afascreenings.org

Issued by R3

About this certificate

This digital certificate with serial number 04:a9:2e:d0:4b:e7:9d:c1:3d:ff:86:79:3f:17:79:59:d9:5a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=afascreenings.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a9:2e:d0:4b:e7:9d:c1:3d:ff:86:79:3f:17:79:59:d9:5a
Serial Number (int): 406019089761763516862779661752769468553562
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:50:0c:78:a7:09:71:6b:13:6c:49:6c:90:6b:98:1d:c2:44:c0:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:67:d3:36:1a:4c:f4:51:2f:81:80:b2:b5:53:30:19:aa:16:e8:57
Fingerprint (sha256): 3f:26:32:c7:34:f7:6a:59:cc:11:2d:ac:29:b1:9d:a9:88:8a:ea:be:fe:f1:92:53:5b:34:0f:03:06:76:4d:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate afascreenings.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afascreenings.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acompanar.com
*.afascreenings.org
*.africa-grid.org
*.amsico.com
*.antutu.co
*.bangi.com
*.buysub.co
*.cartolano.com
*.clinco.com
*.comoganhardinheiro.com
*.coolerbooks.com
*.critterscornerpetshop.com
*.dentinger.com
*.dimensiones.com
*.domainsalarm.com
*.erotique.com.au
*.espiao.com
*.etymon.co
*.godpia.co
*.gunbrooker.com
*.halfbras.com
*.idnes.co
*.imovs.cc
*.inkpens.com.au
*.ionianstar.com
*.jargar.com
*.joiedevie.com
*.keskus.com
*.kopetskyscarwash.net
*.lisimg.co
*.lootus.com
*.mamine.com
*.metager.co
*.miamitodo.com
*.motionapex.com
*.naturalnchicmakeup.com
*.nickelodon.com
*.nimbys.com
*.nojoda.com
*.octavianus.com
*.okporn.co
*.pictonline.org
*.rkf002.cc
*.shaindel.com
*.sitede.com
*.skarbonka.com
*.soymexico.com
*.strikebitclub.com
*.thonky.co
*.vehiculeselectriques.com
acompanar.com
afascreenings.org
africa-grid.org
amsico.com
antutu.co
bangi.com
buysub.co
cartolano.com
clinco.com
comoganhardinheiro.com
coolerbooks.com
critterscornerpetshop.com
dentinger.com
dimensiones.com
domainsalarm.com
erotique.com.au
espiao.com
etymon.co
godpia.co
gunbrooker.com
halfbras.com
idnes.co
imovs.cc
inkpens.com.au
ionianstar.com
jargar.com
joiedevie.com
keskus.com
kopetskyscarwash.net
lisimg.co
lootus.com
mamine.com
metager.co
miamitodo.com
motionapex.com
naturalnchicmakeup.com
nickelodon.com
nimbys.com
nojoda.com
octavianus.com
okporn.co
pictonline.org
rkf002.cc
shaindel.com
sitede.com
skarbonka.com
soymexico.com
strikebitclub.com
thonky.co
vehiculeselectriques.com

Other certificates including the domain name afascreenings.org

(limited to 100 certificates)
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org
afascreenings.org

Certificate

The complete raw certificate details for afascreenings.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406019089761763516862779661752769468553562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 20:48:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 20:48:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afascreenings.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773480926826181413120613246172099280440476922092710245735977895155348671588079903722732367874426556860565675503066301790453829463896714702488239477528243775223471200742179079805496879798272108034884810902507873183483020769121671626024973226153709185960871965307683109781479436519286987053285951617709644035497408350835193219948569810479550727691917665906129445425015891798578242425396541438846435940375650077755137012438438049055924003025795186284148935223026829079240557801994548967974799554076328412364389277721307780464904711025982630256162765025178583914523773025412974888630924040412784583804980417137439301201604373596095590343666699848150061813572780769283278027104107979345953613181719975895505902024939979251470521048162162640639573152798245408907624447824120391622364704936170701997474956363935963359687606293164168472932277698983523070472395041224809696904093944540008704796960628928705237421167503130799048956801922172481966996208682015338634684043397940632374767042684943625973757587855898370967942032494030323993271900769605866476796133902582923784776716101612099355948735716108878639994057310539621192954923713841818523887258946140962852159783602707141612225028580869452345904459565282827303544665768143480892903125367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89500c78a709716b136c496c906b981dc244c0f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1590 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acompanar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africa-grid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amsico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antutu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buysub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartolano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comoganhardinheiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coolerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.critterscornerpetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dimensiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainsalarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etymon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godpia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gunbrooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halfbras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idnes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imovs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkpens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ionianstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jargar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joiedevie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kopetskyscarwash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisimg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lootus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metager.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miamitodo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalnchicmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickelodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nimbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nojoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.octavianus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okporn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rkf002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaindel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skarbonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soymexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strikebitclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thonky.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vehiculeselectriques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acompanar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afascreenings.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa-grid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antutu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartolano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comoganhardinheiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'critterscornerpetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimensiones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainsalarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etymon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godpia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunbrooker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halfbras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idnes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imovs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkpens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionianstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jargar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joiedevie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keskus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kopetskyscarwash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisimg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lootus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metager.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamitodo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motionapex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalnchicmakeup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickelodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimbys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nojoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octavianus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okporn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pictonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkf002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaindel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skarbonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soymexico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strikebitclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thonky.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiculeselectriques.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0f1908d60000040300463044022074a32944bf42094c2ff7b1f6a0a0c4087dafec0e9ba4cbb2cc8796da2963f677022061a86fa3ddb4b4842fdbdffa7f460a8629f846d45164d1e9315317f4c204b4cc00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0f190acb000004030047304502210080be08a5288853fe2cde05be30631aabe82c176410a5d32a1b0d1cc172f89b240220055c48d0738139883731671d56488c46352812f3bb33eb8a14fe7e201fb714e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000c9eedffb3644b0bae77e5461a29c176c5393392cdff7b53aac88d7edb57004dc86642bfc24a8343605cf6053daf4d3ee29bb5bcc710942a21e53958778735c48091bb87a0e8b95e578caf2c231d893838fcdfb6c96d0ce40a4f442f784f69e08cb0533b9fe58130cb73c90d7c1502693757c79de390f7b309c8e19851ad966d86ed76b0a18cb890403ac86ee920827066b219f1260bdb15b6ce45fc5e676972b9b12de63f6faaa938a3d715ee11961dd83075205957cb7dd0b1431e059f50f634be58e66fb1981ba58533c0abb3dccfbeaa34dd6e644560b0a38c90f7239ee10e732475bc47705e2f4d73dfc12565a03e93ccb76ea6bc5ae7bfe10c1d42f440