paatagonia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:dd:2b:41:3f:08:ec:7b:1d:d6:9e:06:23:68:c0:66:c3:65 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=paatagonia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dd:2b:41:3f:08:ec:7b:1d:d6:9e:06:23:68:c0:66:c3:65
Serial Number (int): 423709042398181760789502723946071816848229
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9d:09:3d:8c:e6:42:6a:12:52:27:5d:75:7b:c0:46:32:ec:84:6f:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:c5:bc:6a:13:94:d2:02:07:1e:3a:bc:a4:0c:88:fe:7d:82:bb:7c
Fingerprint (sha256): 3c:fc:af:f8:28:0c:ae:cd:3d:29:4c:a5:9d:19:0c:e3:59:b9:77:ce:31:36:01:2e:03:10:a8:bf:2e:1f:ff:b1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate paatagonia.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paatagonia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.6xcw.com
*.akenocherry.com
*.aksukizyurdu.com
*.alabamadoc.com
*.beinup.com
*.bengkelcincin.com
*.biblespreader.com
*.bikelawyer.co
*.bmstrainingcenter.com
*.brasilnortebebidas.com
*.cespabien.com
*.cupshea.com
*.fh-expo.com
*.freecall.com.au
*.glossytruth.com
*.gofobo.co
*.hairixin.com
*.hpfupdfqy.com
*.iphoneinpakistan.com
*.ipsmarty.co
*.kalibandsons.com
*.kissedyou.com
*.kotharibd.com
*.leslieclassified.com
*.maathway.com
*.mindyaglerlmhc.com
*.news-canada.us
*.paatagonia.com
*.personalfinanceresources.com
*.personalweedvaporizers.com
*.preconprofessor.com
*.prsper.com
*.rightseeksolutions.com
*.sarasotarehab.co
*.seguroseetc.com
*.shreadquarters.com
*.smartcrick.com
*.smartsourse.com
*.speechdrop.com
*.starbookshoponline.com
*.stokkewarrenty.com
*.surfokanagan.com
*.suv-deals-86238.com
*.swalgreens.com
*.takethemeal.com
*.themayoclinic.com
*.ulkqzz.com
*.xn--mgbwg0ep.com
*.xubaomining.com
*.zyczenia-urodzinowe.com.pl
6xcw.com
akenocherry.com
aksukizyurdu.com
alabamadoc.com
beinup.com
bengkelcincin.com
biblespreader.com
bikelawyer.co
bmstrainingcenter.com
brasilnortebebidas.com
cespabien.com
cupshea.com
fh-expo.com
freecall.com.au
glossytruth.com
gofobo.co
hairixin.com
hpfupdfqy.com
iphoneinpakistan.com
ipsmarty.co
kalibandsons.com
kissedyou.com
kotharibd.com
leslieclassified.com
maathway.com
mindyaglerlmhc.com
news-canada.us
paatagonia.com
personalfinanceresources.com
personalweedvaporizers.com
preconprofessor.com
prsper.com
rightseeksolutions.com
sarasotarehab.co
seguroseetc.com
shreadquarters.com
smartcrick.com
smartsourse.com
speechdrop.com
starbookshoponline.com
stokkewarrenty.com
surfokanagan.com
suv-deals-86238.com
swalgreens.com
takethemeal.com
themayoclinic.com
ulkqzz.com
xn--mgbwg0ep.com
xubaomining.com
zyczenia-urodzinowe.com.pl

Other certificates including the domain name paatagonia.com

(limited to 100 certificates)
paatagonia.com
legalabbis-italt.fun
paatagonia.com
visitsaintmaarten.com
paatagonia.com
hardtruth.com
universosuggar.com
paatagonia.com
paatagonia.com
efectifacturas.com
desertluxuryhomes.com
dtings.com

Certificate

The complete raw certificate details for paatagonia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423709042398181760789502723946071816848229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 07:50:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 07:50:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paatagonia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 933955816208035379179028943635776110357833061457733781197078810419819069931752734635663504478608103179970383096142051724006897159911539564519067795753124300027285176021681815127725100753998463365585445556313084830328644796705289121969271601339103424318275674289507560797632304220996845593655882921353733985862162822758840190856685048757708275832044637559259647681574459680933488360633277344961647699517042227092139940119752793915129482415381892817011806366191266846741527898299042895395201678096139941633442870864583698517651962092441405733455426950847737243780886103075859753904078121698951493081249700907360832857768277562559437328788071568184158343980291480588644708457537860838734626889254360142959778016143315514242830639766618631588662166804488282445208371043720133669629318304335667684091103062005493951554264263068262757180598907665577454195022225214639289909006040478382943588450240887054035570053501820664219932731800455422535611660031939257174882534403352440527488518520339196413082911103611090400836529594900536700166125966626834707799544517357071960040112562912994540671229605370946511293268110157249550422215589766318332177764116622687164822288254132733655029594463504015837233930246807012482240462260199874551846229147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d093d8ce6426a1252275d757bc04632ec846f51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1880 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6xcw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akenocherry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aksukizyurdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alabamadoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beinup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bengkelcincin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biblespreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikelawyer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmstrainingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brasilnortebebidas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cespabien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cupshea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fh-expo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freecall.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glossytruth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gofobo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairixin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpfupdfqy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iphoneinpakistan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipsmarty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalibandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kissedyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kotharibd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leslieclassified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maathway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindyaglerlmhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news-canada.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paatagonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalfinanceresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalweedvaporizers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preconprofessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prsper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rightseeksolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarasotarehab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seguroseetc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shreadquarters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartcrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartsourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.speechdrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starbookshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stokkewarrenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfokanagan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suv-deals-86238.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swalgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takethemeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themayoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulkqzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mgbwg0ep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xubaomining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zyczenia-urodzinowe.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6xcw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akenocherry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksukizyurdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamadoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beinup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengkelcincin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblespreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikelawyer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmstrainingcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasilnortebebidas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cespabien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupshea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fh-expo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecall.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glossytruth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gofobo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairixin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpfupdfqy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphoneinpakistan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipsmarty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalibandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissedyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kotharibd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslieclassified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maathway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindyaglerlmhc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-canada.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paatagonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalfinanceresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalweedvaporizers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preconprofessor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prsper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightseeksolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarasotarehab.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroseetc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shreadquarters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartsourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'speechdrop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starbookshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stokkewarrenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfokanagan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suv-deals-86238.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swalgreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takethemeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themayoclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulkqzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mgbwg0ep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xubaomining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyczenia-urodzinowe.com.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ad5d5811a0000040300483046022100c5fcb2c85e8d88dbd524b365957a441409c9ccbb787d70d0e04ed1b6bc6e4350022100bc1e667ad5757646567460627e43eae8ac4e18ab8c082a7c6c636f85404fc0d5007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ad5d5811300000403004730450220057e7acf7222cbe3a8984853e568e7396506640d0f93f30e61145a05cf6e66a8022100cb8de0efc526695bb5d1a8ff80eeb907c158a51cbc0224fec5147e8bc615f65d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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