margrit.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:56:25:00:f4:a1:41:a5:98:bf:4b:94:59:45:0e:2b:cd:9e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=margrit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:25:00:f4:a1:41:a5:98:bf:4b:94:59:45:0e:2b:cd:9e
Serial Number (int): 377762613679769730507174500339731034525086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:b2:1c:bf:ea:a8:40:c1:c1:60:a7:9d:84:72:d3:7b:7b:11:a1:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:88:7a:f8:4f:42:79:7d:1d:a7:7e:0a:3d:ee:94:ca:70:89:57:de
Fingerprint (sha256): 40:72:c7:a0:db:09:15:e3:88:3d:67:93:20:7b:be:8a:5b:d2:41:0f:4f:56:45:53:f7:a0:3d:f8:ba:1a:63:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate margrit.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for margrit.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1stmetropolitan.com
*.abusa.org
*.applecreekapartments.com
*.baobu.com
*.barbequeclub.com
*.baxleys.com
*.bestenlargementpill.com
*.biohandy.com
*.bloei.com
*.boamoi.com
*.classafire.com
*.contrasentido.com
*.deroberts.com
*.dilberler.com
*.ecohunting.com
*.ehda.com
*.elrojo.com
*.enatec.com
*.fubin.com
*.generalmill.com
*.gokon.com
*.habbie.com
*.ijijiji.com
*.inomata.com
*.jacome.com
*.jovanova.com
*.kalabe.com
*.komornicy.com
*.koufuku.com
*.lifetimecards.com
*.lisagibson.com
*.margrit.com
*.nimas.com
*.nydailynes.com
*.oignons.com
*.paala.com
*.pavlidis.com
*.phoneaholics.com
*.receptores.com
*.sosiologia.com
*.sprekers.com
*.thealphas.com
*.theoldcity.com
*.tinnongtrongngay.com
*.tutaj.com
*.utugi.com
*.vamc.org
*.vannucchi.com
*.wwwbravo.com
*.yangchou.com
1stmetropolitan.com
abusa.org
applecreekapartments.com
baobu.com
barbequeclub.com
baxleys.com
bestenlargementpill.com
biohandy.com
bloei.com
boamoi.com
classafire.com
contrasentido.com
deroberts.com
dilberler.com
ecohunting.com
ehda.com
elrojo.com
enatec.com
fubin.com
generalmill.com
gokon.com
habbie.com
ijijiji.com
inomata.com
jacome.com
jovanova.com
kalabe.com
komornicy.com
koufuku.com
lifetimecards.com
lisagibson.com
margrit.com
nimas.com
nydailynes.com
oignons.com
paala.com
pavlidis.com
phoneaholics.com
receptores.com
sosiologia.com
sprekers.com
thealphas.com
theoldcity.com
tinnongtrongngay.com
tutaj.com
utugi.com
vamc.org
vannucchi.com
wwwbravo.com
yangchou.com

Other certificates including the domain name margrit.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for margrit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377762613679769730507174500339731034525086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 07:04:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 07:04:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'margrit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781748619777061319302257770146887250350199265806488710482538024960426364036479583193516089845864344684200229396709417218151699550704107003023697513469851441201725336459083604199805688763131583047795480351068866737236786352900246857807436364753064552500140450779301341395514291840701927704725862566804181142800266558085572671845245546610532518013262396501987681561188092324879418636829633270857001222362393499300601531475275515459622993643434846828202088365424043716218255772007518236297492521050948791671774389370883877410126086169117727612970360837309322860284467203421461488721725733022288595125384777329011351193438054089885011428718455273024439515886420842984481469677499664806481469572234102630650049018867360190637200816108132253286737531562885758190958317584900125065471298007792113053756331844521735301377628973964667941404711076987948653292487362444361541481540979791674497548395719428933445497966236140895499217421769381447536374583558579453626494069700920821881201060829128199431165141362367880870652127195053182444224612704460627729721054750679579046182388442867200868582428106590801441133885515004043505656149668530754964278873242257969935544891158934202623536581338911947556548692488194108648090307188452849402977109373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4b21cbfeaa840c1c160a79d8472d37b7b11a144
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1stmetropolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applecreekapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baobu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbequeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baxleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestenlargementpill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biohandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boamoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classafire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contrasentido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dilberler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecohunting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elrojo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enatec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fubin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generalmill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inomata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jovanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.komornicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koufuku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisagibson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nimas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nydailynes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oignons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pavlidis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoneaholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.receptores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sosiologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprekers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thealphas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoldcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinnongtrongngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utugi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vamc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vannucchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbravo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yangchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stmetropolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecreekapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baobu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbequeclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baxleys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestenlargementpill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biohandy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boamoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classafire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrasentido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deroberts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dilberler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecohunting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elrojo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enatec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fubin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalmill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habbie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inomata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komornicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koufuku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisagibson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margrit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nydailynes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oignons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavlidis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneaholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receptores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosiologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprekers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealphas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoldcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinnongtrongngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utugi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vamc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vannucchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbravo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yangchou.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016daf8c0dc80000040300483046022100fb8ac7c4b580bce78a3e66948d044a857c1cc137db83a1901925c0db970954fa022100c7892db6e659bd3b59b585f60dd6c53accd218e6670d71c0dd9c42f45bde0e5e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016daf8c0df30000040300473045022100fd2b2b68dbcac938dd89a9d769161180db9d851e951cf13c22ad62100007b4b202200abada9485d49a18cd2046a7567b730abe262ac61e8861d71c0e920c613e9ff9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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