mx-touch.net

Issued by R3

About this certificate

This digital certificate with serial number 03:92:a5:74:0e:9c:b2:2e:6b:76:47:c0:c0:72:4b:88:90:63 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mx-touch.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:92:a5:74:0e:9c:b2:2e:6b:76:47:c0:c0:72:4b:88:90:63
Serial Number (int): 311238008587846329017718053001905125757027
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:37:dc:e4:dd:25:d7:d3:61:96:00:67:7c:aa:f5:8a:1c:dc:3c:82
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:93:3f:52:96:ae:67:6b:ea:cc:86:fb:11:e8:12:05:11:7a:e0:70
Fingerprint (sha256): 42:d4:91:7c:cc:a0:b9:8a:e4:c2:b2:26:b4:3f:a5:91:68:1c:cd:e0:ad:b2:bd:7f:ad:8c:bc:d5:8c:06:a6:1a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mx-touch.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx-touch.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3dprinteratlas.com
*.akmsolarandelectrical.com
*.akulagtm.com
*.animixplay.li
*.batterioegypt.com
*.boyyapi.net
*.businessavoid.com
*.camper-bikes.com
*.cryptobaggiver.com
*.discusionjuridica.com
*.divattrendek.hu
*.edbfeature3.com
*.educationlivebd.com
*.elayemdz.com
*.erpsforce.com
*.fridayoutfit.com
*.gagnerdesbitcoins.com
*.groupeyannick.com
*.habitationsviagere.com
*.haciendaprojects.com
*.itissam.com
*.kapteenimiettinen.com
*.kitrama.co
*.klarenfeldgermanshepherds.com
*.konoba-marija.com
*.kunyuschool.com
*.lidltest9.us
*.luchoevangeliza.com
*.lyh91.com
*.marsilyabetgiris.com
*.meritking915.com
*.milewidesports.com
*.modernbutorok.hu
*.mwqusa.com
*.mx-touch.net
*.optika-zornica.com
*.palmerindustrialsupplies.net
*.pompe.us
*.pushkat.com
*.recrutementafriquefrancophone.com
*.rihannalounge.com
*.scatkings.co
*.sonsdexaloc.com
*.tallergrinberg.com
*.teasons.com.au
*.thestachecycler.com
*.tiendaoutdoor.com
*.uliv.cc
*.vipsets.com
*.yankee1906.com
3dprinteratlas.com
akmsolarandelectrical.com
akulagtm.com
animixplay.li
batterioegypt.com
boyyapi.net
businessavoid.com
camper-bikes.com
cryptobaggiver.com
discusionjuridica.com
divattrendek.hu
edbfeature3.com
educationlivebd.com
elayemdz.com
erpsforce.com
fridayoutfit.com
gagnerdesbitcoins.com
groupeyannick.com
habitationsviagere.com
haciendaprojects.com
itissam.com
kapteenimiettinen.com
kitrama.co
klarenfeldgermanshepherds.com
konoba-marija.com
kunyuschool.com
lidltest9.us
luchoevangeliza.com
lyh91.com
marsilyabetgiris.com
meritking915.com
milewidesports.com
modernbutorok.hu
mwqusa.com
mx-touch.net
optika-zornica.com
palmerindustrialsupplies.net
pompe.us
pushkat.com
recrutementafriquefrancophone.com
rihannalounge.com
scatkings.co
sonsdexaloc.com
tallergrinberg.com
teasons.com.au
thestachecycler.com
tiendaoutdoor.com
uliv.cc
vipsets.com
yankee1906.com

Other certificates including the domain name mx-touch.net

(limited to 100 certificates)
mx-touch.net
mx-touch.net
www.mx-touch.net

Certificate

The complete raw certificate details for mx-touch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311238008587846329017718053001905125757027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 08:09:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 08:09:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mx-touch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923847098041633557435233332951947169930601191687346205510201788422150381345608638413618755538228114157612674689790916586063597076659511319914433921591600120604848054100225024413933007771582492545176296288875415518030996985508639276855681072723331411798195901813866570036804669044227895190639889357870935810559041563419700925003046519209887794681251630043979108817028012008893700327664656660672782302896272183436089993926378234315065567551128862874286692444637920809037113554848924355796874467581896994952441864147080371804998655100405314468669786753401999345271047208324482002406832171037936931552287392717336816993773502002912616896912710825757411752732612510863640210069566497688233164350777491152992461223291860757610509200622328070643161724619008772201808307787066780204416354505827366549340741806709697663175331842592375497997828702035359381888141949039299991256585188652783321874887463333215077800954607736822933691468447047692426333320076854486787249649102974244154411130200064329619400431627585454250524574055130534721218016304753802969844056982018781061956594983031253538915636616680290815792287544440754844105204684485816148965549613422392871530991167955689473347569494523354129914174870468100084476619686873647323745220157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9937dce4dd25d7d3619600677caaf58a1cdc3c82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1934 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3dprinteratlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akmsolarandelectrical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akulagtm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animixplay.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batterioegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boyyapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessavoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camper-bikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptobaggiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discusionjuridica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divattrendek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edbfeature3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educationlivebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elayemdz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erpsforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fridayoutfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gagnerdesbitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupeyannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habitationsviagere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haciendaprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itissam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kapteenimiettinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitrama.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klarenfeldgermanshepherds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konoba-marija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunyuschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lidltest9.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luchoevangeliza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyh91.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marsilyabetgiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meritking915.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milewidesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernbutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mwqusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mx-touch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optika-zornica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmerindustrialsupplies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pompe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pushkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recrutementafriquefrancophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rihannalounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scatkings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonsdexaloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tallergrinberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teasons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestachecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiendaoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uliv.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yankee1906.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dprinteratlas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akmsolarandelectrical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akulagtm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animixplay.li'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batterioegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boyyapi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessavoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camper-bikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptobaggiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discusionjuridica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divattrendek.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edbfeature3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationlivebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elayemdz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erpsforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridayoutfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gagnerdesbitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupeyannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitationsviagere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haciendaprojects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itissam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapteenimiettinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitrama.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klarenfeldgermanshepherds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konoba-marija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunyuschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lidltest9.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchoevangeliza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyh91.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsilyabetgiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritking915.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milewidesports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernbutorok.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwqusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx-touch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optika-zornica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmerindustrialsupplies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pompe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recrutementafriquefrancophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihannalounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scatkings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonsdexaloc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tallergrinberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teasons.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestachecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendaoutdoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uliv.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipsets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yankee1906.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e130643170000040300473045022056fc380aeddf25c16b089fde50fbbb6bfe3d9c3d86578c97148d4eabc64b437e022100bb496701fef40a57e4f5ddd65b19057c6114cf88656a79be28fbb8e5acb6aa1000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e1306438500000403004630440220678de2adc821448586df51d86a10ff38e178cbd92f10131f1694938e62f51c21022022699937686e8ae277374d52801859548567406990667270e781ad084b4e210d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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