benbean.tech

Issued by R3

About this certificate

This digital certificate with serial number 04:fb:0c:7f:2c:78:e2:e7:64:c9:9f:af:a7:e3:fb:9a:1d:6f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=benbean.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fb:0c:7f:2c:78:e2:e7:64:c9:9f:af:a7:e3:fb:9a:1d:6f
Serial Number (int): 433876628883850619241811418108987849710959
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 39:22:4a:19:1a:a8:52:b1:62:6c:17:02:3f:31:bc:c0:d9:f1:0c:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:ad:6a:b6:7a:e0:d1:2c:a5:74:5b:f7:e3:40:47:1c:3a:05:05:74
Fingerprint (sha256): 26:cd:71:39:f3:b6:74:0f:7a:9c:f2:1e:a8:38:3f:ec:ce:8b:f0:64:05:ae:70:22:8d:27:fa:33:16:9b:9a:1d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate benbean.tech

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benbean.tech

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airbasecarpet.com
*.alquilerskatemendoza.co
*.benbean.tech
*.bestfreemusic.com
*.campuswall.club
*.cgrstore.com
*.chestcare.net
*.diagnoseme.com.au
*.dxbimo.com
*.engelapotheke.com
*.ethihadairlines.com
*.helplessgirls.com
*.i-weddingdresses.com
*.lcssupply.com
*.maemaeclairice-you-know-where-to-find-it.com
*.maneygram.com
*.mappescuola.com
*.marcospizzagilbertsville.com
*.margarets-restaurant.com
*.marriitt.com
*.martinsphotos.com
*.marykau.com
*.masomeasypay.com
*.massmutua.com
*.mathastewart.com
*.meetingpackages.com
*.megajet.com
*.megaminx.com
*.midwifery.com
*.mutualfundssahi.com
*.noahhhelps.org
*.orginalmattress.com
*.pedfed.com
*.perscripitions.com
*.rodentmonitoring.com
*.romacement.com
*.rusell.com
*.seoilnurse.com
*.simplywhatson.com
*.solortusapparel.com
*.sweetgrandmapics.com
*.teamviwewer.com
*.thehamptonhouse.info
*.therevolutiononw.net
*.tryshops.com
*.ultimatecashads.com
*.vivos.club
*.whirepages.com
*.window-cleaning.info
*.wwwdraxe.com
airbasecarpet.com
alquilerskatemendoza.co
benbean.tech
bestfreemusic.com
campuswall.club
cgrstore.com
chestcare.net
diagnoseme.com.au
dxbimo.com
engelapotheke.com
ethihadairlines.com
helplessgirls.com
i-weddingdresses.com
lcssupply.com
maemaeclairice-you-know-where-to-find-it.com
maneygram.com
mappescuola.com
marcospizzagilbertsville.com
margarets-restaurant.com
marriitt.com
martinsphotos.com
marykau.com
masomeasypay.com
massmutua.com
mathastewart.com
meetingpackages.com
megajet.com
megaminx.com
midwifery.com
mutualfundssahi.com
noahhhelps.org
orginalmattress.com
pedfed.com
perscripitions.com
rodentmonitoring.com
romacement.com
rusell.com
seoilnurse.com
simplywhatson.com
solortusapparel.com
sweetgrandmapics.com
teamviwewer.com
thehamptonhouse.info
therevolutiononw.net
tryshops.com
ultimatecashads.com
vivos.club
whirepages.com
window-cleaning.info
wwwdraxe.com

Other certificates including the domain name benbean.tech

(limited to 100 certificates)
sysadmin.net.au
benbean.tech
sysadmin.net.au
benbean.tech
benbean.tech
benbean.tech

Certificate

The complete raw certificate details for benbean.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvzaSOCo89aQbueJgZqQ6
9Uv+/ANF6V5M2I8WWM6/c7no6RBy3/BYgi8IGae2j2LbZqiWppEua8968wMAkCv7
pJ+caNF+bTbj3jtD3G49I3cZvngr1GSh8AcgT7qX1HD8uI2EKiQFdnkU0n4ut5Lm
xjm+9Jr1albKBRyilScczm/dJOkSpO2esZNCBJsorah0cm3q3JvSsV9HSO4MWbKr
fOLP1dISQoiG6zY0hsK7g91gR8eQzizFBxtecRoxSvnqwafbx6cbQZbp1fCSXKcR
IHYADsxQ8OWWux2bVonaxMG5ksmdahRBM6/+iiQtf+Jl0T12f+NxXNMhBlpMXj2y
gLkFQkNZda9jD1hpo9O8U0joaSnvOmcQP/anbXSI1v4ki8Od1a2ZJMyvU8Y7XHZJ
JLaVTGx6igQQP7TWP8ryLion24bJ8Fcva0Yo7tvj2VvJCRZR6GkeS8SEy+RWtSyk
Bi9acjNs+fS9VpjNCy1fjPEA3JQ9vVkBJAbLD4x7TIAvvHKcNyETmL6ZAOv9ulv/
zdIGOoJEHJUrIROhjeeTYSp+1Mprabj8lf+p1OW0PAKzQEMaulDS2fbjoWgpv702
3JUWUwdKPPBNxt2Q4awVGVO2j6vcyu/0jYoECxQg2S0GcDCCjvYA96Z2Z1dLhxlI
Q1pgKOlRMMWSs9k6gz0UrukCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433876628883850619241811418108987849710959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 01:48:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 01:48:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benbean.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780081669132373463114588840545887217671640034733491564689320765785502221596239505409525490263697562808517411882693787544774285667940939457729223072180803414164840934185700267703481657737605857487914880894857569044853585337706886747340841337489290848803608375018472619842432745529491964361257953305213224602828699110673965747909505205766533784177775017672366235737429016619038678327291509764236505106659720605444638176397139344800898611790974444976985936046862742345701541791796558861030381735830914897463408605105390358928750098503875978613587432136114173124749900343474512747406388215810108563807267400737448631081281943174216753916397018109763079235331976390620797337223114323806124432708145162285985327630893588524687563569008735690691253759008378709009605653179316765898495874586603827773051286406625280720819122529321830258133609824459374095953883653473738111061524594135732135823492499587317087655866702912200698242334718523354892379042878724020537009052306419512554130679981240612591367459551142350144358836450570401319631891335137406657310792377504332745077493444239719304838070782841779365037624547389278860584332714287269402303054183836478627419308254213857282483809019678521013280558132871719407048876596116230031113760489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39224a191aa852b1626c17023f31bcc0d9f10cca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1948 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airbasecarpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alquilerskatemendoza.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benbean.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestfreemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campuswall.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgrstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chestcare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diagnoseme.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dxbimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engelapotheke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethihadairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helplessgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-weddingdresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maemaeclairice-you-know-where-to-find-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maneygram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mappescuola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcospizzagilbertsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margarets-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marriitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martinsphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marykau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masomeasypay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massmutua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mathastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meetingpackages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megajet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaminx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwifery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutualfundssahi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noahhhelps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orginalmattress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pedfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perscripitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodentmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romacement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rusell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seoilnurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplywhatson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solortusapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetgrandmapics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamviwewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehamptonhouse.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therevolutiononw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tryshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultimatecashads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whirepages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.window-cleaning.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdraxe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airbasecarpet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alquilerskatemendoza.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benbean.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfreemusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campuswall.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgrstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chestcare.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnoseme.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxbimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engelapotheke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethihadairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helplessgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-weddingdresses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcssupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maemaeclairice-you-know-where-to-find-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maneygram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappescuola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcospizzagilbertsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margarets-restaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinsphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marykau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masomeasypay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massmutua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathastewart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingpackages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megajet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaminx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwifery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutualfundssahi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noahhhelps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orginalmattress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perscripitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodentmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romacement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seoilnurse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplywhatson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solortusapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetgrandmapics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamviwewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehamptonhouse.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therevolutiononw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimatecashads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whirepages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'window-cleaning.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdraxe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018acf636f050000040300483046022100fdb45b4e8453d8bd59ee2502ebcc3f3d0c902cd402cd69a1eb23e3e384428f87022100c8fe6aa668028066957599f5a749733701da8736cf76859d27c315bb79c66b940077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018acf636f170000040300483046022100f1b2cff596d0d2efa8fba91074457fa06df89c04d78c08559706d7e1741d142b0221008488f1338a4fd41bd90f58aac4c0661b90a29e96e6f9e5ef2c9b692b3b8c5e47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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