cofias.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:24:73:dd:e3:8a:6c:d2:ee:bb:e5:65:f6:e2:7f:6e:0a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cofias.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:24:73:dd:e3:8a:6c:d2:ee:bb:e5:65:f6:e2:7f:6e:0a
Serial Number (int): 274996606294545422744210359023762730348042
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:60:2c:a1:aa:62:2d:9d:e0:9b:02:54:69:d5:b0:4a:3d:9e:94:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:c4:8f:df:72:bf:bd:7d:b5:6b:e1:45:8b:1e:d5:3c:f3:bc:a0:fb
Fingerprint (sha256): 43:29:be:40:3d:18:16:a7:62:24:24:81:8d:94:fb:98:c5:2b:d5:02:79:58:1f:be:91:ba:f9:dd:4e:e7:a4:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cofias.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cofias.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alaje.com
*.allientenergy.com
*.alnahda.com
*.brattas.com
*.bugfabrics.com
*.centroshistoricos.com
*.cleaningmadeeasy.com
*.cofias.com
*.constantes.com
*.designchalet.de
*.engall.com
*.gezondleven.com
*.hangluen.com
*.henrique.com
*.kashia.com
*.kayaci.com
*.kerirussell.com
*.kiffle.com
*.landbanking.com
*.laptopriser.com
*.losdemocratas.com
*.luying.com
*.marcusen.com
*.minecraftworlds.com
*.monarcha.com
*.montalvania.com
*.musicscreen.com
*.northeastuniforms.com
*.parqueteur.com
*.pelin.org
*.psxscene.com
*.recargadetoner.com
*.rentachicken.com
*.risolvo.com
*.samunda.com
*.sealtour.com
*.simonetto.com
*.spiritscent.com
*.tenakee.com
*.thebestfreestuff.com
*.thecreamcompany.com
*.tielker.com
*.tiemens.com
*.trailbounders.com
*.tsuya.com
*.urinara.com
*.watal.com
*.waysidenursery.com
*.xenon-vision.com
*.xn--e1afg9f.com
alaje.com
allientenergy.com
alnahda.com
brattas.com
bugfabrics.com
centroshistoricos.com
cleaningmadeeasy.com
cofias.com
constantes.com
designchalet.de
engall.com
gezondleven.com
hangluen.com
henrique.com
kashia.com
kayaci.com
kerirussell.com
kiffle.com
landbanking.com
laptopriser.com
losdemocratas.com
luying.com
marcusen.com
minecraftworlds.com
monarcha.com
montalvania.com
musicscreen.com
northeastuniforms.com
parqueteur.com
pelin.org
psxscene.com
recargadetoner.com
rentachicken.com
risolvo.com
samunda.com
sealtour.com
simonetto.com
spiritscent.com
tenakee.com
thebestfreestuff.com
thecreamcompany.com
tielker.com
tiemens.com
trailbounders.com
tsuya.com
urinara.com
watal.com
waysidenursery.com
xenon-vision.com
xn--e1afg9f.com

Other certificates including the domain name cofias.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cofias.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274996606294545422744210359023762730348042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 08:30:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 08:30:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cofias.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748989968506040893143887741260071792859018800136785824110575612103683092944415897588136413404339964103246693036888559417738703991006404450761921330625615383716700296103465398361929939797251562282875117972346403713718073363266056949000155591093188544394611835003125639265330354764719704811971092969769084041575809943446562185220924833843007377743442319129461155007073458056529714749561228990541213218885090212214708049818924454238480280024310136616572909928519927936504969108343356344084552950280445025484863147231515593618019291359007779166566166100545519185098119322180268494660294196357528331915171200465573710452191579158631596203894084333733339166683857103014873768172493484550303764623259439735887940933924115264232415219214371289522394753614622915764200323165540878262858201565672541417332293038342336160774596750545548830386933293078933770941161122714113762601113574090790270767318320127681622900218601663950448183269960791319438667422889868505833932009491402456495908562586394443249138415511402640695649463370881273681220061669367513986798546720142406921873165976148826073418974316247674957189296202295539961674321770504767685778840169722715934961733217509585316422569240720039619239526792416384530113398161496592733175139513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c602ca1aa622d9de09b025469d5b04a3d9e9474
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alaje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allientenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alnahda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brattas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugfabrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centroshistoricos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleaningmadeeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cofias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designchalet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gezondleven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hangluen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henrique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kashia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kayaci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kerirussell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiffle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laptopriser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losdemocratas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcusen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecraftworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monarcha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montalvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicscreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northeastuniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parqueteur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psxscene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recargadetoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentachicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risolvo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samunda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sealtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simonetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritscent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenakee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebestfreestuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecreamcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tielker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiemens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trailbounders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urinara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waysidenursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xenon-vision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--e1afg9f.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alaje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allientenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alnahda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brattas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugfabrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centroshistoricos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleaningmadeeasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constantes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designchalet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gezondleven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangluen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kashia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kayaci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerirussell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiffle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laptopriser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losdemocratas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luying.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcusen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecraftworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monarcha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montalvania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicscreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northeastuniforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parqueteur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psxscene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargadetoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentachicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risolvo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samunda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simonetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritscent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenakee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestfreestuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecreamcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tielker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiemens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trailbounders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsuya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urinara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waysidenursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenon-vision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--e1afg9f.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f4bd7f0de000004030046304402206a685fb1bcbc11748633e99da64c12f65f0ca3fe6038959a653ec2cd2bc6ef8802203ecfd862a66c40c2f3a170e55251a714e4211b0ffc7f9e37ebc6599a7351687500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f4bd7f0e100000403004730450220682f9225f213e0c8616a0c9c25ff993e915256fdb9eab019aac780ee6b0095a8022100ade9d77e46d0c641d3f9d033eabc61e9617d4ddaa0b76f834824ff0a88afc513
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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