compusoftcanada.com

Issued by R3

About this certificate

This digital certificate with serial number 03:39:a8:dc:27:43:c2:4c:bb:e0:cc:11:b6:b4:02:74:65:3e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=compusoftcanada.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:a8:dc:27:43:c2:4c:bb:e0:cc:11:b6:b4:02:74:65:3e
Serial Number (int): 280957406114757370174377963938665618236734
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:e3:d6:be:8d:fa:3b:07:9e:28:ea:cf:52:8b:34:a8:f9:93:d1:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5d:f4:6e:27:4b:e9:39:0f:58:2a:28:dd:13:bd:01:b6:df:8f:89:55
Fingerprint (sha256): 40:60:20:7a:67:6c:2f:cb:8c:26:20:95:35:ab:8f:c2:25:7c:36:45:24:22:79:76:ec:03:9d:4b:93:c2:39:da

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate compusoftcanada.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compusoftcanada.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aama.tv
*.akshaysportsgallary.com
*.anoodlemagazine.com
*.arena-plus.tv
*.assortedhq.com.au
*.bbiwork.com
*.bermudadunescc.org
*.bophoo.com
*.bx-games.com
*.camerapribe.com
*.camlicamalatyamutfagi.com
*.chigacofootage.net
*.ciontoss.com
*.compusoftcanada.com
*.excitedtocomehome.com
*.full123muvie.com
*.funomation.com
*.gzvnbc.com
*.helpcenter.com.au
*.infernolocal385.com
*.janen.com
*.kiabehavioralhealth.com
*.kingstore.online
*.klokan.com
*.makemegenuis.com
*.myfamilymd.com
*.nanmian.online
*.noalaleysinde.com
*.nrphotography.com.au
*.oniea.com
*.papos.com
*.pinkzebrahome.co
*.placher.com
*.poderoso.tv
*.porngameahub.com
*.primaryexpose-tolooktoday.info
*.rvite.com
*.santateresadeavila.com
*.saufi.com
*.savelivesinmay.com
*.shetek.com
*.socialops.com
*.t13q.xyz
*.ttrue.com
*.tyki.com.au
*.u2walletu2.com
*.urbanouutfitters.com
*.webmailgruppoceis.org
*.wwwfoylehospice.com
*.yazidi.com
aama.tv
akshaysportsgallary.com
anoodlemagazine.com
arena-plus.tv
assortedhq.com.au
bbiwork.com
bermudadunescc.org
bophoo.com
bx-games.com
camerapribe.com
camlicamalatyamutfagi.com
chigacofootage.net
ciontoss.com
compusoftcanada.com
excitedtocomehome.com
full123muvie.com
funomation.com
gzvnbc.com
helpcenter.com.au
infernolocal385.com
janen.com
kiabehavioralhealth.com
kingstore.online
klokan.com
makemegenuis.com
myfamilymd.com
nanmian.online
noalaleysinde.com
nrphotography.com.au
oniea.com
papos.com
pinkzebrahome.co
placher.com
poderoso.tv
porngameahub.com
primaryexpose-tolooktoday.info
rvite.com
santateresadeavila.com
saufi.com
savelivesinmay.com
shetek.com
socialops.com
t13q.xyz
ttrue.com
tyki.com.au
u2walletu2.com
urbanouutfitters.com
webmailgruppoceis.org
wwwfoylehospice.com
yazidi.com

Other certificates including the domain name compusoftcanada.com

(limited to 100 certificates)
www.compusoftcanada.com
compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
compusoftcanada.com
www.compusoftcanada.com
www.compusoftcanada.com
compusoftcanada.com
compusoftcanada.com
compusoftcanada.com
www.compusoftcanada.com

Certificate

The complete raw certificate details for compusoftcanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4QHiulKOwTmkt4UJZnls
uNGPYLawQ51m7rfd3P3Idu7nW0iWUvi+AREFdrXTw9zdpmMUvc1/Ki84pwekMj44
lJWUnYOeybBAfEyXXMKE3WLZN61g2+d7fr+GNuf++sClniWMig98P0UVfwQQ03E/
twWhachA0zq5MG0LT/aU+BQmLumX8ou5DDY9kafNvZ3IsUFqS894NV8IAT6tID5g
cJTuSKnzaeGL7GQfzls/+cxBKqs1d2IsqohN5QllXy1Fyv2d2SYuon/dr/WCqNBb
Bz65WCWJ7nRfcpiEzuYRLTstptPx6BLt7bOhDYuFe9s5OX/R8TvHfkowtJOuHZGj
5KkKwkQup8NqQcr11xEDTlWOJ3usJpjD3gu1jyClZd3SowZ8IHWAjvo3us0ajTGj
OE98PHBqieqPU8Q6HOmmY5Q+NVDC3nEAg3uCoSmEfmqx1HZyUD63G/yMc1vqH5Pl
eANVfHuPmPD8fDoghzTtnomiiXbe4N/TDhq6FZMIHNtlit+RGRZDzYfnDjF1raEH
LZwbtxVjp2q/V1TLQWaYEzyx81fCb6xoTwiSxHfoQTRlwrEwj3RBy4/JZ92PNJp6
y+DyjnLMcOii6ONjgKgLXXMnrV8bLgryG/Uv9wrHkiP19Fw4u/hGPQEcgDUAdhSh
3p3pEADwrcS1HdlVv8amiMUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280957406114757370174377963938665618236734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 03:27:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 03:27:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compusoftcanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917949965318206961811796678933988024304576239260616636635868963510012425421476166115235276567433669112917466907224132640117037741145255319179801008553516699201937896562908574723712254305894698572545204650565409818667110084303904621919747415938811248762839703384997867106342148964702393195431437005307447663184271531259686251834728084603282744208621610461588869650652331713363617514907212838688835141272596333499732799547415828872236497497371287392029873003318862792849613594831355209132363993935023039089033381991005091215577049258630275933200393247009829019852315446984914157552003051222420108123503123260790396722169474982296159657485538045877140042654979635592639353937193436836317776649560534071978503540635164272030053233797033784991383836605469309655281108620505355432139195962387845622783121476606606209613879932838661008905398970579932280033854232241669533511355209496367513824021616738473944964235336803067394980842445240914115732639130370725414029330698280021379364356530768950921164537678186053876881315133759663776730833373364388830673693227562626846942328969793991492091835839394883745732822385174082770034683294455380799365536796238720856875774409839096003915789321385100880347657995072852563007779348651297762131216581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02e3d6be8dfa3b079e28eacf528b34a8f993d1d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1804 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aama.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akshaysportsgallary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anoodlemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arena-plus.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assortedhq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbiwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bermudadunescc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bophoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bx-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camerapribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camlicamalatyamutfagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chigacofootage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciontoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compusoftcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excitedtocomehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.full123muvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gzvnbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpcenter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infernolocal385.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiabehavioralhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingstore.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klokan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfamilymd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanmian.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noalaleysinde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrphotography.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oniea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkzebrahome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.placher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poderoso.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porngameahub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primaryexpose-tolooktoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santateresadeavila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saufi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savelivesinmay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t13q.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyki.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u2walletu2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanouutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webmailgruppoceis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwfoylehospice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yazidi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aama.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akshaysportsgallary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anoodlemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arena-plus.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assortedhq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbiwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bermudadunescc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bophoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bx-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camerapribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camlicamalatyamutfagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chigacofootage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciontoss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compusoftcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excitedtocomehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'full123muvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funomation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gzvnbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpcenter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infernolocal385.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiabehavioralhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingstore.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klokan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemegenuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfamilymd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanmian.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noalaleysinde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrphotography.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oniea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinkzebrahome.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poderoso.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porngameahub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primaryexpose-tolooktoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santateresadeavila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saufi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savelivesinmay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't13q.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyki.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u2walletu2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanouutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailgruppoceis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwfoylehospice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yazidi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dde8487e60000040300473045022100bdec24f3829aadd0790d74d5ae1028eb1236e6d1ce6b17d2abbd4d50cb63605902200d0c0490f442e45b433fe91f75f4450c41fc55487db85bedc521043dc8d50783007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dde8487ea0000040300473045022065b6f35d01bb53acfe5c0ee9305b3782014e07d1f73cf3cd57e71a4d031f7edc0221009aae779b08a9d03b8b8b45c24ffae35b7bfa6625de74bb8aa59feddb70b5abf6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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