allocation-famille.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a6:8c:c5:cc:77:68:9c:3c:9b:fa:5e:13:52:00:76:db:34 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=allocation-famille.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a6:8c:c5:cc:77:68:9c:3c:9b:fa:5e:13:52:00:76:db:34
Serial Number (int): 405123135584879876908471913950193802206004
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d5:ed:75:3b:bb:c4:63:c4:ea:95:0b:9d:4c:34:f3:d9:0d:42:95:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1a:82:81:4e:24:d5:90:33:8d:ac:1b:1e:97:45:78:37:34:51:8e:32
Fingerprint (sha256): 40:8a:da:03:2e:1f:ea:4b:e2:0b:42:de:53:b0:76:fd:6f:9d:fc:0d:33:25:84:da:67:2f:69:e6:1c:45:19:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate allocation-famille.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allocation-famille.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1101.au
*.1dan124.com
*.allocation-famille.com
*.apolouy.me
*.art501.com
*.betabar.me
*.bhavikatekwani.me
*.blessedhandhomecare.com
*.citzen.online
*.clienterecado.me
*.computador.me
*.dichvuvitinh.com
*.dikmen.com
*.duvida.me
*.felicidades.me
*.fifa22generator.com
*.financiamento1-cancela.me
*.furnituresale.com.au
*.girlswithpottymouths.com
*.heyland.com
*.horsemen.me
*.initials.me
*.iusdt.me
*.jav357.me
*.jiwajudi.asia
*.junsong.com
*.kantoria.com
*.labnb.me
*.manueljabois.com
*.msupat.com
*.nicolee.me
*.nluuu.site
*.ocellier.me
*.opyicsplanet.com
*.p285221.online
*.paguei.me
*.plenario.com
*.profissional.me
*.resellernic.com
*.spreadable.au
*.stlawrencechurchmacau.com
*.thebetterconference.com
*.thetoltecballroom.com
*.thetruecard.com
*.turma.me
*.ulsch.com
*.vasily.com
*.webhd.me
*.xgvc.com
1101.au
1dan124.com
allocation-famille.com
apolouy.me
art501.com
betabar.me
bhavikatekwani.me
blessedhandhomecare.com
citzen.online
clienterecado.me
computador.me
dichvuvitinh.com
dikmen.com
duvida.me
felicidades.me
fifa22generator.com
financiamento1-cancela.me
furnituresale.com.au
girlswithpottymouths.com
heyland.com
horsemen.me
initials.me
iusdt.me
jav357.me
jiwajudi.asia
junsong.com
kantoria.com
labnb.me
manueljabois.com
msupat.com
nicolee.me
nluuu.site
ocellier.me
opyicsplanet.com
p285221.online
paguei.me
plenario.com
profissional.me
resellernic.com
spreadable.au
stlawrencechurchmacau.com
thebetterconference.com
thetoltecballroom.com
thetruecard.com
turma.me
ulsch.com
vasily.com
webhd.me
xgvc.com

Other certificates including the domain name allocation-famille.com

(limited to 100 certificates)
art501.com
allocation-famille.com
filmkeyif.org
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com
allocation-famille.com

Certificate

The complete raw certificate details for allocation-famille.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405123135584879876908471913950193802206004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 16:53:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 16:53:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allocation-famille.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704493980970514781161394702735770659727915164586523062906624260525147370542705215312818039620180077118433713148645453625642724938427338380433530877042495318704135975211631788331970596256077688318068238290179028791900004096989006077958499181318810352505658264680599169014129267412403865163279166512400805699423637374620251845597140081338622942948409321194963401976162286400317119675224988453787922351173806604260841621200426529628574005412309543819643317500978955428874225836363429126372747264223086416458874726152384785490876475548730819824570668961942530835726250247164815510131699173830309663819817367849626497829068919031966708379020222758596622001753512152641863500845614428161572313946262772361587056850171563621527857035808789433307071349228704185409960776000859277397860662758516445765251893922227397041136918217937226734432389347004419987869173130579103177396821626546649136206448723614491752055039329295967170509451426674301801806338981513463023939696907126955470952338590337823168022076070777004005010065626781258814574349668317192560062727379235871980693262752630042025572149085874066502185705064017294385126865473712193075035324381636402469057786505909943632612477086366950845294644331255558579773331321663038320890852587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5ed753bbbc463c4ea950b9d4c34f3d90d4295f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1620 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1101.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1dan124.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allocation-famille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apolouy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art501.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betabar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhavikatekwani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blessedhandhomecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citzen.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clienterecado.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computador.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dichvuvitinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dikmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duvida.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.felicidades.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fifa22generator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financiamento1-cancela.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furnituresale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlswithpottymouths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heyland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horsemen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.initials.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iusdt.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jav357.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiwajudi.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junsong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kantoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labnb.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manueljabois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msupat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicolee.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nluuu.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocellier.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opyicsplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p285221.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paguei.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plenario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profissional.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resellernic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spreadable.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stlawrencechurchmacau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebetterconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetoltecballroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetruecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turma.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vasily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webhd.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xgvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1101.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1dan124.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allocation-famille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apolouy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art501.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betabar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhavikatekwani.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedhandhomecare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citzen.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clienterecado.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computador.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dichvuvitinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dikmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvida.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felicidades.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa22generator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financiamento1-cancela.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furnituresale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlswithpottymouths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsemen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'initials.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iusdt.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jav357.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiwajudi.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junsong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kantoria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labnb.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manueljabois.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msupat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicolee.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nluuu.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocellier.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opyicsplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p285221.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paguei.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plenario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profissional.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resellernic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreadable.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlawrencechurchmacau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebetterconference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetoltecballroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetruecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turma.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulsch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhd.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xgvc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d46e790b7000004030047304502210087257d448e06f4764f0ddad9a4e3570daf412c01bc6015cf6bcf61fd9ab749c302206baea9c78e5de3ef839332cf49b7468acd5f43003929be07c34610fbc41c5b1200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d46e790bb0000040300483046022100e9fa9b667784a801557c6a91120ade6797da7806b309b0adac1542d0efa79317022100bafac48cbca53f99140cad94ea93b2209483942086eb370520e2bb218ae419a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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