dantignac.com

Issued by R3

About this certificate

This digital certificate with serial number 03:14:41:4e:86:b9:f8:9d:0e:84:08:ea:dc:b5:7e:ad:16:bc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dantignac.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:41:4e:86:b9:f8:9d:0e:84:08:ea:dc:b5:7e:ad:16:bc
Serial Number (int): 268229312685157533564233819377900349888188
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:e5:8e:c2:d7:89:ae:b2:48:5e:f2:26:49:9d:96:0a:da:c2:76:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:84:c0:12:6f:55:94:bf:a6:44:c0:83:b4:9e:a6:49:91:57:fd:00
Fingerprint (sha256): 2d:4c:dc:f5:98:1e:85:ed:7f:e3:99:29:47:c6:34:d4:53:b0:28:6f:f3:a7:f7:ae:fc:ff:8e:da:72:21:70:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dantignac.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dantignac.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.525xxxxx.com
*.6q7uskg.cn
*.afroasian.com
*.alaskademocrats.com
*.apple-support.me
*.blindagem.com
*.bunyard.com
*.celadon.org
*.chai.net
*.choicecable.net
*.clickseek.com
*.custodiambegohm.com
*.dantignac.com
*.drcaldeira.com
*.emeka.net
*.fonceca.com
*.functionroomsadelaide.com.au
*.gallegosautosales.com
*.ghousia.com
*.heims.com
*.hhz.org
*.horche.com
*.ikenaga.com
*.jamieleeboutique.com
*.joecain.com
*.joeken.com
*.laputa.net
*.lesmana.com
*.marathonmaniac.com
*.marmt.com
*.nestchildrensboutique.com
*.ozyildirim.com
*.rexha.com
*.ronniecolman.com
*.rostcleaning.com
*.saiteimadrid.com
*.scandura.net
*.scottsdalerealestate.com.au
*.sheaff.com
*.sitelink.net
*.slandscaping.com
*.snain.com
*.sneen.com
*.sniperclub.com
*.teamdataplatform.com
*.theannuity.com
*.theconfession.com
*.tiao.org
*.ucdt.com
*.xiaozhao.us
525xxxxx.com
6q7uskg.cn
afroasian.com
alaskademocrats.com
apple-support.me
blindagem.com
bunyard.com
celadon.org
chai.net
choicecable.net
clickseek.com
custodiambegohm.com
dantignac.com
drcaldeira.com
emeka.net
fonceca.com
functionroomsadelaide.com.au
gallegosautosales.com
ghousia.com
heims.com
hhz.org
horche.com
ikenaga.com
jamieleeboutique.com
joecain.com
joeken.com
laputa.net
lesmana.com
marathonmaniac.com
marmt.com
nestchildrensboutique.com
ozyildirim.com
rexha.com
ronniecolman.com
rostcleaning.com
saiteimadrid.com
scandura.net
scottsdalerealestate.com.au
sheaff.com
sitelink.net
slandscaping.com
snain.com
sneen.com
sniperclub.com
teamdataplatform.com
theannuity.com
theconfession.com
tiao.org
ucdt.com
xiaozhao.us

Other certificates including the domain name dantignac.com

(limited to 100 certificates)
bagada.com
dantignac.com
i-cellphones.com
angelly.com
dantignac.com
moshedfx.com
kritnu.com
moshedfx.com
langtou.com
i-cellphones.com
dantignac.com
didaftar.in
dantignac.com

Certificate

The complete raw certificate details for dantignac.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9/+NgInv+zRWUcN8DE4l
6JfJkx8Vqdl/Xdu/yN5sLuGWpHOipbQglLaKVuhfVgOzL6UvWcFhhZxfu2NjvdYl
W3ogfepAH0S+m5JOEUz2HeSm5b6pLq29DCazsM8mEUHAG8T1UN2/XLydThpLYC52
OLflTFwSLDlEcCIRSbUSA41d3SA8s3Raol8u0bjbPWmCvxCkeR9fylpiduCqjuQq
sYgJMmdChElinjrRVcE53gxL8UlgqFHRJiZmU53aBjYcUXhXB31lL+UJo6fqgIrX
30DgbYBanPPrOwjLbl85X+K7JPpNV3if7sBEQUhYYVCbdN7G5vwyX4d8BxubGGKJ
wTb1ZeEcbRPfC959iWQHoW9rlxe+cZnWBg4SJfp+iy1v1qV68FAT81HHLA7yUbxy
lFle8gh+KGNvZ6Yf+OQbLgqvf1P1Zl9+QQ4rCC03X/0u4FM0ydG+sFWya8inRG3Z
+erKovE/Es+T6njPfa926ppwNpU69pTzCyQ2d7rXLsGSJAD5p5cBExx2LKfiK4Mc
SMGXrlTI31O8C+ZKOSd/GoaTB/bdmY7agBTqjc2bHExP3Bo3ENse2bD/4kF5FZp7
siajeV+x8JEHvHxnRxVdNCVYhq8c5mYlfq+CukIh9aMa73zwADlAzaN/Mywifi6A
Uythors2T+SmpLcaZN138AsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268229312685157533564233819377900349888188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 08:57:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 08:57:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dantignac.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1011744601325975066171154847411953727269568953848736548776119325865219372571804692669224278191712265658667726643518862656100013806457297279511387375393359605717177235172108683726759333677715249990401643141958672192863469452220186716799019653802080334942989810956932874311787735841167410910551302472932436555506583974775936195556869957930570203374610407630209051186355448025971268630694183238261232777630518285922920151349811720182249061643956041776946425556919731181698922571505402447279177245660527718624520699994021210811159460041769992370059760376767546132680980367279035096869203378361219080620185945619425482546074032233272297000222655658112074342997918277761621888058887918138073524002766261702244812374337091634584847669448554891071149334168491003320561727109033550209053973733141563062869583042153514546244074945289690375046499747889245553646827205811361708298379553894069456739623110839390440600603827953021274485077557077786753075781050026967109228142163296164383711815226826990278371096579612713291919740203138722337552491622002750824569312594028523877456485675230788877275457733754860277075731921565152157766686210003428093410635946791243645003268098760392887268344198352370344852963815074031740221229587337041612323155979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5be58ec2d789aeb2485ef226499d960adac276fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1656 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.525xxxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6q7uskg.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afroasian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alaskademocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apple-support.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blindagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celadon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choicecable.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clickseek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custodiambegohm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dantignac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drcaldeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fonceca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.functionroomsadelaide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gallegosautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghousia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hhz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikenaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamieleeboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joecain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joeken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laputa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesmana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marathonmaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestchildrensboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozyildirim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rexha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronniecolman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rostcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saiteimadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scandura.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottsdalerealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sheaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitelink.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sneen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sniperclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamdataplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theconfession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiao.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ucdt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaozhao.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '525xxxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6q7uskg.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afroasian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaskademocrats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple-support.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blindagem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celadon.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choicecable.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickseek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custodiambegohm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantignac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drcaldeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emeka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonceca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'functionroomsadelaide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gallegosautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghousia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horche.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikenaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamieleeboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joecain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joeken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laputa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesmana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marathonmaniac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestchildrensboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozyildirim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rexha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronniecolman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saiteimadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scandura.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottsdalerealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sheaff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitelink.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slandscaping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sneen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sniperclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamdataplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theconfession.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiao.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucdt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaozhao.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001882e4a9fb20000040300473045022100c6f8c776d61539c5382a40d965d86f2a3de9525f6c0b204d37bf158707ead78b022005d816fe90fa93743b3347f61232f153aa32267cfba07a42d3d3b979b07dbbd4007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001882e4a9fa90000040300483046022100d81a53352d764ccc22c63f4d00ab24e4e7f1644337cdb48f8c52bc5b5b78712a022100d97274eb6dc110349e5c8bc855da0b587d9a16758887cb09c1eb8846428742ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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