luftansaair.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fc:c9:31:7e:dc:eb:a7:27:4b:b0:20:3f:dd:91:08:e2:ed was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=luftansaair.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fc:c9:31:7e:dc:eb:a7:27:4b:b0:20:3f:dd:91:08:e2:ed
Serial Number (int): 434467732013903052543010471569943712817901
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:cb:e4:a8:0e:c7:f2:85:05:2e:93:ad:cb:d1:3d:de:c2:77:8e:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:97:64:44:fa:da:07:f3:82:1b:47:74:a9:f7:af:b2:12:4e:77:92
Fingerprint (sha256): 29:df:76:a7:92:8f:95:7f:d9:92:d5:45:c3:7b:ea:a5:12:a7:3b:1a:5f:49:ed:b8:2f:a8:d0:30:d3:e4:10:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate luftansaair.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for luftansaair.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adamsmarkhotel.com
*.adventurescuba.com
*.alexandergrahambell.com
*.arhitekturaplus.com
*.baret.com
*.bigthundergoldmine.com
*.bikenight.com
*.bixbywhite2020.com
*.bowelmovements.com
*.century21dnd.com
*.cnsjournalblog.com
*.creativewebdesigns.com
*.devanlowe.com
*.fashionboutiques.com.au
*.frontiertel.com
*.geosuper.com
*.ggarvin.com
*.ggvihhygtcsywjj.com
*.goodneighborplumbingca.com
*.greybeardcalls.com
*.hsbcrewards.com
*.husqvarna-engines.com
*.jbchairs.com
*.lovtops.com
*.luftansaair.com
*.madyhumbs.com
*.mardigras-casino.com
*.mcdonaldds.com
*.mobilnigeria.com
*.oceansandsresort.com
*.poodleskirt.com
*.redhatters.com
*.robuxing.com
*.rootlevelsearch.com
*.royalcaribeancruiseline.com
*.sanantonioseaworld.com
*.socialjeanie.com
*.speedautomotix.com
*.sporttoto4d.com
*.stapeseasyrebates.com
*.theiskincarereviews.com
*.themtnmovers.com
*.threewheelbike.com
*.ticastrans.com
*.univvision.com
*.urdupiont.com
*.webpagecontest.com
*.wiltonprinting.com
*.zubasearch.com
*.zypherhillswater.com
adamsmarkhotel.com
adventurescuba.com
alexandergrahambell.com
arhitekturaplus.com
baret.com
bigthundergoldmine.com
bikenight.com
bixbywhite2020.com
bowelmovements.com
century21dnd.com
cnsjournalblog.com
creativewebdesigns.com
devanlowe.com
fashionboutiques.com.au
frontiertel.com
geosuper.com
ggarvin.com
ggvihhygtcsywjj.com
goodneighborplumbingca.com
greybeardcalls.com
hsbcrewards.com
husqvarna-engines.com
jbchairs.com
lovtops.com
luftansaair.com
madyhumbs.com
mardigras-casino.com
mcdonaldds.com
mobilnigeria.com
oceansandsresort.com
poodleskirt.com
redhatters.com
robuxing.com
rootlevelsearch.com
royalcaribeancruiseline.com
sanantonioseaworld.com
socialjeanie.com
speedautomotix.com
sporttoto4d.com
stapeseasyrebates.com
theiskincarereviews.com
themtnmovers.com
threewheelbike.com
ticastrans.com
univvision.com
urdupiont.com
webpagecontest.com
wiltonprinting.com
zubasearch.com
zypherhillswater.com

Other certificates including the domain name luftansaair.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for luftansaair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434467732013903052543010471569943712817901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 16:21:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 16:21:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luftansaair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825794605500960387643547583297010001225566637700592765003117656522099914722982439776246515803217729559956614471248618640205509493669877208153936436307702039991589115005527748397581847584584541513891638377106221134419781024045230159271186644224830858933085160039706036233813759400986163439794373370195646580325742690328411634450790512967106892400540068414525826409494913662332056876955115960694088254325115889751429838901378212121165622291316664805292523313097651729811601992040802646284862756159679712682336241526095210302613529429357353002466633344343847635015391451921977145807558509627452030794256458875106971956883279626743815422046254066570788887516829574223148411426865048069766093404337102876069890604381636329925476363833970350350235738798554546080403707294013741686204817465780358083132345030275948582542859060149188672984573342500428186179032191665950300748059348797382294913765838130859390775872656292396946005993945467107235191579285058369818797223635113532524208806761194971010203584838900954603062242848914337084343515169412438083581184175354657366050412319660784678549920149243406029672216636828140262704764421099439449777429757920300616014266147338147363034916500643045709057311934837250232892482391082412497453481163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bcbe4a80ec7f285052e93adcbd13ddec2778ebd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2014 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arhitekturaplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bixbywhite2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnsjournalblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionboutiques.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geosuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggvihhygtcsywjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodneighborplumbingca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greybeardcalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.husqvarna-engines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbchairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovtops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madyhumbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mardigras-casino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdonaldds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oceansandsresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redhatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robuxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rootlevelsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanantonioseaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialjeanie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedautomotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sporttoto4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theiskincarereviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themtnmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticastrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.univvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zypherhillswater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arhitekturaplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bixbywhite2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnsjournalblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionboutiques.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geosuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggvihhygtcsywjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighborplumbingca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greybeardcalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'husqvarna-engines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbchairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovtops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madyhumbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mardigras-casino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceansandsresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robuxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rootlevelsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioseaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialjeanie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedautomotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttoto4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theiskincarereviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themtnmovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticastrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zypherhillswater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be899c157000004030047304502205afdf0b4abf9ed985c59adb58e945191b6a4514b66f925583f21363edac65db4022100efa6bfa12c578faf9d9c0f1c68221cbcfe07b53b2661ba6c887b6e2376a345ad00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be899c1570000040300483046022100cc0d6510b890327b17944510511b5a926d70d5c128d3fe75378304ed5a75e29a022100891077b838581222bab39f2d8b71129bb3cee26b08ef3a5ef21aa948c1da0f5b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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