giotnuoc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bd:5e:08:17:68:4c:8d:2b:13:0a:66:7b:62:bb:ba:9a:e3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=giotnuoc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bd:5e:08:17:68:4c:8d:2b:13:0a:66:7b:62:bb:ba:9a:e3
Serial Number (int): 412887500519835847859919279993671110007523
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:0f:5a:21:a3:e5:5a:7a:d0:11:cd:81:2d:99:5d:7f:23:d0:d4:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:c2:1f:cd:6f:70:1b:0d:2b:02:36:28:16:eb:1d:07:76:60:5b:ee
Fingerprint (sha256): 26:d5:bb:50:f3:19:d2:6d:38:e4:62:d0:50:90:0f:f4:48:2a:63:d4:aa:55:fc:56:d2:34:f0:e8:8f:02:e4:5e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate giotnuoc.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giotnuoc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.akamaipestsolution.com
*.ampong.com
*.anado.com
*.anandkumar.com
*.aprenderchino.com
*.arejonandlizmarriedyet.info
*.arkco.com
*.blendred.com
*.burquest.com
*.carvac.co
*.cemiteriomemorial.com
*.christefer.me
*.comedores.com
*.crpuzzles.com
*.diegel.com
*.eralivingcare.com
*.fietsroutes.net
*.fiyatlari.com
*.fokken.com
*.giotnuoc.com
*.godescarga.com
*.gulver.com
*.harib.com
*.hironaga.com
*.javpian.com
*.kabaren.com
*.karamelka.com
*.ketzwellness.com
*.kexian.com
*.ladyboypeck.me
*.liubu.com
*.mogees.com
*.moon-page.com
*.mypersonaldj.com
*.okhotsk-chocolatier.com
*.partyinheaven.com
*.pixelect.com
*.portugalparabrasileiros.com
*.prepaidreload.com
*.quitartatuajes.com
*.removalcosts.com
*.rte23.org
*.tamou.com
*.theofficialdmx.com
*.topaztan.com
*.trabajadesdesucasa.com
*.twinstarcompany.com
*.www-philips.com
*.wyles.com
*.yesica.com
akamaipestsolution.com
ampong.com
anado.com
anandkumar.com
aprenderchino.com
arejonandlizmarriedyet.info
arkco.com
blendred.com
burquest.com
carvac.co
cemiteriomemorial.com
christefer.me
comedores.com
crpuzzles.com
diegel.com
eralivingcare.com
fietsroutes.net
fiyatlari.com
fokken.com
giotnuoc.com
godescarga.com
gulver.com
harib.com
hironaga.com
javpian.com
kabaren.com
karamelka.com
ketzwellness.com
kexian.com
ladyboypeck.me
liubu.com
mogees.com
moon-page.com
mypersonaldj.com
okhotsk-chocolatier.com
partyinheaven.com
pixelect.com
portugalparabrasileiros.com
prepaidreload.com
quitartatuajes.com
removalcosts.com
rte23.org
tamou.com
theofficialdmx.com
topaztan.com
trabajadesdesucasa.com
twinstarcompany.com
www-philips.com
wyles.com
yesica.com

Other certificates including the domain name giotnuoc.com

(limited to 100 certificates)
giotnuoc.com
giotnuoc.com
propetysex.com
giotnuoc.com
keshishyan.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
tefillah.com
giotnuoc.com

Certificate

The complete raw certificate details for giotnuoc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412887500519835847859919279993671110007523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 22:00:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 22:00:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giotnuoc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 944041466413942002033212479920986225828899403697999584588404707006629823251560428994823744629283041314117440393501815431429914983692653189201077994198926927711467099680110088953613817924564988523909848522373420978233968018459770509812080285819664464646059617320024073240529938309319884316859594633630643074931571464968939936096259344918516227954232442442704959970972238615989504809533004113811722248651546890626453295922999928849651156203979011467390640868967406283605854656010019988844167762137453857960587737306000884063073102909803276141339201118815838827827448522821059083655471720751062017436078612624607007146976253300868093264382876503929576950505865815131350147859445684239778602014415398683804381182548946311088628126435609253684681590211997960487070457002936327322581384865695006837292027842581823937977502863475233034737981104028863108810960453251303063988909565402579136366555173021639693400424517023445732338734019187564226511555802158295042364808472303813671176880822788661219204225463992560011566334871134898787349974556774811024389827867552389724638613608292316753635563602487021308758778171448865234656203512842465410263930985453373461990168607022215634372364290524165598142523733325896801582944692740125633580342129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							220f5a21a3e55a7ad011cd812d995d7f23d0d401
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1702 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akamaipestsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anandkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprenderchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carvac.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christefer.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comedores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eralivingcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiyatlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fokken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javpian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karamelka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladyboypeck.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liubu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mogees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypersonaldj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theofficialdmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topaztan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trabajadesdesucasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinstarcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaipestsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anandkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprenderchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carvac.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christefer.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comedores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eralivingcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiyatlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fokken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javpian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karamelka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyboypeck.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liubu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mogees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonaldj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theofficialdmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaztan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trabajadesdesucasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinstarcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa55f5c3900000403004730450221009af2e4496d25b776955a42efdee57efc45a8cfae5beff3f3ddfc41fc926684d00220139bf204cda7abc0f573ae693d67eae86f0964c74c53a1d33b7544b8eec974a0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa55f5c59000004030047304502203ba08fdaa5c41ca38a1bc9c497614d86c7605647eb9050b5effe01fec971ff28022100e7890ee446b191e5987e1e251e1da645bbe45f91c13ea0b184379aaedc976d4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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