cultivoengenharia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e4:ad:bc:c9:0c:dd:af:52:ce:0f:20:01:90:83:60:a6:db was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cultivoengenharia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e4:ad:bc:c9:0c:dd:af:52:ce:0f:20:01:90:83:60:a6:db
Serial Number (int): 426264460057878827674132578691451069703899
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:89:6a:e3:84:53:3b:b2:60:b2:d5:65:da:ec:5f:b2:a8:23:9c:9f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:7b:ea:0e:9c:e5:00:43:c0:25:b5:81:0a:d3:5e:a9:41:71:a9:b2
Fingerprint (sha256): 39:db:5b:ff:f2:4d:a9:f1:3b:04:eb:1b:1b:bc:a0:aa:0d:30:63:04:2e:b2:97:51:09:f0:20:6a:2f:22:65:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cultivoengenharia.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cultivoengenharia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aqdab.com
*.as3008.com
*.av-8.live
*.bandbuddies.com
*.bethartisan.com
*.cleverflora.com
*.cookrealty.com
*.cultivoengenharia.com
*.dekunsten.net
*.devolay.com
*.dirtysexybooks.com
*.ecstaticpeacelibrary.net
*.eigademiru.com
*.emmashapplin.net
*.forosaludnatural.com
*.galleryofwives.com
*.girlflu.co
*.hanmanw.com
*.healthfreelance.com
*.hid50.com
*.hillcentar.com
*.huvurmotors.com
*.hypnotherapymelbourne.au
*.idonlyfans.com
*.joyasdeoroyplataperu.com
*.makeitwithmicah.com
*.mgaks.com
*.mxxxdot.com
*.nightoracle.com
*.nud3x.com
*.offivaruste.com
*.pkplays.com
*.promomart5.com
*.rodierinterieurs.com
*.sanjoseweddingdress.com
*.sexvl.net
*.snowflakephotography.com
*.spiritualotblog.com
*.thehumanprogramme.com
*.tobaccosmoke.org
*.torontobackpackershotel.com
*.torrentqq140.com
*.torrentqq143.com
*.trackersnz.com
*.transfans.net
*.trugravityexim.com
*.twittermass.com
*.vinsearch.com.au
*.wccpilgrimage.org
*.wiskyhalloffame.com
aqdab.com
as3008.com
av-8.live
bandbuddies.com
bethartisan.com
cleverflora.com
cookrealty.com
cultivoengenharia.com
dekunsten.net
devolay.com
dirtysexybooks.com
ecstaticpeacelibrary.net
eigademiru.com
emmashapplin.net
forosaludnatural.com
galleryofwives.com
girlflu.co
hanmanw.com
healthfreelance.com
hid50.com
hillcentar.com
huvurmotors.com
hypnotherapymelbourne.au
idonlyfans.com
joyasdeoroyplataperu.com
makeitwithmicah.com
mgaks.com
mxxxdot.com
nightoracle.com
nud3x.com
offivaruste.com
pkplays.com
promomart5.com
rodierinterieurs.com
sanjoseweddingdress.com
sexvl.net
snowflakephotography.com
spiritualotblog.com
thehumanprogramme.com
tobaccosmoke.org
torontobackpackershotel.com
torrentqq140.com
torrentqq143.com
trackersnz.com
transfans.net
trugravityexim.com
twittermass.com
vinsearch.com.au
wccpilgrimage.org
wiskyhalloffame.com

Other certificates including the domain name cultivoengenharia.com

(limited to 100 certificates)
mdsengenharia.com
mdsengenharia.com
grupoaldi.com
cultivoengenharia.com
cultivoengenharia.com
mdsengenharia.com
genesis3dstudio.com
construtechsc.com
cultivoengenharia.com
cultivoengenharia.com
genesis3dstudio.com
cultivoengenharia.com
cultivoengenharia.com
grupoaldi.com
grupoaldi.com
genesis3dstudio.com
cultivoengenharia.com
construtechsc.com
mdsengenharia.com
construtechsc.com
mdsengenharia.com
boloex.com
grupoaldi.com
cultivoengenharia.com
peau-de-bebe-official.online
raincityquartet.com
grupoaldi.cultivoengenharia.com
genesis3dstudio.com

Certificate

The complete raw certificate details for cultivoengenharia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426264460057878827674132578691451069703899
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 18:50:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 18:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cultivoengenharia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 950894942788083705512233139227925627225801298502605168749168476483056877453739799534981143906504656447817894778218805058458386003013886042045471800701089154056762246416840332658087375300173538573510318270685190302736836537681660374358298693986976743052708797967138031428296643781650236560365077755787033786348261684965307529091307878318029429152366049997902474278237584530578419890853261335873385041606078885181239207920231950811646277366463804779493804585497906736660366885708150126773747986941067910353300689176751762315376346683156359035274077890215993224085990497117851348289295440358194432053526089317370177507907011138067417037770169495267806223193158715153912901085319479877623251717363845768430663235419314684818905478882440197319602535456048509344919699410394278668780532728984211409830935098821409368038072761726770051576692121882612709598371917932899118870846910849839967511082410487780956362414726740988057363580815939187630106682841517450609938897909456825846779064099684012722857725744412024473619712695813965896990425699047553035720298101901484954009320588302152913946486217615193554549640052984534566390486766769763412075865638920733052297479691632772418443094505167525975196364788915708471975522916154214636685873241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11896ae384533bb260b2d565daec5fb2a8239c9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1880 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aqdab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.as3008.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.av-8.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandbuddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bethartisan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleverflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultivoengenharia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekunsten.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devolay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirtysexybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecstaticpeacelibrary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eigademiru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emmashapplin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forosaludnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galleryofwives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlflu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmanw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfreelance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hid50.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillcentar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huvurmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypnotherapymelbourne.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idonlyfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joyasdeoroyplataperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeitwithmicah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mgaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mxxxdot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nightoracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nud3x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offivaruste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pkplays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promomart5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodierinterieurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanjoseweddingdress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexvl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowflakephotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritualotblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehumanprogramme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tobaccosmoke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontobackpackershotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentqq140.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentqq143.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackersnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transfans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trugravityexim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twittermass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinsearch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wccpilgrimage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiskyhalloffame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aqdab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as3008.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av-8.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandbuddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bethartisan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleverflora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultivoengenharia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekunsten.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devolay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtysexybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecstaticpeacelibrary.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eigademiru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmashapplin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forosaludnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galleryofwives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlflu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmanw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfreelance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hid50.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcentar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huvurmotors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypnotherapymelbourne.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idonlyfans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joyasdeoroyplataperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeitwithmicah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxxxdot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nightoracle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nud3x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offivaruste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkplays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promomart5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodierinterieurs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanjoseweddingdress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexvl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowflakephotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritualotblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehumanprogramme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobaccosmoke.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontobackpackershotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentqq140.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentqq143.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackersnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transfans.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trugravityexim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twittermass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinsearch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wccpilgrimage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiskyhalloffame.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d37df66c10000040300483046022100e2bc399c5ef9d5791092c3c8c88efc2d7bab1d337772a2db4dee4c3f7e9771a4022100eff0d9c741da6aeec9eae9ca8283f2548a16e91e1563dbd25161c474fa1657aa0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d37df66b8000004030046304402200a95ffccb80dfb14d09f5f418d51d3632d8927cc5bcc9bbf746f9003b79e887002202e1ff5e9e728578ecc9fa749c40fc5377e6ec440b16cab1af6cc90ff70d59e58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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