popat.me

Issued by R3

About this certificate

This digital certificate with serial number 04:57:ca:9d:38:ca:31:5e:11:ec:7e:ed:0d:3e:bb:f4:a5:20 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=popat.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:ca:9d:38:ca:31:5e:11:ec:7e:ed:0d:3e:bb:f4:a5:20
Serial Number (int): 378323030046752281003599474580407461389600
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 50:f9:07:f6:98:7e:81:9e:dd:53:9b:9d:f8:29:4a:4b:76:d2:81:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:1f:f5:e6:3d:bd:25:47:30:11:00:91:31:69:bd:ac:ce:da:24:3c
Fingerprint (sha256): 26:43:60:9e:45:14:6c:b0:fb:f3:70:47:bc:b7:f5:65:9d:8f:f8:76:01:24:6d:45:3b:c6:09:27:e8:c5:ff:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate popat.me

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for popat.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.12modern.com
*.1happydiabetic.com
*.aaaquicklabor.com
*.affinitiveaudio.com
*.alltickets.com.au
*.bareknuckle.com
*.bellsourth.com
*.bgrossmenswear.com
*.bitcois.com
*.corporatebaskets.com.au
*.creeklist.com
*.darwinescort.com.au
*.fineassredhead.com
*.fontsquirel.com
*.foragentsinly.com
*.freecheckinglocal.com
*.freedomatcharliekirk.com
*.girls.com.au
*.hobartlawyers.com.au
*.horserace.com.au
*.injuryguide.com.au
*.insurancecoverage.com.au
*.jblearining.com
*.kinsleys.com
*.lasikchooser.com.au
*.maritimelawyers.com.au
*.myanair.com
*.myanapp.com
*.myemployewise.com
*.myvibrater.com
*.narnesandnoble.com
*.narykay.com
*.neighbourschinesefood.com
*.neilgoldschmidt.com
*.popat.me
*.rapidgantt.com.au
*.rrww.com
*.shopnavyexchange.com
*.skachers.com
*.southernjudicalcircuit.com
*.strives.org
*.taneynews.com
*.thinkingspain.com
*.tmomobile.com
*.unlockyourit.com.au
*.voirfilm.al
*.vrbagers.com
*.w3cshools.com
*.whichbeauty.com.au
*.whichsupplier.com.au
12modern.com
1happydiabetic.com
aaaquicklabor.com
affinitiveaudio.com
alltickets.com.au
bareknuckle.com
bellsourth.com
bgrossmenswear.com
bitcois.com
corporatebaskets.com.au
creeklist.com
darwinescort.com.au
fineassredhead.com
fontsquirel.com
foragentsinly.com
freecheckinglocal.com
freedomatcharliekirk.com
girls.com.au
hobartlawyers.com.au
horserace.com.au
injuryguide.com.au
insurancecoverage.com.au
jblearining.com
kinsleys.com
lasikchooser.com.au
maritimelawyers.com.au
myanair.com
myanapp.com
myemployewise.com
myvibrater.com
narnesandnoble.com
narykay.com
neighbourschinesefood.com
neilgoldschmidt.com
popat.me
rapidgantt.com.au
rrww.com
shopnavyexchange.com
skachers.com
southernjudicalcircuit.com
strives.org
taneynews.com
thinkingspain.com
tmomobile.com
unlockyourit.com.au
voirfilm.al
vrbagers.com
w3cshools.com
whichbeauty.com.au
whichsupplier.com.au

Other certificates including the domain name popat.me

(limited to 100 certificates)
popat.me
popat.me
popat.me
popat.me
popat.me
popat.me

Certificate

The complete raw certificate details for popat.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378323030046752281003599474580407461389600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 14:26:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 14:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'popat.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813550955154243155126587936499367612783018745800650070875068970917829919887525540962948398827389256504897860312540281927406831159458589429797751677084322310879890467268966364524245382909334926961720193670351387730169103514053326069163203081562083674417857214393737419680678189292740831296794076809702166025450098854939766401646981760688658729064122702359233104993530071526742520410387578680248421900234847261285210286248369835517374647746838829347602910020317324642026558888982455620810357796337206209554489374149337214651855544383789725162225019385599125047319525095445807697791559216738364721771715630939419915092726199815489634778325709625884762862737883736306033995123848300297848632986633922369357070918230357868510539553793438402710225585878320040901339250979374756020020896934316380165018336076801343300217615348246283332488009723950885663633049103705569669859854296353995182905502069773315612998566367747483712117205820689959912106472880131319293834071716966522575646294996485077468961517359956506541432066687817183471034896309813925330188564231882732003184708271342165493072636888469774123965519510029766171347096986394642055990091425992957809728258905456490206760663560992499158901904976586244567048682119327013656857648929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50f907f6987e819edd539b9df8294a4b76d281b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1930 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.12modern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1happydiabetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaaquicklabor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affinitiveaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alltickets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bareknuckle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellsourth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bgrossmenswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporatebaskets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creeklist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darwinescort.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fineassredhead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontsquirel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foragentsinly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freecheckinglocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomatcharliekirk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girls.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobartlawyers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horserace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.injuryguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurancecoverage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jblearining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinsleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasikchooser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maritimelawyers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myemployewise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myvibrater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narnesandnoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narykay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neighbourschinesefood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neilgoldschmidt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popat.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidgantt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrww.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopnavyexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skachers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southernjudicalcircuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taneynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinkingspain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmomobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlockyourit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voirfilm.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrbagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w3cshools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichbeauty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichsupplier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12modern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1happydiabetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaaquicklabor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitiveaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltickets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bareknuckle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellsourth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgrossmenswear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatebaskets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creeklist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darwinescort.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fineassredhead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontsquirel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foragentsinly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecheckinglocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomatcharliekirk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girls.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobartlawyers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horserace.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'injuryguide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurancecoverage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jblearining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinsleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasikchooser.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritimelawyers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myemployewise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvibrater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narnesandnoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narykay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighbourschinesefood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neilgoldschmidt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popat.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidgantt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrww.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopnavyexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skachers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernjudicalcircuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taneynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkingspain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmomobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlockyourit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voirfilm.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrbagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w3cshools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichbeauty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichsupplier.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3c14da2e0000040300473045022100ca37cd1b307320a3e762ca3870aecc22fdd7941ae208498e4faf8f43c60fd87002207b246b50bee3ce5a0f8384e3f3c868822884ad3c0f44165846a218644faf48650075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3c14da2a000004030046304402200bc01a8f1959c2b9f3f75528046bdd4a6873f301af4f219857ddf4b3a0cbdec00220776f021add0f5244996098c4d721e03e20bccf72bc7fea22eefed5cf38f1a085
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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