astats.co

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:3b:9c:86:4e:12:f2:47:46:bf:1d:d7:69:4c:51:be:aa was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=astats.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:3b:9c:86:4e:12:f2:47:46:bf:1d:d7:69:4c:51:be:aa
Serial Number (int): 316541838410562559682804410147241060318890
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:82:4d:bb:63:cc:45:81:b9:40:4a:30:b3:c7:0c:17:83:a5:e7:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:2c:81:9c:fa:91:3c:f1:f3:cf:9b:3a:0e:4b:d4:88:be:92:30:06
Fingerprint (sha256): 3c:80:d7:7e:ce:2e:d6:84:f7:f8:0b:9b:4f:8f:4a:f0:7d:cc:dc:7e:db:e8:ce:06:96:82:7a:81:38:42:e7:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate astats.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for astats.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alicino.com
*.altotrafico.com
*.anaocaq.com
*.astats.co
*.avenratechnologies.net
*.beyondtheyellowribbon.com
*.bfanet.com
*.bo-zi27.net
*.bricktownebeer.com
*.casalinghi.com
*.cbtspecialists.net
*.chessa.com
*.chudesa.com
*.colfutbol.com
*.epuertorico.com
*.escodex.co
*.esskultur.com
*.fontanarossa.com
*.hustus.com
*.icotto.co
*.idahoscowboysupply.com
*.idealwatches.com
*.inculto.com
*.innocar.com
*.kintor.co
*.kthk.com
*.ledahu.com
*.linkedit.co
*.lisitano.com
*.manaecolodges.com
*.mehraj.com
*.nopy.co
*.oku.sx
*.parino.com
*.pawsforyou.com
*.provicasa.com
*.raychat.co
*.sciatica-trial.com
*.shofftackle.com
*.torremar.com
*.tremarco.com
*.trigate.com
*.urmaza.com
*.vetru.com
*.vistaridge.com
*.vodicka.com
*.xn--ernnhrungsberatung-otb.de
*.yandere.com
*.yourceu.com
*.zahirovic.com
alicino.com
altotrafico.com
anaocaq.com
astats.co
avenratechnologies.net
beyondtheyellowribbon.com
bfanet.com
bo-zi27.net
bricktownebeer.com
casalinghi.com
cbtspecialists.net
chessa.com
chudesa.com
colfutbol.com
epuertorico.com
escodex.co
esskultur.com
fontanarossa.com
hustus.com
icotto.co
idahoscowboysupply.com
idealwatches.com
inculto.com
innocar.com
kintor.co
kthk.com
ledahu.com
linkedit.co
lisitano.com
manaecolodges.com
mehraj.com
nopy.co
oku.sx
parino.com
pawsforyou.com
provicasa.com
raychat.co
sciatica-trial.com
shofftackle.com
torremar.com
tremarco.com
trigate.com
urmaza.com
vetru.com
vistaridge.com
vodicka.com
xn--ernnhrungsberatung-otb.de
yandere.com
yourceu.com
zahirovic.com

Other certificates including the domain name astats.co

(limited to 100 certificates)
astats.co
astrotours.co
demire.com
demire.com
astats.co
astats.co

Certificate

The complete raw certificate details for astats.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316541838410562559682804410147241060318890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 20:44:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 20:44:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astats.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804880903815788735168529237129006379975387992202650406733106737075546348492815114333514293595356027597903296265756561811033319737059216061406994540187347973880256234676184465313015366246700517091954438435113874720307475932260550103420367475443246301343478637576638255290756718900742974243074561029369423867659042408947282800340842604593504929308416167477421647091370952013158458055981033673475777417088063913334669651951109825562232369377197359117681207416722913791648783220285955458598119051710293120345645314698030395435421892474690120760064264754977025977731270132435584942208098875764238847856759813691109224807577738103736804831995000846771604351783925284416320845745409030368091685415171929821562662056936766731281070272809952266602337614157676592685119420776478020739324582927489653293410075573465956874142122460948658123247587448232099966316716523754671921329336993492137590184693849418375696606484579507331856555289259691753569866625158889971158165643291419687035383708914695727731568011348650293403036436875371761169151589168178491992521588078707793467199154529066660794855970155776787235295499081331811602354554111362514412815999210285647403318254203496509286786800977766792230960854491178012738910726433863581957287469439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec824dbb63cc4581b9404a30b3c70c1783a5e747
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alicino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altotrafico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anaocaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astats.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avenratechnologies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beyondtheyellowribbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bfanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bo-zi27.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bricktownebeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casalinghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbtspecialists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chudesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colfutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epuertorico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escodex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esskultur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fontanarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hustus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icotto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idahoscowboysupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idealwatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inculto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kintor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kthk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ledahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkedit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisitano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manaecolodges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mehraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nopy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oku.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawsforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.provicasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raychat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciatica-trial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shofftackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torremar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tremarco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trigate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urmaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistaridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vodicka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ernnhrungsberatung-otb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yandere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourceu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zahirovic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alicino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altotrafico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaocaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astats.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avenratechnologies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondtheyellowribbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-zi27.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricktownebeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casalinghi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbtspecialists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chudesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epuertorico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escodex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esskultur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fontanarossa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hustus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icotto.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idahoscowboysupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealwatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inculto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innocar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kintor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kthk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledahu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkedit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisitano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manaecolodges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nopy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oku.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawsforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provicasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raychat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciatica-trial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shofftackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torremar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremarco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trigate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistaridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodicka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ernnhrungsberatung-otb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yandere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourceu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zahirovic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bda1789a200000403004830460221008f2a095e229a94d140a5121d8ed3d1f93bd882169ce15b16285bb837f4dd7415022100f2b469ee15427f83427b2b04412a86e412be12d0e2c4eed8e2ab1a3f5aaee42a007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bda1789ba00000403004630440220589a7dbb935f9cac4886fa52c713b6070fefb0c1461fee77841c3d6ea8372a1602200b1f2bc2367925b2481bfd5e2baae5b061d4d3b18ff24e77136afc019b29d5d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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