betterdomainname.com

Issued by R3

About this certificate

This digital certificate with serial number 04:68:db:cd:99:26:e1:1f:fc:24:51:2d:b2:89:2d:db:57:b2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=betterdomainname.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:db:cd:99:26:e1:1f:fc:24:51:2d:b2:89:2d:db:57:b2
Serial Number (int): 384130678345040495331380456065032448071602
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ea:06:98:9a:f5:ce:f9:2e:72:80:7e:e0:61:48:46:c8:df:e0:11:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:1e:04:c6:32:f6:8c:d0:88:0f:4b:ec:4b:13:7f:ba:6e:50:5c:55
Fingerprint (sha256): 27:e7:f1:21:20:f5:a5:ac:0a:76:28:07:35:14:03:7e:ff:ee:af:16:20:ec:8f:64:bb:cf:fe:ae:d4:8e:7a:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate betterdomainname.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for betterdomainname.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5minutetrader.com
*.ageyev.com
*.apartir.com
*.betterdomainname.com
*.bucheimer.com
*.collaboratories.com
*.comfortapparel.com
*.darria.com
*.dentistsofchisholm.com
*.depois.com
*.eurosketchcad.com
*.fallsriver.com
*.fijat.com
*.fogueres.com
*.getabiggerbum.com
*.giatoc.com
*.glueckwunsch.com
*.housekeepingwithlove.com
*.infantini.com
*.ishie.com
*.jrnyl.com
*.korangi.com
*.lajagua.com
*.luvas.com
*.mccarraher.com
*.muabanvn.com
*.muter.com
*.mytalquin.com
*.new2youshoppe.com
*.nnets.com
*.noexperienceneededjobs.com
*.oguni.com
*.pawwalker.com
*.pelayos.com
*.penroses.com
*.photomeetup.com
*.poplifehotel.com
*.realfutons.com.au
*.rodriges.com
*.rollinslakesideinn.com
*.rougerv.com
*.sanjuanhousing.com
*.shower-curtain.co
*.styan.com
*.tipita.com
*.travelhistory.com
*.truelson.com
*.usdtt20.com
*.xfinitychat.com
*.youcanbetonit.com
5minutetrader.com
ageyev.com
apartir.com
betterdomainname.com
bucheimer.com
collaboratories.com
comfortapparel.com
darria.com
dentistsofchisholm.com
depois.com
eurosketchcad.com
fallsriver.com
fijat.com
fogueres.com
getabiggerbum.com
giatoc.com
glueckwunsch.com
housekeepingwithlove.com
infantini.com
ishie.com
jrnyl.com
korangi.com
lajagua.com
luvas.com
mccarraher.com
muabanvn.com
muter.com
mytalquin.com
new2youshoppe.com
nnets.com
noexperienceneededjobs.com
oguni.com
pawwalker.com
pelayos.com
penroses.com
photomeetup.com
poplifehotel.com
realfutons.com.au
rodriges.com
rollinslakesideinn.com
rougerv.com
sanjuanhousing.com
shower-curtain.co
styan.com
tipita.com
travelhistory.com
truelson.com
usdtt20.com
xfinitychat.com
youcanbetonit.com

Other certificates including the domain name betterdomainname.com

(limited to 100 certificates)
www.showitaly.com
betterdomainname.com
www.hagelin.com
betterdomainname.com
mossing.com
betterdomainname.com
betterdomainname.com
betterdomainname.com
assisting.info
dentistsofchisholm.com
bcause.com.au
betterdomainname.com
skexhers.com
ricedeshow.com

Certificate

The complete raw certificate details for betterdomainname.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384130678345040495331380456065032448071602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 10:39:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 10:39:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'betterdomainname.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 736785418120622238501399727188282318340159895338496423623351992121605845738846340706378961079826118506054132854307884592342687314483445041582903355542211060653371160585114695330025140761010244928162283291770094560866715048374982945504556215589788211816498610643331665448699523487232555851319736308083791797246620954841098064163120593727679345524137351462244860605132152899883087314876288577809340807849281768362678621635461430955164747513138917367012626712064251107058280829900393344123608373297789924822073143564796220268802483593247260080463821317330944040148337924907537358521658002328472300974810740219110391461082669731335536848662077787600357219042327816644630071733649025083584370059599999648689443173969184404151629720992143337124026740672642860550382856355373014585325041506800535687229756821416433752849999554468111819195716567378581058022903227914817998201735339377042615379941204021766823848290246445384608095640527239469741379546300066457938208615586139941025479148185396385669392763778107438981167578047828905630929713455594701088337267530796810826284220754546516441479755053147052414685382055926919932790587169756621553471587433301219004167549043770403290040781825449742090567270968867137000804823246780030777923738937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea06989af5cef92e72807ee0614846c8dfe0115b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1694 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5minutetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ageyev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apartir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterdomainname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucheimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collaboratories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentistsofchisholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurosketchcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fallsriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fijat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fogueres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getabiggerbum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giatoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glueckwunsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housekeepingwithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infantini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrnyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lajagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccarraher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muabanvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytalquin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.new2youshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noexperienceneededjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oguni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelayos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penroses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photomeetup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poplifehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realfutons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodriges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollinslakesideinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rougerv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanjuanhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shower-curtain.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.styan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truelson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usdtt20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfinitychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youcanbetonit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5minutetrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ageyev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apartir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterdomainname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucheimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboratories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistsofchisholm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eurosketchcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallsriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fijat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fogueres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getabiggerbum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giatoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glueckwunsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housekeepingwithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infantini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrnyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccarraher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muabanvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytalquin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new2youshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noexperienceneededjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oguni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelayos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penroses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photomeetup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poplifehotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realfutons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodriges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollinslakesideinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rougerv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjuanhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shower-curtain.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truelson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdtt20.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinitychat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcanbetonit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a98a356dc00000403004630440220132b045d4d1f6b1185bf2c1c2a42fa2664145dbf2b121f2b03a7247bcb3ce3b702206670e8d8a5928e26e5cdc5da618875213c0230cf8b106d273ee44bf13a7f24c10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a98a356fc000004030047304502200cca85af250958dcebf00f8ed855852078fe35fe4de4553c54f7203ffe923f18022100ec5ab17f59f5158718877a44410f9440ac79c14e1bb7cdbafb19a995e3462e00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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