southdakotaseniorbenfits.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c8:99:4a:eb:68:c2:64:c5:7e:d6:0f:8c:90:10:af:87:31 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=southdakotaseniorbenfits.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:99:4a:eb:68:c2:64:c5:7e:d6:0f:8c:90:10:af:87:31
Serial Number (int): 329597092067457204015104668454892245845809
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:62:54:91:e0:0e:76:ea:bf:64:4a:54:ac:cc:bd:b0:41:b7:d6:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:b4:9f:eb:bc:bd:59:e4:1e:a9:da:51:f7:b5:3d:d6:d1:89:1d:da
Fingerprint (sha256): 32:6e:bd:9a:a7:76:3a:ea:41:52:99:88:f2:68:49:dc:96:96:44:99:7d:55:26:c3:d5:16:c3:80:03:c5:54:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate southdakotaseniorbenfits.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for southdakotaseniorbenfits.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.absinthejailbreak.com
*.affordablemo.com
*.ajphandyman.com
*.amigocm.com
*.amoveablefeastbyoconnors.com
*.barnesautosales.com
*.bedzzz4less.com
*.boacorrida.com
*.buymyinvoice.com
*.casadeoficiosbaires.com
*.chesnutcharter.com
*.chsfalcons.org
*.craigsclist.com
*.dobsonsrestaurant.net
*.erocal.pl
*.fapillo.com
*.foxdab.com
*.guruma.net
*.idesfmrkh.com
*.jara-jordan.com
*.mailboxmagazine.com
*.matbet306.com
*.materbrandbenefits.com
*.maturedir.com
*.mountviewconstruction.com
*.my99storebenfits.com
*.ocboxingcoach.com
*.orogressive.net
*.oshisspazone.com
*.outperform.org
*.outperforming.com
*.pacgames.com
*.pacificironworks.net
*.packersfootballdeals.com
*.pendejeando.ne
*.proxydrom.com
*.qavn.com
*.sandpointelectrolysis.com
*.savagepresets.com
*.southdakotaseniorbenfits.com
*.taxnews.me
*.tescotechsupport.com
*.thehibiscusmoshi.com
*.tkgiongnhapf1.com
*.trafficla.com
*.trxtnow.com
*.tynedcare.com
*.wahlgreens.com
*.wilsonparrotfoundation.com
*.wwwellfargo.com
absinthejailbreak.com
affordablemo.com
ajphandyman.com
amigocm.com
amoveablefeastbyoconnors.com
barnesautosales.com
bedzzz4less.com
boacorrida.com
buymyinvoice.com
casadeoficiosbaires.com
chesnutcharter.com
chsfalcons.org
craigsclist.com
dobsonsrestaurant.net
erocal.pl
fapillo.com
foxdab.com
guruma.net
idesfmrkh.com
jara-jordan.com
mailboxmagazine.com
matbet306.com
materbrandbenefits.com
maturedir.com
mountviewconstruction.com
my99storebenfits.com
ocboxingcoach.com
orogressive.net
oshisspazone.com
outperform.org
outperforming.com
pacgames.com
pacificironworks.net
packersfootballdeals.com
pendejeando.ne
proxydrom.com
qavn.com
sandpointelectrolysis.com
savagepresets.com
southdakotaseniorbenfits.com
taxnews.me
tescotechsupport.com
thehibiscusmoshi.com
tkgiongnhapf1.com
trafficla.com
trxtnow.com
tynedcare.com
wahlgreens.com
wilsonparrotfoundation.com
wwwellfargo.com

Other certificates including the domain name southdakotaseniorbenfits.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for southdakotaseniorbenfits.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Tk4mVmwn0HFQC8EG6Hx
y81zj/SOPQ7BZ24Y5Y04rDPmcTfSPfw4fO1oBNPvSk07wxUSQ1+DaUd93X0V0gEC
pzf11eCOyxBNnGJZ9ClKNkpCe3ZTX9d6ceEMpp8/Gs0tkzpWChpi83Fsfjk7q1ou
otawkoY111SpxidvfFq6dJggPatk36GyP1OV0kOYWkiAuhYz+D6H/E4TxiPCRRWj
Nax4lBflZ7sCZdKLQyH/hbMT9eWR4aF46FGgbqHPDqrJ8xuv5eMgyzkVwQh3K7gh
aQlktv8RpFGk9KfdVaAfjJDDGbOR2xQ0w5zkPKmuaaPhFq/JbWfBpJQv9uOAKq5C
CCyL69MD+IA0jBw9X0K43KC73mksVIt2f4nv+7sEACwe3U0XQmh7r4SLZ8BsxJ6c
pRpDqHsoXN75qTSBelmr62Lg9HrOTw9bSbWG0UIQ97LzVLf6ftSBb0NrP/h7lMGy
HvPNnaGqxZy6TMGoZ75hjGxT6ZJXWhzvzOGI/5z5lUkGZRxkKV2O70RO3wWeHKn2
1qP4pt0d1aA2Y4tu4M+XHIr0rtMsGisfHWMyMoXkA1ERcoo0grbKkSNRFfyyduF1
IrOfDl0XiK1XaGHaFHLFm4P+YH0ktdm5Lla9PWjSqSECuwiolbeK+IKu/15ilEog
a7k4+DhFps0eaaWPxkQbQDUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329597092067457204015104668454892245845809
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 16:11:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 16:11:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'southdakotaseniorbenfits.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886194644323422522870819673020250684380901725704704760818046570071676119033323459999375677740791915700340326711315259572997707757942617066861999447246271435742907131766738719670577973013462249363463869054334681102134808862517939943241301670933133370695279388279720149329417195272127730262407888232709732687783690813728794406415289569581026506633077019922863111150966960921434742241842174148836995798980878766895410830127908755626733651920864723590955108299979050671426892839334640194894231414137034778141735011223664104148836470856812347442389743348601930521912125844602229227584063753634589934289135266678909157680572811489588775392011794218657739719118001416483412352513159440297547775106091959730978746090503789876332723449638628580043216810109361756202008139775525347374411532485577634494963049253193686282225334328299834624080285095758855522642103467510881110674085593550377712858301933619289202270791870468064800562398066863046831109282175969233586272391437229428351034522784109898712549095172403260424155156649079689517763639399629219492737988209782418077076473089921076895508655128931399089017285301664241495139656758069963786929352464386469530979505995900976659979056279481377786796437743390848587001503509298287696737419317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f625491e00e76eabf644a54acccbdb041b7d64d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1954 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absinthejailbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affordablemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajphandyman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amigocm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amoveablefeastbyoconnors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnesautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedzzz4less.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boacorrida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buymyinvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casadeoficiosbaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chesnutcharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chsfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craigsclist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dobsonsrestaurant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erocal.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fapillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxdab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guruma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idesfmrkh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jara-jordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailboxmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matbet306.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.materbrandbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maturedir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountviewconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my99storebenfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocboxingcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orogressive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oshisspazone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outperform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outperforming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificironworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packersfootballdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pendejeando.ne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxydrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qavn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandpointelectrolysis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savagepresets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southdakotaseniorbenfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxnews.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tescotechsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehibiscusmoshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tkgiongnhapf1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trafficla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trxtnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tynedcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wahlgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilsonparrotfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwellfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absinthejailbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordablemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajphandyman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amigocm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amoveablefeastbyoconnors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnesautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedzzz4less.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boacorrida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buymyinvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casadeoficiosbaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chesnutcharter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsfalcons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigsclist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dobsonsrestaurant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erocal.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fapillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxdab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guruma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idesfmrkh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jara-jordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailboxmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matbet306.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materbrandbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maturedir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountviewconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my99storebenfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocboxingcoach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orogressive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshisspazone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outperform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outperforming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificironworks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packersfootballdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pendejeando.ne'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxydrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qavn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandpointelectrolysis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savagepresets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southdakotaseniorbenfits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxnews.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tescotechsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehibiscusmoshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkgiongnhapf1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trafficla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trxtnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tynedcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahlgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilsonparrotfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwellfargo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018931565b2b00000403004630440220187565495699402ffa9b7cd372094fbeef6598a517fa64b73d83a6b7d65a19f8022054dbded90f8cd190e0b8d0cdbbf745725c6adfd4e361d7fe87577ca9b4c5168e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018931565b47000004030047304502210090ab8cfef6391c8fe4b2a8d9ae763065a997520b2bc0c17f108ec20ac79e5fa10220264af73fc5cc98bac5432785ae8325a75804a39ea1aabf65548443b6d12b2254
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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