academiaversal.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e7:49:70:86:ca:bc:cb:f2:68:92:6a:4c:d1:fd:dd:3c:47 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=academiaversal.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e7:49:70:86:ca:bc:cb:f2:68:92:6a:4c:d1:fd:dd:3c:47
Serial Number (int): 427151988400623631861686233870990512569415
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9c:bd:5b:51:fa:42:fc:05:c6:db:5d:2b:b7:af:97:ae:92:89:9f:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:1e:8c:9d:b2:49:be:20:ce:4d:9b:e1:68:69:8c:54:6b:2c:f2:bf
Fingerprint (sha256): 2a:36:27:4f:09:20:fa:5d:33:8e:34:73:bd:ba:a7:3f:fe:fe:3a:45:bb:d9:d1:7c:97:4f:11:7e:1b:cf:c7:35

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate academiaversal.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for academiaversal.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.041478.com
*.40wholefoods.com
*.academiaversal.com
*.accountverificationback.com
*.acutabovetreeservicect.com
*.allaboutwindowsandmore.com
*.autorepairexpresshb.com
*.burdenmoversgriffin.com
*.buscadordeparejas.net
*.carfiance.com
*.chloe-bennet.com
*.cottagefloralbellaire.com
*.disneylan.com
*.dodorr.cc
*.dofusgang.com
*.drashishkubde.com
*.eq46.xyz
*.everhartrealty.com
*.flintplumbingcontractor.net
*.gates-plumbingllc.com
*.ica-e.info
*.jarzab.com
*.jeremywillislawoffice.com
*.lagoslawn.com
*.lehighvalleypavinginc.com
*.maconseptic.com
*.marketerstarter.com
*.mayceys.com
*.mdn.au
*.megalan.net
*.megapest.net
*.melindapavey.com.au
*.menrise.com
*.namasteastu.com
*.polinsumos.com
*.primetimecards.com
*.roofingservicesbellevue.com
*.roundhillhomestead.com.au
*.salonahead2toesalon.com
*.sautoandina.com
*.starbucksapplication.com
*.style-rhima.com
*.t4mu.com
*.thunderbird.au
*.usvitalrecords.com
*.vandnconstruction.com
*.vrv.au
*.wankit.com
*.workbase.com.au
*.xchian.co
041478.com
40wholefoods.com
academiaversal.com
accountverificationback.com
acutabovetreeservicect.com
allaboutwindowsandmore.com
autorepairexpresshb.com
burdenmoversgriffin.com
buscadordeparejas.net
carfiance.com
chloe-bennet.com
cottagefloralbellaire.com
disneylan.com
dodorr.cc
dofusgang.com
drashishkubde.com
eq46.xyz
everhartrealty.com
flintplumbingcontractor.net
gates-plumbingllc.com
ica-e.info
jarzab.com
jeremywillislawoffice.com
lagoslawn.com
lehighvalleypavinginc.com
maconseptic.com
marketerstarter.com
mayceys.com
mdn.au
megalan.net
megapest.net
melindapavey.com.au
menrise.com
namasteastu.com
polinsumos.com
primetimecards.com
roofingservicesbellevue.com
roundhillhomestead.com.au
salonahead2toesalon.com
sautoandina.com
starbucksapplication.com
style-rhima.com
t4mu.com
thunderbird.au
usvitalrecords.com
vandnconstruction.com
vrv.au
wankit.com
workbase.com.au
xchian.co

Other certificates including the domain name academiaversal.com

(limited to 100 certificates)
*.041478.com
academiaversal.com
academiaversal.com
academiaversal.com
academiaversal.com
academiaversal.com

Certificate

The complete raw certificate details for academiaversal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427151988400623631861686233870990512569415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 22:46:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 22:46:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'academiaversal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712743843533377077814286102150316436610770652180038700440443943633361220705453813534659245118618318466347353919498127556210414208432813060947309024417622027357227203858498538081485254497307414081449413745541262613269484460685579453418969163891986113880253354336606493279271067512892221517434929766586433036407258640536685178423454486021448501175847282542706249727071913293222031669733673200875126897909444223251556767920954164161831867046649594302359732231464340372306128224801983477915153961092283302166896616615018548908155886957939362842361763141031081725908114028218169390260531030588307175942592305849821903652202775638309075399384786359736790111187010319880427962526048097227732644607993079133641304067305527229927474814762662513477483370183958963925908439201303561953162666709703880498231203530392091507406484926017887952154532581848675002941920927906767827287160679067476258054676854329721154543532094675292771929747818865809835134866911554395251827682446418192972277121463353885653508939315436429524328088959229123725449757443785140712721927254097577909713987380392221617966553622233265877945316140974424046928814625772447595386601904214382370938914757492329270538693808254815666718541665817725829314129119496514988019271703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cbd5b51fa42fc05c6db5d2bb7af97ae92899fb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1972 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.041478.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.40wholefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.academiaversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountverificationback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acutabovetreeservicect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allaboutwindowsandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autorepairexpresshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burdenmoversgriffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buscadordeparejas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carfiance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chloe-bennet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cottagefloralbellaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneylan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodorr.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dofusgang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drashishkubde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eq46.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everhartrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flintplumbingcontractor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gates-plumbingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ica-e.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarzab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeremywillislawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagoslawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lehighvalleypavinginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maconseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketerstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayceys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megalan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megapest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melindapavey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menrise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namasteastu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polinsumos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roofingservicesbellevue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roundhillhomestead.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salonahead2toesalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sautoandina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starbucksapplication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.style-rhima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t4mu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thunderbird.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usvitalrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vandnconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wankit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workbase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xchian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '041478.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40wholefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academiaversal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountverificationback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acutabovetreeservicect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaboutwindowsandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autorepairexpresshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burdenmoversgriffin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buscadordeparejas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carfiance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chloe-bennet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottagefloralbellaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneylan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodorr.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dofusgang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drashishkubde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eq46.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everhartrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flintplumbingcontractor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gates-plumbingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ica-e.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarzab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremywillislawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagoslawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehighvalleypavinginc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maconseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketerstarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayceys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megalan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megapest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melindapavey.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menrise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namasteastu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polinsumos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofingservicesbellevue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundhillhomestead.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonahead2toesalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sautoandina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starbucksapplication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'style-rhima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't4mu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thunderbird.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usvitalrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vandnconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrv.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wankit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workbase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xchian.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae35686320000040300463044022060b97fee93fcfde99bab310be5e811798723dd116e58acaef51b9916be8eebc002200275e4ee0d6eec046c34efc0c9b9370ad0a6543fb259ad3273a8635737a4f6c6007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ae356861e0000040300473045022100b856338f122cc020611d8fcd21f5e66e2cf4a7d6630b4527df55069f8f26ea1002204ac4378fa8e1ee2c00520537e458c68fb035f098dfef245c44acf01d1c6f2757
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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