retwitt.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d2:a6:3f:a3:a8:95:15:f3:ae:98:86:f7:0e:bb:fd:91:11 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=retwitt.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d2:a6:3f:a3:a8:95:15:f3:ae:98:86:f7:0e:bb:fd:91:11
Serial Number (int): 420129423061829684145126954655379804229905
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:d9:2c:71:81:5c:88:99:64:5e:bd:0a:d1:16:59:a0:eb:7c:44:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b7:d6:99:2e:1b:74:67:f7:7f:aa:bd:b5:5d:14:bb:e3:0e:3b:a9:c3
Fingerprint (sha256): 22:0b:55:aa:ca:69:d9:4b:1a:de:ac:b9:9c:a3:92:fa:16:5d:8f:3f:21:be:72:87:39:13:a6:38:24:d3:e1:cf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate retwitt.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for retwitt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abihayat.com
*.arabdatingsingles.com
*.aragem.com
*.bakramandi.com
*.baland.com
*.besoonline.com
*.bestlaserhairremovalchicago.com
*.butyaldopolska.com
*.buumblekids.com
*.christmaslighters.com
*.combocard.com
*.conscriptlarp.com
*.dannyweissjazz.com
*.elementrem.net
*.formaliz3d.com
*.freemag.com
*.frocker.com
*.gartengeraetehaus.com
*.globistics.com
*.graphiceyeliner.com
*.hoelter.com
*.kissusanails.com
*.lantansh.com
*.lomoro.com
*.makebillions.com
*.mobileviking.com
*.moodel.es
*.mormonculture.com
*.nanabeachresort.com
*.nnaemeka.com
*.parmawindow.com
*.pedigreepro.com
*.polensky.com
*.providerinquiryzelis.com
*.punctuality.au
*.redraft.com
*.retwitt.com
*.rvrentals.au
*.sabalkana.com
*.salonmobil.com
*.satrum.com
*.savesetup.com
*.serviciosstreamingperu.com
*.share-vid.com
*.suomikuva.com
*.thepartytruck.com
*.trowbridge.com
*.tvabierta.com
*.vidr.com
*.wackpack.com
abihayat.com
arabdatingsingles.com
aragem.com
bakramandi.com
baland.com
besoonline.com
bestlaserhairremovalchicago.com
butyaldopolska.com
buumblekids.com
christmaslighters.com
combocard.com
conscriptlarp.com
dannyweissjazz.com
elementrem.net
formaliz3d.com
freemag.com
frocker.com
gartengeraetehaus.com
globistics.com
graphiceyeliner.com
hoelter.com
kissusanails.com
lantansh.com
lomoro.com
makebillions.com
mobileviking.com
moodel.es
mormonculture.com
nanabeachresort.com
nnaemeka.com
parmawindow.com
pedigreepro.com
polensky.com
providerinquiryzelis.com
punctuality.au
redraft.com
retwitt.com
rvrentals.au
sabalkana.com
salonmobil.com
satrum.com
savesetup.com
serviciosstreamingperu.com
share-vid.com
suomikuva.com
thepartytruck.com
trowbridge.com
tvabierta.com
vidr.com
wackpack.com

Other certificates including the domain name retwitt.com

(limited to 100 certificates)
rici.net
retwitt.com
workskills.org
retwitt.com
retwitt.com
retwitt.com
retwitt.com
leotards.org
retwitt.com
retwitt.com
unietdairlines.com
retwitt.com

Certificate

The complete raw certificate details for retwitt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420129423061829684145126954655379804229905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 06:48:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 06:48:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retwitt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797071273059402274168616599234489531795028449424362272029207821117435716865065628908156679445811900367733583586106846521984949512771184031126030204855633761918224292944937536435204541440452327410702963118863272726832978697782067291143195199913667235556785594515526120783459598816286010120422757405736140468502453182022880527088527362833186179115189714782256910475605719445373593240965851076339339989581507706920186911613599908813823987487904076276777361455720807996906655697389017727841884403433439343548445722138737671251376908089448502512315837454758284102705402935847444483000872990618770443207852500212184300167375951346670174758378868224720537723097196179114261470132094434783012455298328763072503987236731398749600025590530448333764428083444832320692576083810859514794274179254747855587635244938889483190751988678147654356766856432986770495028017414606672483152524892762410479163891140266067310199364783048810584451382694775498446833163506600334104143125728098631737532626987220026236418244977502127027921636355145576575764671378387999873286505367747423544623492630294733962250705763749139512135730929793244981488490898827717819729145714175823173593155452503919222788281307689111472714525726515312291898055460595762048487427321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9dd92c71815c8899645ebd0ad11659a0eb7c44d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abihayat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arabdatingsingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aragem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakramandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestlaserhairremovalchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butyaldopolska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buumblekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christmaslighters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.combocard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conscriptlarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dannyweissjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elementrem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formaliz3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gartengeraetehaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphiceyeliner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kissusanails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lantansh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lomoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makebillions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobileviking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moodel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mormonculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanabeachresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nnaemeka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parmawindow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pedigreepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polensky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.providerinquiryzelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.punctuality.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retwitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvrentals.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabalkana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savesetup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviciosstreamingperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.share-vid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suomikuva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepartytruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trowbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvabierta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wackpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abihayat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabdatingsingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aragem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakramandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestlaserhairremovalchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butyaldopolska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buumblekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christmaslighters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'combocard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conscriptlarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dannyweissjazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elementrem.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formaliz3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gartengeraetehaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphiceyeliner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissusanails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantansh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lomoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makebillions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileviking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mormonculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanabeachresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnaemeka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parmawindow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedigreepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polensky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providerinquiryzelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punctuality.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retwitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvrentals.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabalkana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonmobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savesetup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosstreamingperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share-vid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suomikuva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepartytruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trowbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvabierta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wackpack.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db60a1e7a0000040300483046022100faff9162850e2bb5cba175f91466aaf12c2175190b59f1f439d8c0adf17fcb670221009d9c2a6d68dd0040790b56a8f8118c85b7f7459e7b42afecc0df2cfff1aae06e0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db60a20b500000403004630440220224b103dae746cbdbb39951c898b3e7342e6363aa4c0f5457afa62df856f7dfe02200fff8a103bd0d1d60059161cf1d1fe2c31f60462e3668767369b79ec6ccf3e4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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