geiringer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9a:68:8f:c1:63:ef:9d:e9:ab:1b:df:1e:45:3c:e0:a6:ed was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geiringer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:68:8f:c1:63:ef:9d:e9:ab:1b:df:1e:45:3c:e0:a6:ed
Serial Number (int): 313879328433540464460217598161593747678957
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:b1:ff:c5:30:59:05:cf:57:9c:72:43:11:f8:70:39:93:3d:59:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:46:7d:b3:25:06:e6:05:25:ef:8a:32:92:e9:eb:c1:e8:7a:15:50
Fingerprint (sha256): 38:30:77:37:b9:2a:cd:b2:15:bd:f1:f8:50:7c:62:e3:43:55:16:72:6d:08:82:be:40:54:8c:0f:6c:3b:ce:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geiringer.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geiringer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aberton.com
*.acomerbien.com
*.adgp.com
*.advogado.com
*.aghsaatkala.com
*.albuquerquevacations.com
*.amdur.com
*.artistiko.com
*.audissey.com
*.b33.name
*.badcrefitloans.com
*.barchella.com
*.bartrans.com
*.bglots.com
*.bigsreenvr.com
*.bordallo.com
*.broadband.sg
*.christianapartments.com
*.cloudquotes.com.au
*.comparsions.org
*.cosmoacril.com
*.cotart.com
*.dudeflesh.com
*.essencehalthcare.com
*.exupload.com
*.frankkonia.de
*.gainsburg.com
*.geiringer.com
*.gra-assocation.com
*.jianjing.com
*.kabelos.com
*.kimdaepyo.com
*.lacasadesol.com
*.lashonhara.com
*.lazerson.com
*.lukach.com
*.musyuusei.com
*.ogcoffee.com
*.ossandon.com
*.pakcric.com
*.riodecontas.com
*.speedycas.com
*.tawbi.com
*.thoughtbomb.com
*.timbang.com
*.tintun.com
*.validi.com
*.watkhaokuti.org
*.worldwidetrainers.com
*.yildun.com
aberton.com
acomerbien.com
adgp.com
advogado.com
aghsaatkala.com
albuquerquevacations.com
amdur.com
artistiko.com
audissey.com
b33.name
badcrefitloans.com
barchella.com
bartrans.com
bglots.com
bigsreenvr.com
bordallo.com
broadband.sg
christianapartments.com
cloudquotes.com.au
comparsions.org
cosmoacril.com
cotart.com
dudeflesh.com
essencehalthcare.com
exupload.com
frankkonia.de
gainsburg.com
geiringer.com
gra-assocation.com
jianjing.com
kabelos.com
kimdaepyo.com
lacasadesol.com
lashonhara.com
lazerson.com
lukach.com
musyuusei.com
ogcoffee.com
ossandon.com
pakcric.com
riodecontas.com
speedycas.com
tawbi.com
thoughtbomb.com
timbang.com
tintun.com
validi.com
watkhaokuti.org
worldwidetrainers.com
yildun.com

Other certificates including the domain name geiringer.com

(limited to 100 certificates)
geiringer.com
intevals.icu
www.aluvyon.com
geiringer.com
newlooklinen.com
geiringer.com
jesso.com
crimenorganizado.com
rosimo.com
clipclub.com
geiringer.com
gigen.com
geiringer.com
geiringer.com

Certificate

The complete raw certificate details for geiringer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8pD9KKpEo1CkxLtV4zpc
Kzh4ZXT78YRvtu4otxqCtLLug+EvitNyYnv33t6qtWGH1Xq1ggFM6/bZmnzFvQNX
a3FY2z1sseMOpZW4V56xchOC+v62+Yx4dbtYcyV2WnEg8VX5Ylx2MLQkjyTB7vZ6
I4iWVKmr8veBtZROJG+7rgqppBp4R5qDYjcCVmTwgYwK7sLsf3FxxDoKZXLozxnI
PREj1pR2d4+sW8CXPJ1qoiza9bd9iyn1uSbvuyMQ7wQbzibkCPxoKDJPa3J3DteP
QlOOaq9Fb3bO9MfQPeklXZAs6x2i0chRMhrKhui+YqycXHHK2X5Ynr9SticDaQcU
/3S+Dku7d3Wqbd0Jt6gcUsWkx5udHF+0AmNHSnn+WYgC3VyaNbijT3zsL5DdFz81
AE2sRSSpQdcYqzbDdrPaYI9lXPkmxPuUsA+04HA30aW9YESE20HFiZIEJNUhGcRc
pezYdhGYGGPacb62j/S6xAb9vjLXVQ0U9YS7KA5FR/LpCAtK4Z/2f34n8TV18kw4
jffSLpZyrhepgCJkLaumOeFwdIe3PJvnx0wVB3/87NRHAEqS6HaWSl3z04h7cz2N
O9H+2l2eAczMj1sFv2fodTh8QA4iVn61YarqTa2fxZjI9afATQCquYVjWgSEdkeb
OkXZ9rXqOxIcKq3JesFT+/sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313879328433540464460217598161593747678957
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 09:36:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 09:36:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geiringer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 989584423495849242881756477548804429883241912709174464470507277806669602901239514223457689866712643917297094847675247884224357860254038938315358851041428866528836089958916054123445115591607823779850722266653308520632539278985449559709296756922525123539357819686127080086875355709248272666984943962638770054341035303289815160277301456771142280293954222218789814261604893936925611646077015804091676957422158238955056836774890854181584807286404770975405700696480691980200037220087748855961346359121604085364826296819385484078468485969697334519866123579446178377099888852747227332315986483990691137344296757236201860945936150288989894077460732719798855386802459730730709435475383276246297203663010740672329548941848870512016907542302448406820440827796534657951605240361346960916711524788686236285284607316603127640223919097506433069919747152845376982075987024474187058676261861459801966752483331455246027733121479205289831567655018348254298771112435265118301671394515775177627782249510600141455971061241234132025532422261870474765345300249253872508579508997851452958017966207839912496263384659866009279337725098838836378376863949140599744058740103175953649374671030707595900257450509846782814859204890367686632525235986166341297019026427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36b1ffc5305905cf579c724311f87039933d59fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1630 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aberton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acomerbien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adgp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advogado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aghsaatkala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albuquerquevacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amdur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artistiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audissey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b33.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badcrefitloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barchella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bartrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bglots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigsreenvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bordallo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadband.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christianapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comparsions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cosmoacril.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cotart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dudeflesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essencehalthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exupload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankkonia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gainsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geiringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gra-assocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jianjing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimdaepyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacasadesol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lashonhara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lazerson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lukach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musyuusei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ossandon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakcric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riodecontas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speedycas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tawbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thoughtbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tintun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.validi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watkhaokuti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldwidetrainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yildun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aberton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acomerbien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adgp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advogado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aghsaatkala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albuquerquevacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artistiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audissey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b33.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badcrefitloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barchella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bglots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigsreenvr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bordallo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadband.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparsions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmoacril.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dudeflesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essencehalthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exupload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankkonia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gainsburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geiringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gra-assocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jianjing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimdaepyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacasadesol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lashonhara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazerson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musyuusei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ossandon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakcric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riodecontas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speedycas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tawbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtbomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tintun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watkhaokuti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwidetrainers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yildun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0264d8850000040300483046022100825d920fea76570a2bb31ec4ebe1b5f20864933e9b3f5cf45608713a8f7e41e9022100ca332afd0bab2ee9f2322943eec4253eba13683408fbd3c7b78f30d22c70f4a500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d0264d8d90000040300463044022024d950cfb40b0813ebf85454b3bdc27eb69dc759e132fdd3d7087734bf33a95302207836327dbff424a1f6f9b6c77697f8ef917931506e7e08dce04833ea2bb7eb56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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