downlivre.org

Issued by R3

About this certificate

This digital certificate with serial number 03:73:87:23:a6:54:78:92:ca:ff:73:8d:ae:39:da:46:34:d7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=downlivre.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:73:87:23:a6:54:78:92:ca:ff:73:8d:ae:39:da:46:34:d7
Serial Number (int): 300648960874582151120322786541282431218903
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3c:f5:5d:fd:8e:79:34:bc:9d:5b:6f:33:06:de:c0:e3:b6:d0:73:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:99:00:fc:8c:db:16:68:8a:4e:b3:89:2d:31:b9:a1:ab:fd:a8:5a
Fingerprint (sha256): 44:6d:cf:01:b0:50:07:21:25:21:87:46:4b:f0:41:12:06:06:2c:f1:b2:64:64:b8:53:9d:56:2f:c8:34:f8:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate downlivre.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for downlivre.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123movies.ng
*.abekoplenclothing.com
*.aeromancyshop.com
*.alergiasynmunomed.com
*.allegoryhoues.co
*.allfreefronts.co
*.amazonbuy.co
*.amazonturbo.co
*.armaac.com
*.blog-mikesipe.com
*.blood-glucose-monitor-45479.com
*.brightdigitalprinters.com
*.cxxx.cc
*.descontaopopular.com
*.downlivre.org
*.electrolysisbyrosemarie.com
*.elisweetie.com
*.faithfulfriend.co
*.farmtofarmcolorado.com
*.freeget.us
*.galaxiabeautey.co
*.goldfishka139.com
*.goodfansgear.co
*.joesmasonry.com
*.katiedidmyhair.com
*.kdramacools.co
*.kekosartyard.com
*.kidspsychiatrist.com
*.kino-bar.com
*.ksgearmgm.com
*.lifeattinder.co
*.lobcity.co
*.naisullivangroup.co
*.navybagels.com
*.nikkilynnsphotography.co
*.nikkisims.co
*.nortonnational.co
*.onestarinvestigations.co
*.onsns.biz
*.rajaniskitchen.co
*.redditplug.co
*.skigastein.co
*.skullcrew.co
*.stydy.net
*.thintechcoatings.co
*.ugandajobsearch.com
*.ultrabet775.com
*.union9tv.net
*.viccellio.com
*.westactingstudio.co
123movies.ng
abekoplenclothing.com
aeromancyshop.com
alergiasynmunomed.com
allegoryhoues.co
allfreefronts.co
amazonbuy.co
amazonturbo.co
armaac.com
blog-mikesipe.com
blood-glucose-monitor-45479.com
brightdigitalprinters.com
cxxx.cc
descontaopopular.com
downlivre.org
electrolysisbyrosemarie.com
elisweetie.com
faithfulfriend.co
farmtofarmcolorado.com
freeget.us
galaxiabeautey.co
goldfishka139.com
goodfansgear.co
joesmasonry.com
katiedidmyhair.com
kdramacools.co
kekosartyard.com
kidspsychiatrist.com
kino-bar.com
ksgearmgm.com
lifeattinder.co
lobcity.co
naisullivangroup.co
navybagels.com
nikkilynnsphotography.co
nikkisims.co
nortonnational.co
onestarinvestigations.co
onsns.biz
rajaniskitchen.co
redditplug.co
skigastein.co
skullcrew.co
stydy.net
thintechcoatings.co
ugandajobsearch.com
ultrabet775.com
union9tv.net
viccellio.com
westactingstudio.co

Other certificates including the domain name downlivre.org

(limited to 100 certificates)
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
handball-5962.net
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
downlivre.org
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
goalarena.org
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
bnivere.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com
sni34011.cloudflaressl.com

Certificate

The complete raw certificate details for downlivre.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300648960874582151120322786541282431218903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 07:42:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-07 07:42:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'downlivre.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714405744049031737319032677489446565981673697196198390098981524713372771364098188630855804408747238786879367309685704774190222732809005917815043457175910849401881480554175750608157813473049471260824492481435813574501774543935178408694607841241874094550934605754334524257583875472445569677464582358182534628619830504096075491966230408613817499407221536540611289014212110426354297005122003349098030148931444138228556958542049485276779597334174166162727518458080002295884864121411165734015767699111743555670974964783416521867589436263084280041017475758361611197103404019184597779157399458560191815385169826992816251494045517892925239724311847951542455237091558068887158592154933919464105484256587395226237898809190932470241494500328427147436660423960116490483444340204460001995330504859024745005480936679048359438346325576715606038311587675031798928350816193471782329189801163169785065426743292065083801253517749885630854062155919770200020363854180286507745277872683489547031018082539689924942135317951419533357822859138053953910908453597102035261853914271239009612954385213386160792342601522574277650175741032827465443697696636507954159876901982199659330327515465711274597686789221461036352888858703417659023528270206787118003860300283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3cf55dfd8e7934bc9d5b6f3306dec0e3b6d07302
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123movies.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abekoplenclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aeromancyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alergiasynmunomed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allegoryhoues.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allfreefronts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonbuy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonturbo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog-mikesipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blood-glucose-monitor-45479.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brightdigitalprinters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cxxx.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.descontaopopular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downlivre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electrolysisbyrosemarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elisweetie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faithfulfriend.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmtofarmcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeget.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galaxiabeautey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldfishka139.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodfansgear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joesmasonry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katiedidmyhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kdramacools.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kekosartyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidspsychiatrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kino-bar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ksgearmgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeattinder.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lobcity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naisullivangroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.navybagels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikkilynnsphotography.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikkisims.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nortonnational.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onestarinvestigations.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onsns.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rajaniskitchen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redditplug.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skigastein.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skullcrew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stydy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thintechcoatings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ugandajobsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultrabet775.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.union9tv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viccellio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westactingstudio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123movies.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abekoplenclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeromancyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alergiasynmunomed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegoryhoues.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allfreefronts.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonbuy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonturbo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armaac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog-mikesipe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blood-glucose-monitor-45479.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brightdigitalprinters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxxx.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descontaopopular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downlivre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrolysisbyrosemarie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elisweetie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithfulfriend.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmtofarmcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeget.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galaxiabeautey.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldfishka139.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfansgear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joesmasonry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katiedidmyhair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdramacools.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kekosartyard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidspsychiatrist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kino-bar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksgearmgm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeattinder.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobcity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naisullivangroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navybagels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikkilynnsphotography.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikkisims.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nortonnational.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onestarinvestigations.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onsns.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajaniskitchen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redditplug.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skigastein.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skullcrew.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stydy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thintechcoatings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugandajobsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrabet775.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'union9tv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viccellio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westactingstudio.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f5c84a6940000040300473045022100c0ac5a25c0a4206f6bc73d2bc0b85dfee5310c36ad2653148bde43425e8ad48e02200d8d0ec1c8053edddabdc76a4ee53c3709dcc80e84c4b25bc1e094ed591553c600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f5c84a6eb0000040300483046022100f65a905dd5fe6e4fb44a72ebe7a13eabeb850813980001819a7d06751d00ac5a022100b486ed1d099264b1a200629f723b3a217e23f9d0180de0aaeac9e440e5166123
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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