clinicaaya.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a1:4b:8c:fa:5d:0e:86:df:e8:51:14:22:4b:65:54:ef:9d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clinicaaya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:4b:8c:fa:5d:0e:86:df:e8:51:14:22:4b:65:54:ef:9d
Serial Number (int): 403335028900531258640749418817291736641437
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:4b:84:08:74:8b:a1:b5:25:ae:f0:bc:e0:af:b2:cf:ff:42:41:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:3a:1f:26:27:61:db:1f:0f:f7:42:7e:68:3c:07:18:f4:be:b5:1d
Fingerprint (sha256): 3a:53:b6:05:f9:ff:39:c0:5a:20:11:d4:69:13:10:a0:d2:eb:e0:b1:f4:87:2d:16:96:7b:19:dd:89:59:63:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clinicaaya.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clinicaaya.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2msakura.com
*.agenciaupinsight.com
*.algolite.site
*.araclea.com
*.aragoninternational.net
*.attrs.com
*.aws-west2-ses.com
*.b4psoft.com
*.bcbsilcommunityhealthplan.com
*.birchenstock.com
*.byciclebluebook.com
*.cafeconpiernas.net
*.caliburnus.org
*.carlabighamfollowingjesus.com
*.clinicaaya.com
*.digmommies.com
*.elizabethmalec.com
*.envykicks.com
*.fastwistia.com
*.flprivatepackage.com
*.fresher2coder.com
*.gaylynnpersonaltraining.com
*.jeffheartsweddings.com
*.jetlblue.com
*.knptxjqunasfywu.com
*.kuasx.com
*.meetolivianicole.com
*.mlmreviewmasters.com
*.moviesporn.online
*.msme-registration.org
*.obsidianallure.com
*.omegawirelessinc.com
*.onscreens.eu
*.povhardcore.com
*.principlednews.org
*.raniye.com
*.sackofleads.com
*.soberanagas.com
*.stonwallkitchen.com
*.takem7.com
*.tool-torials.com
*.valuerentalcars.com
*.vcopy.com
*.vegasimsider.com
*.viaemiliamagazine.com
*.viperlevel.com
*.vipsimplytoimpress.com
*.vitabellarestaurantpa.com
*.wilsonsdoors.com
*.work4popeye.com
2msakura.com
agenciaupinsight.com
algolite.site
araclea.com
aragoninternational.net
attrs.com
aws-west2-ses.com
b4psoft.com
bcbsilcommunityhealthplan.com
birchenstock.com
byciclebluebook.com
cafeconpiernas.net
caliburnus.org
carlabighamfollowingjesus.com
clinicaaya.com
digmommies.com
elizabethmalec.com
envykicks.com
fastwistia.com
flprivatepackage.com
fresher2coder.com
gaylynnpersonaltraining.com
jeffheartsweddings.com
jetlblue.com
knptxjqunasfywu.com
kuasx.com
meetolivianicole.com
mlmreviewmasters.com
moviesporn.online
msme-registration.org
obsidianallure.com
omegawirelessinc.com
onscreens.eu
povhardcore.com
principlednews.org
raniye.com
sackofleads.com
soberanagas.com
stonwallkitchen.com
takem7.com
tool-torials.com
valuerentalcars.com
vcopy.com
vegasimsider.com
viaemiliamagazine.com
viperlevel.com
vipsimplytoimpress.com
vitabellarestaurantpa.com
wilsonsdoors.com
work4popeye.com

Other certificates including the domain name clinicaaya.com

(limited to 100 certificates)
clinicaaya.com
clinicaaya.com

Certificate

The complete raw certificate details for clinicaaya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403335028900531258640749418817291736641437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:46:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 23:46:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clinicaaya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706807547484352921276567684718762537770352982142216843659179014250758093291045008063904793695170235957859681449278048738912836431260851997315658805667304140058792381080274344534718824868675731233194387879856518191236686032567470280223900562418642279102704176036696363902596284197322382782931061948370967295242198002576201831658813919056456602048633250493922900594402475447688204151134474812065066564914899531991774027309113318585007559986075760779035611996608553809387037871976344610051714323629185673236157371691668153404962303019085779836325260831654797505107706633614141776265505305987007216435157216408984822409425605938850994099382009422743458034795163697118891393451033737500182414726482340168557248408999787931838479228719264898103277345002812991743994629904650397450399654000585491451500173279095189767097323625962425136071571532424347008992107205505488897726069000670059721641157244884255270971624578039796186879278146902498170027786278127752119739655434989118807114735877354235173087739848669947479524978633679139216267855386611253329542388833611161229530844010632690151600530887355216256130811382200273260410590928980355481517370290245121278097327047838718654778041523447645939752104705797777824979186668422865547551559073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d4b8408748ba1b525aef0bce0afb2cfff4241fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1990 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2msakura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agenciaupinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algolite.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.araclea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aragoninternational.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws-west2-ses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b4psoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcbsilcommunityhealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birchenstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byciclebluebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafeconpiernas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caliburnus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carlabighamfollowingjesus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicaaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digmommies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elizabethmalec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envykicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastwistia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flprivatepackage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fresher2coder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaylynnpersonaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeffheartsweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetlblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knptxjqunasfywu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuasx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meetolivianicole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mlmreviewmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviesporn.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msme-registration.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obsidianallure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omegawirelessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onscreens.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.povhardcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.principlednews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raniye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sackofleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soberanagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stonwallkitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takem7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tool-torials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valuerentalcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcopy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vegasimsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viaemiliamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viperlevel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipsimplytoimpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitabellarestaurantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wilsonsdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.work4popeye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2msakura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenciaupinsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algolite.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'araclea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aragoninternational.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-west2-ses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b4psoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcbsilcommunityhealthplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birchenstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byciclebluebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeconpiernas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caliburnus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlabighamfollowingjesus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicaaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digmommies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elizabethmalec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envykicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastwistia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flprivatepackage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fresher2coder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaylynnpersonaltraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffheartsweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetlblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knptxjqunasfywu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuasx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetolivianicole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlmreviewmasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesporn.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msme-registration.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsidianallure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegawirelessinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onscreens.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'povhardcore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'principlednews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raniye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sackofleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soberanagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stonwallkitchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takem7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tool-torials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuerentalcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcopy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegasimsider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viaemiliamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viperlevel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipsimplytoimpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitabellarestaurantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilsonsdoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'work4popeye.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e7838b5d4000004030047304502205a248c1155bd3bf816eccd9c30ad0767c12e5a6b01497b2d6f029aa24b85d2f6022100e645a8d2602168d5e860d26e6f89ef7bb0ad69246569a1bb963aeef29fdccdc200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7838ba7e00000403004730450220273d54a95f948f6337d7b6e662f004ca7105a57f744862fb51aeb5fa2aafb5f8022100b4a7380cb2ab507650edf4639cdf4a07ae03e504b0f9f3fe77d1eef0a84c7e92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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