apva.us

Issued by R3

About this certificate

This digital certificate with serial number 03:54:13:65:fe:30:50:b9:2d:a4:1d:85:b3:8b:47:56:60:b3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apva.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:13:65:fe:30:50:b9:2d:a4:1d:85:b3:8b:47:56:60:b3
Serial Number (int): 289946361526102170085776016706160515506355
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:39:c6:d5:60:7b:f0:05:d2:d4:95:3a:6d:ce:d8:b9:c6:58:e0:8f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:e1:63:88:1e:8d:ce:41:f2:c2:2a:f0:36:e6:86:2f:40:da:b6:b9
Fingerprint (sha256): 2b:ef:7c:8c:71:58:db:67:83:ac:f0:d3:f6:80:0e:a9:bd:21:ad:60:84:50:03:ec:d5:2c:b2:77:ee:f1:2e:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apva.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apva.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.allrad.com
*.apva.us
*.augres.com
*.bullian.com
*.casedamare.com
*.ciudadinteligente.com
*.colligicollagenshop.com
*.comedor.org
*.deupree.com
*.fischls-throne-genshin-impact-mobile-wallpaperwaifu.com
*.gayseks.com
*.globalcallvoip.com
*.hemofili.com
*.jiumdiary.com
*.kalyug.com
*.losporches.com
*.lowermymortgagepayments.com
*.mostiie.shop
*.mydivetravel.com
*.nis.au
*.nldomain.com
*.noches.org
*.orjuela.com
*.oyugi.com
*.pique.me
*.premier-rugby.com
*.presentationopindia.org
*.puff.au
*.purplewingedbutterfly.com
*.putilin.com
*.quotewizad.com
*.returncra-gstdeposit.info
*.sellinghousenow.com
*.senam.club
*.senchou.com
*.sharrows.com
*.shunon.com
*.sourcecxde.com
*.splazzy.com
*.streammachine.xyz
*.syas.com
*.teglia.com
*.tekal.com
*.thailanguageteacher.org
*.tntcarpentryltd.com
*.vix.au
*.vlt.au
*.wichita.au
*.wrmusic.xyz
*.xiangjiaozy2.com
allrad.com
apva.us
augres.com
bullian.com
casedamare.com
ciudadinteligente.com
colligicollagenshop.com
comedor.org
deupree.com
fischls-throne-genshin-impact-mobile-wallpaperwaifu.com
gayseks.com
globalcallvoip.com
hemofili.com
jiumdiary.com
kalyug.com
losporches.com
lowermymortgagepayments.com
mostiie.shop
mydivetravel.com
nis.au
nldomain.com
noches.org
orjuela.com
oyugi.com
pique.me
premier-rugby.com
presentationopindia.org
puff.au
purplewingedbutterfly.com
putilin.com
quotewizad.com
returncra-gstdeposit.info
sellinghousenow.com
senam.club
senchou.com
sharrows.com
shunon.com
sourcecxde.com
splazzy.com
streammachine.xyz
syas.com
teglia.com
tekal.com
thailanguageteacher.org
tntcarpentryltd.com
vix.au
vlt.au
wichita.au
wrmusic.xyz
xiangjiaozy2.com

Other certificates including the domain name apva.us

(limited to 100 certificates)
apva.us
apva.us
apva.us
*.allrad.com
apva.us
apva.us
apva.us
apva.us

Certificate

The complete raw certificate details for apva.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289946361526102170085776016706160515506355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 14:12:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 14:12:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apva.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867427580865627766583737667311078730315603884062833725617277275640477580667010548171576384285885279687619087914450381370255428695266090713766922204778416038017074401592055045060328507599514166216965682759389195557869391937701054481192188148114868286615958716720719201358960747462645957538319444953738548496818381246187712631188288123254300747103268078495349318456050159702358306931999164861473179916098779870003632386672317251062307484118768021550179778842072366014197140235756094353415968200045510486299766282044688084640840300752652356078633809639658388305463738049045760373588429553320041446428133089719889178061600226124188192336950128975658231650803060373438841478194971917997956616513803324609773773615985574337818045847486316630831600455597627499065853616084086723944636936315390401522255167156676843197936474449404509887784446694121729457935447358605734101425865958877439900671180120711797235963893402962116673620728289510407169338918094960632218115241883939492264189221871960332678540375007894297820588833464715313784957926268504023521647166748173305169028636155503617869504997745255002846020714449050970400747134158463084796491374891446187508910539443647698950038831322937501110789654751954865611968481365230146426985948411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc39c6d5607bf005d2d4953a6dced8b9c658e08f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1716 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apva.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bullian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casedamare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciudadinteligente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colligicollagenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comedor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deupree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fischls-throne-genshin-impact-mobile-wallpaperwaifu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gayseks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalcallvoip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hemofili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiumdiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalyug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losporches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowermymortgagepayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mostiie.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydivetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nis.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nldomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noches.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orjuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyugi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pique.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premier-rugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.presentationopindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puff.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purplewingedbutterfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putilin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotewizad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.returncra-gstdeposit.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sellinghousenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senam.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharrows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shunon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sourcecxde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.splazzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streammachine.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teglia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tekal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thailanguageteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tntcarpentryltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vix.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vlt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wichita.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrmusic.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiangjiaozy2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apva.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casedamare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudadinteligente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colligicollagenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comedor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deupree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fischls-throne-genshin-impact-mobile-wallpaperwaifu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayseks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalcallvoip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemofili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiumdiary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalyug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losporches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowermymortgagepayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mostiie.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydivetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nis.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nldomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noches.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orjuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyugi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pique.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier-rugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'presentationopindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puff.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purplewingedbutterfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putilin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotewizad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'returncra-gstdeposit.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellinghousenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senam.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharrows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shunon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcecxde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splazzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streammachine.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teglia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailanguageteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntcarpentryltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vix.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vlt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wichita.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrmusic.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiangjiaozy2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189b1a89413000004030047304502207ba85ce9fe1950bdb2728aa2fb2314a73b9d48ff191db36c50f92baf33d1a1ae022100fd3033b6ab41d72f5b3f6e72ef881a43d1a3a1f00b86609fcf9de4a7ecda6782007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189b1a89402000004030046304402205a54aaaddf2347d627a5b201283c72ea7852bdf67afd921bbea1025aebd1887502202c53aa05ee73d64e51810b1fb501c615cb21e5a1d8301e6616c4a131b46f5fc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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