soninha.com

Issued by R3

About this certificate

This digital certificate with serial number 03:35:11:8e:f0:f7:9b:2f:8b:31:c4:a0:70:38:d7:77:73:7a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=soninha.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:11:8e:f0:f7:9b:2f:8b:31:c4:a0:70:38:d7:77:73:7a
Serial Number (int): 279395162311568422689580192284464029070202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:9c:6e:55:35:49:1f:75:87:e1:3d:95:e4:34:3e:26:08:75:33:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:49:89:df:16:a8:a2:62:92:ae:e5:c3:ad:73:61:01:56:b6:ee:52
Fingerprint (sha256): 23:e6:1f:61:ea:64:a1:71:c6:5f:8f:ba:d8:ec:f5:46:24:b8:57:40:3c:8b:dc:33:2c:9d:2a:8d:be:42:68:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate soninha.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soninha.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.affiliater.co
*.ankasogutma.com
*.approx.email
*.avihay.com
*.bankchase.com
*.biasutti.com
*.bnjqckf.com
*.borski.com
*.bounceplace.com
*.buildtheborder.com
*.charlottebackpage.com
*.claverie.com
*.comparisionbox.com.au
*.crazzytechzone.com
*.creditadvisers.co.uk
*.cresi.com
*.daz-characters.club
*.excursies.com
*.gabriela.net
*.ijing.com
*.jodc.com
*.junkas.com
*.kisiler.com
*.kocman.com
*.kokeo.com
*.kormin.com
*.librepensadores.com
*.litelift.com
*.locksman.com
*.mapzo.com
*.mobelsanz.com
*.modernsurgeon.com
*.musjid.com
*.ozyildirim.com
*.piccin.com
*.pinchbeck.com
*.ragibo.com
*.reklamo.com
*.rideons.com
*.rimmerbro.com
*.septiani.com
*.sideros.com
*.soninha.com
*.tapella.com
*.teacherhu.com
*.theptrk.com
*.timitha.com
*.todojuegosgratis.com
*.vartika.com
*.vogeu.co.uk
affiliater.co
ankasogutma.com
approx.email
avihay.com
bankchase.com
biasutti.com
bnjqckf.com
borski.com
bounceplace.com
buildtheborder.com
charlottebackpage.com
claverie.com
comparisionbox.com.au
crazzytechzone.com
creditadvisers.co.uk
cresi.com
daz-characters.club
excursies.com
gabriela.net
ijing.com
jodc.com
junkas.com
kisiler.com
kocman.com
kokeo.com
kormin.com
librepensadores.com
litelift.com
locksman.com
mapzo.com
mobelsanz.com
modernsurgeon.com
musjid.com
ozyildirim.com
piccin.com
pinchbeck.com
ragibo.com
reklamo.com
rideons.com
rimmerbro.com
septiani.com
sideros.com
soninha.com
tapella.com
teacherhu.com
theptrk.com
timitha.com
todojuegosgratis.com
vartika.com
vogeu.co.uk

Other certificates including the domain name soninha.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for soninha.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279395162311568422689580192284464029070202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 09:11:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 09:11:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soninha.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 851727140605557341856070890614629265634707182843247270802824938549186992913394705220318031102791720709855226626655844384854746096520230002854249136281257630813254286571912479886972401803999050523907895697062201659127594705849375257233561907777325697611272304189603534425976126917056671014064423915491395598168445889095187059096399017008741105972891630580066297597023442535534959249270902751764211132377353099332680256828584173883478147329965478385370156024575309164164507094165330452717228588485446295792932517578615252701573927659990795753690083733064459435078088993224814025683673551792103862314173276918379269446426070867368037800341993388310733210505407644630380962145748100861051238958823085269266076497487218857180831231629708480235234614714562817319512516014339861603246024098638812097001139661225826748528652027396776561786992027610641555286971870897580993699523930171410898247137503865152294481553245080238721091608300677341958750131520603692560820124474611457266481887605064889940921247832628612283927186470936012963198444861381021803590349989833034362649196148337874376234030461065642868618585043447988904364540552351706619739468218847713483528107883333592063922967876275394189921188863631196260647343543147462243104828253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c9c6e5535491f7587e13d95e4343e2608753370
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1578 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affiliater.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ankasogutma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.approx.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avihay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biasutti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnjqckf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bounceplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildtheborder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charlottebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claverie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comparisionbox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crazzytechzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditadvisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cresi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daz-characters.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excursies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gabriela.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jodc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junkas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kisiler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kocman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kokeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kormin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.librepensadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.litelift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locksman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobelsanz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernsurgeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musjid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozyildirim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piccin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinchbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ragibo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reklamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rideons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rimmerbro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.septiani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sideros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soninha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teacherhu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theptrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timitha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todojuegosgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vartika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vogeu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliater.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ankasogutma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approx.email'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avihay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biasutti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnjqckf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bounceplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildtheborder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claverie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparisionbox.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crazzytechzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditadvisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cresi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daz-characters.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excursies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabriela.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jodc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junkas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kisiler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kocman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kormin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librepensadores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litelift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locksman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobelsanz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernsurgeon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musjid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozyildirim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piccin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinchbeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragibo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reklamo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rideons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rimmerbro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'septiani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sideros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soninha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherhu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theptrk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timitha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todojuegosgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vartika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vogeu.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e374bbcd70000040300463044022012ab93873cffa5ad0ca25e5566e526f02939f2b8808fd2bc14427aa64c86f894022029ef955ef3412708c99e14c457047caf90a8cf8ddb1004210c454015356a315e00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e374bbd0f00000403004630440220520c70aa970030a8db6e8ccf38e6856aeb951c85e545d56147e04189d8f01f1202206844f04065e08667ea895f1d1c5c3914e4e1f92243b3bb4ac7676dfd70d8f203
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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