meridiancu.com

Issued by R3

About this certificate

This digital certificate with serial number 04:56:6d:6f:64:29:5d:c4:c5:79:c7:6a:7c:e7:be:eb:77:2a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=meridiancu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:6d:6f:64:29:5d:c4:c5:79:c7:6a:7c:e7:be:eb:77:2a
Serial Number (int): 377858891510251882656537628491830717544234
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 14:e7:2b:0c:9a:ec:7f:a1:e5:e0:15:7d:a4:a7:f7:d1:25:99:6b:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:bc:6b:76:59:a2:55:07:e4:5d:09:8f:c3:2a:86:3a:6e:b2:d7:85
Fingerprint (sha256): 3b:dc:4a:cc:0d:ef:36:38:1d:a3:58:f5:83:01:ef:a1:b7:68:12:d0:cb:53:60:e0:1d:32:7b:e2:1f:55:6f:f3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate meridiancu.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meridiancu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5gnc.com
*.9to5tothemusicindustry.com
*.anchorimpart.com
*.asistravel.info
*.autismtulsa.org
*.autoescolaalianca.com
*.bed.cm
*.brandocorsets.com
*.bsrclaysus.com
*.build-base.online
*.carnetdecoche.net
*.chappaqua.land
*.delta-dental.co
*.freetoopee.com
*.fullpsycheahead.com
*.globenti.com
*.guysmaids.info
*.hamistartup.com
*.hensonrobinsonzooed.org
*.highersuccessinst.com
*.hotelparislenoxsaintgermain.com
*.jkturkey.com
*.kea.au
*.kengz.me
*.laminairun.com
*.libecca.com
*.licolnproject.us
*.listaswiseplay.pro
*.literatura.site
*.meridiancu.com
*.militarydiet.org
*.milwaukee.clothing
*.mrwrealestate.com
*.officialrelaxshop.com
*.oppyspasta.com.au
*.orgyahoo.com
*.ormortga.xyz
*.orrcadillac.com
*.outletpass.net
*.ovesrstock.com
*.ovoerstock.com
*.party4kiddies.com
*.puzeygardenproducts.com.au
*.scango.org
*.shaowen.info
*.sockcop.us
*.techgeekspace.com
*.truth.cm
*.tummathailand.com
*.videospornsex.com
5gnc.com
9to5tothemusicindustry.com
anchorimpart.com
asistravel.info
autismtulsa.org
autoescolaalianca.com
bed.cm
brandocorsets.com
bsrclaysus.com
build-base.online
carnetdecoche.net
chappaqua.land
delta-dental.co
freetoopee.com
fullpsycheahead.com
globenti.com
guysmaids.info
hamistartup.com
hensonrobinsonzooed.org
highersuccessinst.com
hotelparislenoxsaintgermain.com
jkturkey.com
kea.au
kengz.me
laminairun.com
libecca.com
licolnproject.us
listaswiseplay.pro
literatura.site
meridiancu.com
militarydiet.org
milwaukee.clothing
mrwrealestate.com
officialrelaxshop.com
oppyspasta.com.au
orgyahoo.com
ormortga.xyz
orrcadillac.com
outletpass.net
ovesrstock.com
ovoerstock.com
party4kiddies.com
puzeygardenproducts.com.au
scango.org
shaowen.info
sockcop.us
techgeekspace.com
truth.cm
tummathailand.com
videospornsex.com

Other certificates including the domain name meridiancu.com

(limited to 100 certificates)
meridiancu.com
lolvids.com
meridiancu.com
fashionforcharity.com
bllomindales.com
smp-inc.com
cineblog01.gratis
meridiancu.com
cineblog01.gratis
kidzhealth.org
cineblog01.gratis
*.1300seonow.au
tomberland.com
kidzhealth.org
kidzhealth.org
www.desfasados.com

Certificate

The complete raw certificate details for meridiancu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377858891510251882656537628491830717544234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 18:58:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 18:58:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meridiancu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840208830457718265595633609007943118936477862516367824935947637104382539686575049230158858838843409811915580047282293163170663506244122437820843782314292372209821696263342374790740529914153883181018386348143736342895805126705447353394950235638779059047977096976567188709790845761053816827106937336803351837634461863500891407264011233788708357526892801269929425030965984262111048565636587447315621813302495658265652886161148960366788214172535734894475686453897509602277868111997935584249534294298123240199972480583688961055235708180760288682654505766649972680364633022870266942311782662598750036694332304793383604124443219894020381503795982360522360753215364321453444671060235873974640786246878452392353571678061082586315557410030814860000543233299191974917601223203371301648277052481640687194268659916940073976316472109761357275060827338824145858851729816758982743978912049124142177291632589131288836207682684668371582994659368528766556802843630881425368410992535479453614302449793342719142583814947699846349183484347124099274698363124450820100981081069265224427533456258781448851583397249892842516162367168547966802096554858526258072913658794645992729405718773467411950935486519987834922467658539490859335459856816600977582213066977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14e72b0c9aec7fa1e5e0157da4a7f7d125996bb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1840 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5gnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9to5tothemusicindustry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anchorimpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asistravel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autismtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoescolaalianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandocorsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.build-base.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnetdecoche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chappaqua.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delta-dental.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freetoopee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullpsycheahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guysmaids.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamistartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hensonrobinsonzooed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highersuccessinst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelparislenoxsaintgermain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkturkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kea.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kengz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laminairun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libecca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.licolnproject.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.listaswiseplay.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.literatura.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.militarydiet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milwaukee.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrwrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officialrelaxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oppyspasta.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ormortga.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outletpass.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.party4kiddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puzeygardenproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scango.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaowen.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sockcop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techgeekspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truth.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tummathailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videospornsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5gnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9to5tothemusicindustry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchorimpart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asistravel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autismtulsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoescolaalianca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandocorsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build-base.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnetdecoche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chappaqua.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta-dental.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetoopee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullpsycheahead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globenti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guysmaids.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamistartup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hensonrobinsonzooed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highersuccessinst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelparislenoxsaintgermain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkturkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kea.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kengz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laminairun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libecca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licolnproject.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listaswiseplay.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literatura.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'militarydiet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milwaukee.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrwrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officialrelaxshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oppyspasta.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ormortga.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outletpass.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'party4kiddies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puzeygardenproducts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scango.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaowen.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sockcop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techgeekspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truth.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tummathailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videospornsex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e86a4c3960000040300473045022100c19c3566c8519c08787be5547c48fa950a068e87ce98eed0d27d2106d9eeed5b0220627ff011e3910603f23d286ede54dd15018686cf804228a3f4eb2190cb728b63007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e86a4c3ae0000040300473045022038ed1af4d334f55f9dc22114ce132d2ab35be8888a95a719f25f2b559980cb6e022100a092354914435c182171e73644c2535e88004c58786de4af55e446240dd24daa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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