citem.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:66:cb:5c:21:da:f3:03:e2:47:19:4a:6b:15:91:51:11:28 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=citem.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:cb:5c:21:da:f3:03:e2:47:19:4a:6b:15:91:51:11:28
Serial Number (int): 383428256814098498887446267232822521565480
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:f5:3b:f3:50:c0:78:8a:69:d1:3e:45:f0:77:08:98:ac:66:98:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ee:33:cd:f5:1d:03:ad:3c:b8:68:89:7d:c5:75:ac:9e:02:2e:18:a7
Fingerprint (sha256): 27:eb:80:5f:41:e0:2c:23:ae:9e:a2:a4:5c:f2:00:25:5a:0f:fe:bc:04:78:48:f6:21:19:57:b9:65:a9:e5:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate citem.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citem.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amemura.com
*.bezeichnung.com
*.bqgj.com
*.cineparadis.com
*.citem.com
*.courtyardsquare.com
*.denger.com
*.divorcecompany.com
*.eltrabajo.com
*.factoriel.com
*.filipinobasketball.com
*.footyball.com
*.gelina.com
*.goberna.com
*.gratisx.com
*.heminger.com
*.hoan.net
*.jnys.com
*.karakoro.com
*.karmun.com
*.lafundicion.com
*.learningsoft.com
*.localfit.com
*.magyarorvosok.com
*.malanowski.com
*.maos.net
*.martos.com
*.marzahl.com
*.muizz.com
*.mysafehouse.com
*.ogallah.com
*.pigors.com
*.piscifactoria.com
*.prijevozi.com
*.printmyparts.com
*.professionalwebsitemarketing.com
*.romedal.com
*.ruthellen.com
*.saladomestre.com
*.sapatilha.com
*.shackell.com
*.srusti.com
*.stevabasu.com
*.symank.com
*.tanzelat.com
*.thebigshot.com
*.tschacher.com
*.ucps.com
*.weddingdiscos.com
*.yousuke.com
amemura.com
bezeichnung.com
bqgj.com
cineparadis.com
citem.com
courtyardsquare.com
denger.com
divorcecompany.com
eltrabajo.com
factoriel.com
filipinobasketball.com
footyball.com
gelina.com
goberna.com
gratisx.com
heminger.com
hoan.net
jnys.com
karakoro.com
karmun.com
lafundicion.com
learningsoft.com
localfit.com
magyarorvosok.com
malanowski.com
maos.net
martos.com
marzahl.com
muizz.com
mysafehouse.com
ogallah.com
pigors.com
piscifactoria.com
prijevozi.com
printmyparts.com
professionalwebsitemarketing.com
romedal.com
ruthellen.com
saladomestre.com
sapatilha.com
shackell.com
srusti.com
stevabasu.com
symank.com
tanzelat.com
thebigshot.com
tschacher.com
ucps.com
weddingdiscos.com
yousuke.com

Other certificates including the domain name citem.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for citem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383428256814098498887446267232822521565480
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 10:02:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 10:02:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792304109650004031032860960040268718957243743669694292994765739573726335428861001024867920091027072726834034450268520717673911718594899611075312761213990673679144465384349968692201257398726091328669357017709238798759377265195414474355767185398183085763932525616886341493416673341010200646357507697431072881485607903322348346597025670922603400655212666056426535209935786777772480085653080177962858339942455889916872605705061443412241635651459655366083278365459807989416594105421670915301829803990155420418482968098406083231893671112035763946422354229213155493712041437514823260355588704584612456004092218194876857440209194645354323479729471553342387302760073840141645209732859581911430694662596823401078742246644965040771278292019888874781729245709969074630089384039665393971845671303324800725015547546521591788038401798795551542762024326837738029453374697819801486948465354492546457453327141805940073762806104973148465531176239104637339413681588511910879224395515787559243116365312428003363982698162772222780322113812217689879506569545742071968473807139482143804981793561140101489684900017705392403368234202373750969271574360490150471950654866780400075970291173954274994436591485683755601499227098245442504209117311692399210734506451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29f53bf350c0788a69d13e45f0770898ac669887
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amemura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bezeichnung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bqgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cineparadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.courtyardsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divorcecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eltrabajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factoriel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filipinobasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footyball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gelina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goberna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gratisx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heminger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jnys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karakoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karmun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lafundicion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learningsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.localfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magyarorvosok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malanowski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marzahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muizz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysafehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogallah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pigors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piscifactoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prijevozi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printmyparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.professionalwebsitemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romedal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruthellen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saladomestre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapatilha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shackell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srusti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stevabasu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanzelat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebigshot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tschacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ucps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddingdiscos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yousuke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amemura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezeichnung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bqgj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cineparadis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtyardsquare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divorcecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eltrabajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoriel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filipinobasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footyball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goberna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratisx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heminger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakoro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karmun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafundicion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magyarorvosok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malanowski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marzahl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muizz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysafehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogallah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pigors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piscifactoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prijevozi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printmyparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalwebsitemarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romedal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruthellen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saladomestre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapatilha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shackell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srusti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevabasu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanzelat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebigshot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tschacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingdiscos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yousuke.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170f79b7f7a000004030047304502205289a4acf7a29e4a2403609d1c700c9da2bb13db2a3f50b746fd45c6302da75002210085c5e40f19453889907d30708bf1a92ac6120a0d9b228e72287deb38622b5f1b00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170f79b7fa7000004030047304502202fb544b806255147b7ada4b9f665cd6e5ea1759f2cea265e9fefc0347ca938d802210097b317e8af4883eecf04a1dc6a69ff92889acbe0d1ed5f06ff84fa6f2ebc9989
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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