bumpermagnet.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:4f:25:15:80:11:c4:4b:32:2a:45:27:8d:de:ea:19:d7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bumpermagnet.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:4f:25:15:80:11:c4:4b:32:2a:45:27:8d:de:ea:19:d7
Serial Number (int): 333581921145247773364930162420733780302295
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:38:67:c4:fb:46:09:b0:d6:89:02:68:cb:f8:65:d0:eb:e4:d4:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:4c:51:f4:87:3e:96:da:ba:c8:e9:97:2d:e0:af:96:80:97:e1:84
Fingerprint (sha256): 2c:25:93:c7:52:4f:c6:33:ff:1a:bc:b1:5f:95:0d:eb:d4:8f:d3:cd:db:2c:c4:3d:6a:10:42:97:af:70:37:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bumpermagnet.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bumpermagnet.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.altaghyeer.com
*.anglingsupply.com
*.arzamendi.com
*.aseba.online
*.batesbikes.com.au
*.bookdepostory.com
*.buffalowildwins.com
*.bumpermagnet.com
*.chocoly.com
*.coolchecks.com
*.desertfinanial.com
*.dweetwater.com
*.fawes.com
*.flightawaare.com
*.freebiefix.com
*.gifttcards.com
*.kmday.com
*.lightlanebike.com
*.municipalonlinepyaments.com
*.mytologi.com
*.omnucard.com
*.oregonlvie.com
*.peacoocktv.com
*.petsmar.ca
*.picmonley.com
*.piratem.com
*.psychologicalpractice.com.au
*.qiaoer.com
*.rinam.com
*.routv.cn
*.schuetzenverein-langenfeld.de
*.silkpowder.com
*.slick-hentai.xyz
*.sliit.com
*.slsloan.com
*.southeasterners.com
*.stashforstuds.com
*.stoneberr.com
*.tylerharden.com
*.uniticapital.com
*.vpron.com
*.wedgepump.com
*.woodcaft.com
*.workforspirit.com
*.wwwsheppardsoftware.com
*.yearbookordercenter.co
*.youtubekids.co
*.zazasink.com
*.zellonetwork.com
*.zvuky.com
altaghyeer.com
anglingsupply.com
arzamendi.com
aseba.online
batesbikes.com.au
bookdepostory.com
buffalowildwins.com
bumpermagnet.com
chocoly.com
coolchecks.com
desertfinanial.com
dweetwater.com
fawes.com
flightawaare.com
freebiefix.com
gifttcards.com
kmday.com
lightlanebike.com
municipalonlinepyaments.com
mytologi.com
omnucard.com
oregonlvie.com
peacoocktv.com
petsmar.ca
picmonley.com
piratem.com
psychologicalpractice.com.au
qiaoer.com
rinam.com
routv.cn
schuetzenverein-langenfeld.de
silkpowder.com
slick-hentai.xyz
sliit.com
slsloan.com
southeasterners.com
stashforstuds.com
stoneberr.com
tylerharden.com
uniticapital.com
vpron.com
wedgepump.com
woodcaft.com
workforspirit.com
wwwsheppardsoftware.com
yearbookordercenter.co
youtubekids.co
zazasink.com
zellonetwork.com
zvuky.com

Other certificates including the domain name bumpermagnet.com

(limited to 100 certificates)
training2go.com
bumpermagnet.com
zazu.org
bumpermagnet.com
balljoints.com
bumpermagnet.com
bumpermagnet.com
bumpermagnet.com

Certificate

The complete raw certificate details for bumpermagnet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333581921145247773364930162420733780302295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 11:38:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 11:38:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bumpermagnet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733257041764828574986832080203658473175591270539439695944322189854236176790857556774210120940830367854805241491552923550594304401418552927302640510884430139213512713184916930016985679787600676288121454743608939162187643159903024816084838610599083733897194576702268257119278177498868871067498410330546581555907437370851585020405588516925752488450454231246843078761887818041093521139374638833476544681140587129302881171398857771298489623781357127428864189429080500698080640486085503805318451118708209783121316078085831858316406556644889784283662151380936159055479186909580262730990400334932947895459736206942941308093326198093295247414206277219787369924371760563667537649500552423600079458108691413381976862183045215279518417793784599851894169951854831228000280121796421318890358530665982963308776828595397517836595580966854192122578258867881417968187671857986960749260867549922254559175751013193620565485379196289535292964799590137934161453824831689164967435528060625561666837761931603913101029734166130741852504384734610145127471130442223334689941813306449560726268085828703122243560274504265111906801899154852345017443028718717134833599946682894024302917338538413127154433974374695166967379088874726421456685553150569891231318367111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf3867c4fb4609b0d6890268cbf865d0ebe4d44a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altaghyeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anglingsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arzamendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aseba.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batesbikes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookdepostory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buffalowildwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bumpermagnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coolchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desertfinanial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dweetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fawes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightawaare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freebiefix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gifttcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kmday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightlanebike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.municipalonlinepyaments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytologi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omnucard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oregonlvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peacoocktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petsmar.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picmonley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piratem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psychologicalpractice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qiaoer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.routv.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuetzenverein-langenfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silkpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slick-hentai.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sliit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slsloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southeasterners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stashforstuds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoneberr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tylerharden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniticapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vpron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedgepump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodcaft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workforspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsheppardsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yearbookordercenter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtubekids.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zazasink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zellonetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zvuky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altaghyeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anglingsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arzamendi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aseba.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batesbikes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookdepostory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffalowildwins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumpermagnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocoly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolchecks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desertfinanial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dweetwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fawes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightawaare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freebiefix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifttcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightlanebike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'municipalonlinepyaments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytologi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnucard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonlvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peacoocktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsmar.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picmonley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piratem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psychologicalpractice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiaoer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'routv.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuetzenverein-langenfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silkpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slick-hentai.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sliit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeasterners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stashforstuds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneberr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tylerharden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniticapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedgepump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodcaft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workforspirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsheppardsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yearbookordercenter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtubekids.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zazasink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zellonetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zvuky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018963dbfa970000040300473045022100b777a44e4e3eba4b4ca8d299c79b798a475ad741fd7e064b98c90c6666abf8b80220236f200cf27b2c3ed413f5ed66adaa43d1ffdb7832b91985ef29296d0224c116007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018963dbfa8700000403004630440220473fa93c0133119752a6051f8ca95496139ffc1a95585d5374b1185f63e316dc02200c9e3e513b35e59143c2341edd9cc65e7ae1083cb5544bf82b58aaf0d9cd5c26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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