itecbr.org

Issued by R3

About this certificate

This digital certificate with serial number 04:33:df:6a:8a:d3:be:fb:6c:2d:8b:a7:d6:c2:ea:52:74:da was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=itecbr.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:33:df:6a:8a:d3:be:fb:6c:2d:8b:a7:d6:c2:ea:52:74:da
Serial Number (int): 366100515482284662852056695649406890964186
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2c:1b:98:07:05:cb:1b:1d:15:06:61:c4:f3:d5:14:5b:fe:4d:a9:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:cb:c5:03:57:56:ea:a7:12:38:38:cb:a5:f5:94:9e:5c:58:a5:ca
Fingerprint (sha256): 28:f5:13:09:07:ca:87:58:34:9a:9c:e4:dd:3e:01:60:7d:0e:ec:d9:cd:88:e8:ad:b3:7c:c7:da:2d:d8:24:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate itecbr.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itecbr.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.africanamericangames.com
*.aniconic.com
*.atdhelivesports.com
*.balwani.com
*.bannou.com
*.barket.com
*.bilmedikleriniz.com
*.bojee.com
*.boopaticentral.com
*.boostify.com.au
*.cardinalchecking.com
*.dizet.com
*.dlpsgames.net
*.enlacesgratis.com
*.evi-site.com
*.faznegocio.com
*.filmski.com
*.fontella.com
*.giglogic.com
*.greenlightinternet.com
*.haragei.com
*.harmoniceggeurope.com
*.hlzy1.cc
*.hunshan.com
*.itecbr.org
*.kalpavriksha.com
*.kirstenrinck.com
*.klinikbaiduri.com
*.meituwang.net
*.negociosresponsablesyseguros.org
*.neurologopedagorzow.com
*.ocacmactv.net
*.patrias.com
*.protecyive.com
*.ps1tips.com
*.qattara.com
*.qhjy.com
*.shkonglei.com
*.shonabluebay.com
*.signmate.com.au
*.tease2please.com
*.the94th.com
*.therightjob.com
*.tooawesome.com
*.walkingintheclouds.com
*.whichagedcare.com.au
*.windows-7-themes.com
*.winmax123.com
*.yaestiempo.com
*.yourenergysystems.com
africanamericangames.com
aniconic.com
atdhelivesports.com
balwani.com
bannou.com
barket.com
bilmedikleriniz.com
bojee.com
boopaticentral.com
boostify.com.au
cardinalchecking.com
dizet.com
dlpsgames.net
enlacesgratis.com
evi-site.com
faznegocio.com
filmski.com
fontella.com
giglogic.com
greenlightinternet.com
haragei.com
harmoniceggeurope.com
hlzy1.cc
hunshan.com
itecbr.org
kalpavriksha.com
kirstenrinck.com
klinikbaiduri.com
meituwang.net
negociosresponsablesyseguros.org
neurologopedagorzow.com
ocacmactv.net
patrias.com
protecyive.com
ps1tips.com
qattara.com
qhjy.com
shkonglei.com
shonabluebay.com
signmate.com.au
tease2please.com
the94th.com
therightjob.com
tooawesome.com
walkingintheclouds.com
whichagedcare.com.au
windows-7-themes.com
winmax123.com
yaestiempo.com
yourenergysystems.com

Other certificates including the domain name itecbr.org

(limited to 100 certificates)
itecbr.org
amvtac.com
itecbr.org
itecbr.org
itecbr.org
itecbr.org
itecbr.org
itecbr.org
itecbr.org
itecbr.org
itecbr.org
itecbr.org
itecbr.org
portal.itecbr.org
itecbr.org
itecbr.org
noellaboriedavid.com
itecbr.org

Certificate

The complete raw certificate details for itecbr.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366100515482284662852056695649406890964186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 22:20:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 22:20:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itecbr.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800210008333175428950278896460392939563392057275165663646966741064296290494572986804570324965721380195329785485836976543458648471352966067348589293438770584860325438156764031633636239119905458355619888514637687315883805007515074661499660767198098867511738949132050679765250052469074065213168437174108252083483420260481186246459192950032657413037758140777854397052745291995376011624872136864485755063802468676277567461452096668635012390941317675997285175603264665316130681598129479055336170362988917864429696331343440970595785945900536400049785709672661008794613924592753295315519260044246100554187543698275157815217249782697755435448919907063914570131110485419147264123565020989925437239979521622097947564973179617309081199815629829487444010947796305494647417327200383725725080390836156783408049522872616437574866921823447447945106357924926785683381542412990952299839463587145272127756517172944722076169099426613223341788268599793356337375515926928215092539299866160288212428481534249183861270727771792319751713640819358302922287968752090071862314971358402723840652997315896148946055519082500274179774946720624500376084098946049288811535854247944509932531762559785629663386220927359818847831661640418703260989711735211750469388419913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2c1b980705cb1b1d150661c4f3d5145bfe4da902
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africanamericangames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aniconic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atdhelivesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balwani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bannou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bilmedikleriniz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bojee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boopaticentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boostify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardinalchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dizet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlpsgames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enlacesgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evi-site.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faznegocio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giglogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenlightinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haragei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harmoniceggeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hlzy1.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hunshan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itecbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalpavriksha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirstenrinck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klinikbaiduri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meituwang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negociosresponsablesyseguros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurologopedagorzow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocacmactv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patrias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protecyive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ps1tips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qattara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qhjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shkonglei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shonabluebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signmate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tease2please.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the94th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.therightjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tooawesome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walkingintheclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichagedcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windows-7-themes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winmax123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaestiempo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourenergysystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africanamericangames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aniconic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atdhelivesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balwani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilmedikleriniz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bojee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boopaticentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boostify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardinalchecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dizet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlpsgames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enlacesgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evi-site.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faznegocio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giglogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlightinternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haragei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmoniceggeurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hlzy1.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunshan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itecbr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalpavriksha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirstenrinck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klinikbaiduri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meituwang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negociosresponsablesyseguros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurologopedagorzow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocacmactv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protecyive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps1tips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qattara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qhjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shkonglei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shonabluebay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signmate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tease2please.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the94th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therightjob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tooawesome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkingintheclouds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichagedcare.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windows-7-themes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winmax123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaestiempo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourenergysystems.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa5725ac20000040300473045022044f96c31658dc70fd48b1d04da9143209cb8d76f680f4e97a69cced7426694e9022100896b34020dc52acccacd7b56a0c179c825867d905dd2bd9a5afb691d656adca9007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa5725aee0000040300483046022100cc19446183416cf7765405a0871b63e4d0d149eaf697c9a6ec368cb79d706ca9022100c570776efc1b130321be1d4f9305c7fee09da3c96affc71daac54ae3dd6d8f9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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