nautismemaroc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:59:54:7e:ff:74:90:d2:2e:64:86:e5:a3:cc:fc:88:8a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nautismemaroc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6b:59:54:7e:ff:74:90:d2:2e:64:86:e5:a3:cc:fc:88:8a
Serial Number (int): 297865811076204996808919952290692879648906
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:a0:b7:2d:f4:eb:f6:a4:4a:bd:e0:f1:7a:82:1f:1a:b8:fa:96:b7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 76:44:05:91:3f:25:a8:42:69:6c:22:76:9d:cf:dc:ce:8e:4b:1c:f8
Fingerprint (sha256): 2d:0d:c7:d3:e2:c9:2c:7e:08:7c:59:3e:5a:f1:d2:5e:3b:1d:01:8f:fe:4c:5c:d1:38:e4:21:73:5a:2a:4e:19

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nautismemaroc.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nautismemaroc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.10ktfsupport.org
*.39thandbroadway.com
*.abcebooks.com
*.academiaemprender.com
*.alyahair.com
*.anikinfo.com
*.asti.cc
*.azboardgamers.com
*.belvoirhomes.com
*.cedarcreekvineyard.com
*.cizmicatv.com
*.cryplove.com
*.deltatextilesltd.com
*.dicountgolf.com
*.e5host.com
*.email-oklahoman.com
*.flc-investment.com
*.flynntire.com
*.foodproductphoto.com
*.freeporn2go.com
*.happyfamilymarketing.com
*.inforosocial.org
*.itsgood2go.com
*.itsryangeorge.com
*.joeymeatballs.org
*.juguetesbaratos.com
*.kansasteachingjobs.org
*.kanxiyang.com
*.kooltattooideas.com
*.martinezirrigation.com
*.nautismemaroc.com
*.palu100.com
*.pellebela.com
*.pensacolascenicbluffs.org
*.place4dj.net
*.pytm.org
*.rwatchl.com
*.sbjnews.com
*.scira.org
*.sheinoffer.com
*.shopeeship.mobi
*.sugarandcosyr.com
*.translate-google.com
*.triumphantlegends.com
*.tvguideuk.com
*.virenhosting.com.au
*.wearsaiko.com
*.webtherapy24.com
*.xbel.com
*.xuongphim18.org
10ktfsupport.org
39thandbroadway.com
abcebooks.com
academiaemprender.com
alyahair.com
anikinfo.com
asti.cc
azboardgamers.com
belvoirhomes.com
cedarcreekvineyard.com
cizmicatv.com
cryplove.com
deltatextilesltd.com
dicountgolf.com
e5host.com
email-oklahoman.com
flc-investment.com
flynntire.com
foodproductphoto.com
freeporn2go.com
happyfamilymarketing.com
inforosocial.org
itsgood2go.com
itsryangeorge.com
joeymeatballs.org
juguetesbaratos.com
kansasteachingjobs.org
kanxiyang.com
kooltattooideas.com
martinezirrigation.com
nautismemaroc.com
palu100.com
pellebela.com
pensacolascenicbluffs.org
place4dj.net
pytm.org
rwatchl.com
sbjnews.com
scira.org
sheinoffer.com
shopeeship.mobi
sugarandcosyr.com
translate-google.com
triumphantlegends.com
tvguideuk.com
virenhosting.com.au
wearsaiko.com
webtherapy24.com
xbel.com
xuongphim18.org

Other certificates including the domain name nautismemaroc.com

(limited to 100 certificates)
nautismemaroc.com
nautismemaroc.com
nautismemaroc.com
nautismemaroc.com
nautismemaroc.com

Certificate

The complete raw certificate details for nautismemaroc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297865811076204996808919952290692879648906
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 20:52:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 20:52:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nautismemaroc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726756393697931458860424486495367222481787582549113302723308797252262592918089040926054626112566722178821249519745213932389090270150335710271004663908431983335602749392000300800372433522624029297345863445038726695405189666873159371475170624230823957698612646468359848832888220645817057253913788716689983774568182469567670876422838824934913419317095983356715832432046366814782782036954272427170807302388434833353495886252426624320944930920382271697701866685347138255049035794118561289791020417839760443897721549124180440569823210486346682188945967325421116891369046114483506760570224541462262598498938120146262232197495247407557467331346500935683650230636037464749718624118773773092772183081135136466154030980373557557311471308926792276767409013900561874552925454563804894882834866185681418011762024486330063805604128418436892819597312263424179124752748532670337989193218005601416915591730778070524878195732081727351238842409922386132473766585976655361154014228759147711353489880540533047488858742178193722533560235138871080906437044677446006887850002366694918797464427697163066358705109390577800471655550974105362470706296700304876060567435194605427557502738293970218932274583680311060909154547384224009722114350930379494500965434987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6a0b72df4ebf6a44abde0f17a821f1ab8fa96b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1866 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10ktfsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.39thandbroadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.academiaemprender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alyahair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anikinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asti.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azboardgamers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belvoirhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedarcreekvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cizmicatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryplove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deltatextilesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dicountgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e5host.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.email-oklahoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flc-investment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flynntire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodproductphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeporn2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happyfamilymarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inforosocial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itsgood2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itsryangeorge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joeymeatballs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juguetesbaratos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kansasteachingjobs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanxiyang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kooltattooideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martinezirrigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nautismemaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palu100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pellebela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensacolascenicbluffs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.place4dj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pytm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwatchl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scira.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheinoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopeeship.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugarandcosyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.translate-google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triumphantlegends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvguideuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virenhosting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearsaiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webtherapy24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xuongphim18.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10ktfsupport.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '39thandbroadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academiaemprender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alyahair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anikinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asti.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azboardgamers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belvoirhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarcreekvineyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cizmicatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryplove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltatextilesltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicountgolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e5host.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-oklahoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flc-investment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flynntire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodproductphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeporn2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happyfamilymarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inforosocial.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsgood2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itsryangeorge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joeymeatballs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juguetesbaratos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasteachingjobs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanxiyang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kooltattooideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinezirrigation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nautismemaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palu100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pellebela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensacolascenicbluffs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'place4dj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pytm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rwatchl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbjnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scira.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheinoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopeeship.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarandcosyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translate-google.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triumphantlegends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvguideuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virenhosting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearsaiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtherapy24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuongphim18.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fb1bdc3c10000040300473045022100eed2fe71487353a7f2cbfbef0564ec9ede53b19eec03ca83b52c5c64055860f302203e251ceb5cfeaf8cd6476face26d27f94422013f098cc7669fc290ff91cdaff000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fb1bdc4170000040300473045022100dfa3e0a31467c1e6ffaf88bcd8525b090f73791444c5629acfd61bfbd903542a02202918e80c51f5594bc1d6419f5405a92d46512138f27588b00fb69cca52eddaff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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