeand100books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maquinasarcade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meyourpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payambar-azam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prikollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richrecruiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saboresdelhogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarelli-se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sauerkraut.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartgames.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titrologie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcainternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidadentalcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekeinde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwaffinitywater.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xaries.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frhlingsdekoration-n6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--spermaksse-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--u2ua769m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10000wx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3daydiet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99sites.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adcommittee.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analfolter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewfewsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astonpacificmonarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjuui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blanchardpolice.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesssystemacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cakovan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christopherdsouza.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubpenguin.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocinandoencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackerhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-review.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutepomskiesbreeder.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darmdurchbruch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datouandalicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunkys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmez.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fussballkuchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gave-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hzisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikhwan-muslimoon-syria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insaneyetisquirrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmerchanfotografia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeand100books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maquinasarcade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyourpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payambar-azam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prikollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richrecruiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saboresdelhogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarelli-se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauerkraut.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartgames.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titrologie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcainternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidadentalcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekeinde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwaffinitywater.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xaries.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frhlingsdekoration-n6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--spermaksse-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--u2ua769m.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d9f59e05400000403004730450220626ecd7bba797bcfc865133dfda86ecb58c101fa9ac1e46e6157c98e5d38f4f1022100d3c78a4d95c7d9b61eaf6323eb10c0df1375156026a0fbadb8401950fe0835e500760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9f59e0ba0000040300473045022100f62a4e9ef05b004b40b885f3cda06e1f432dbaa68afb76498d36ed3241cef6cf022021a0343b67041d20100e9704e269e9a584f108a6b5bd6b769f5e1b6c7589f793
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004d26f1285defe3412f5aa53f8dc1d4f49e08c7a5ec1ce9a66cfc4e1ac35d7b5e829970e666e6e88c33e0d4afdb40e5d6d744170588d0c540d980c7b1df3b3764aa2ee69cdeb1571abf7c93d14dc4107d1069e59f687d3402eba2a98e4e579ccb215da3af76edd0e345b6467bc51d0da902bf55ed0f348b0da6c3a4fe121f84224cd82e956d0410b6323c9c6302b29029d863f40b351d2570bc1441f2e498a62c5cc196596f31fb525ea14bd0daca46baedc5ed754027cfc41ce9fd1c374dd9b15938ca665010e71aa8ca750ddad86b496cdd21c393f842d62e9220c4f127c3f1663d93ecdc6afb33b39f85f64f91970ba6aca19d221017188904a0aeecb612df