studna.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:1d:40:33:b8:4e:40:76:03:ba:e7:08:e0:c3:11:3b:1e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=studna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:1d:40:33:b8:4e:40:76:03:ba:e7:08:e0:c3:11:3b:1e
Serial Number (int): 335897577118848061675819576835629418363678
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:19:72:a0:f7:cd:5f:92:c3:ba:25:a6:8e:35:f5:99:30:68:30:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:f7:44:77:fd:96:8a:8f:2a:de:11:e0:36:2e:c2:10:66:00:8d:56
Fingerprint (sha256): 45:11:a0:d3:29:ad:59:c4:10:7e:ff:76:d8:95:1f:b3:0a:9d:e1:7f:aa:43:4f:bf:7e:94:49:31:3a:9c:43:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate studna.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studna.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achman.com
*.advantagewipes.com
*.asbanya.com
*.bandobi.com
*.bendida.com
*.biggerloser.com
*.bistre.com
*.blisstrading.com
*.blugreen.com
*.botanicschool.com
*.californiapoolcleaners.com
*.candlewoodinn.com
*.caramenjahit.com
*.crochedamimi.com
*.discocer.com
*.ducktube.com
*.dzynerdolls.com
*.escapevape.com
*.fosselman.com
*.freekidscoloringandcrafts.com
*.gacebok.com
*.getzmann.com
*.heretube.com
*.idiota.com
*.kikapu.com
*.kjjiji.com
*.lotog.com
*.luebbers.com
*.margini.com
*.mueka.com
*.musicabodas.com
*.nabung.com
*.nashiro.com
*.nudelholz.com
*.personalsafetyequipment.com
*.plumbityourself.com
*.prevencionista.com
*.propassiv.com
*.scholasticbookwizard.com
*.slingstick.com
*.songso.com
*.spadtothebone.com
*.spaionic.com
*.steepcurve.com
*.studna.com
*.teleworkout.com
*.veprek.com
*.voluptuosas.com
*.vomcast.com
*.yinch.com
achman.com
advantagewipes.com
asbanya.com
bandobi.com
bendida.com
biggerloser.com
bistre.com
blisstrading.com
blugreen.com
botanicschool.com
californiapoolcleaners.com
candlewoodinn.com
caramenjahit.com
crochedamimi.com
discocer.com
ducktube.com
dzynerdolls.com
escapevape.com
fosselman.com
freekidscoloringandcrafts.com
gacebok.com
getzmann.com
heretube.com
idiota.com
kikapu.com
kjjiji.com
lotog.com
luebbers.com
margini.com
mueka.com
musicabodas.com
nabung.com
nashiro.com
nudelholz.com
personalsafetyequipment.com
plumbityourself.com
prevencionista.com
propassiv.com
scholasticbookwizard.com
slingstick.com
songso.com
spadtothebone.com
spaionic.com
steepcurve.com
studna.com
teleworkout.com
veprek.com
voluptuosas.com
vomcast.com
yinch.com

Other certificates including the domain name studna.com

(limited to 100 certificates)
033662.com
birkinstocks.com
studna.com
poezja.com
www.androidhub.com
iphoneline.com
birkinstocks.com

Certificate

The complete raw certificate details for studna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335897577118848061675819576835629418363678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 05:19:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 05:19:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792375500056784964614576406531207629025015936183336906558845545053503170822445929486981967014799761348649263885336265198236969573572639766082753078565077458034017204702328458566047670290561055822510508968613529868373520866840773736490489939881309546474782125078791169230776309878968518795376264897688238098860787861464258353356880158675026098053710916764473218084203390040241186872012854178762763211891905345376084317418095574771008064554520843766245308749909717491075081802057161668081864822418836163084472432166214249917329236502263223063669354769771906452428318721962830532546571418429063079755314914256657339999610481964750151731129957131277150344129104535708088165298091475326753495027724751396281852205922749902746860594169902404847530432324071336623158278990924124015445895781817592097724670046762949572960453300156293984613474004523075889316994499134887963249353671621191857664902158215392887581391152083629952923036963120997289764609473099143735935094955709196156754215606028763819861603443946759659881703190428211330220665401467233779138958291143211984198672117068808215083497315506429304828617576297841590623529964286958369245885437377603644929342112788340269044438855912216759698795260923014157683181051873767199073740063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b1972a0f7cd5f92c3ba25a68e35f5993068309b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1692 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advantagewipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asbanya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bendida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biggerloser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bistre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blisstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blugreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiapoolcleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candlewoodinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caramenjahit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crochedamimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discocer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ducktube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dzynerdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escapevape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fosselman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freekidscoloringandcrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gacebok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getzmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heretube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idiota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kikapu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kjjiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luebbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mueka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicabodas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nabung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nashiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudelholz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalsafetyequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plumbityourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prevencionista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propassiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scholasticbookwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slingstick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.songso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spadtothebone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaionic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steepcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teleworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veprek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voluptuosas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vomcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yinch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantagewipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asbanya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggerloser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bistre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blisstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blugreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiapoolcleaners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candlewoodinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caramenjahit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crochedamimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discocer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducktube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzynerdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escapevape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosselman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freekidscoloringandcrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gacebok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getzmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heretube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idiota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikapu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjjiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luebbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mueka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicabodas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudelholz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalsafetyequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumbityourself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevencionista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propassiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholasticbookwizard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slingstick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spadtothebone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaionic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steepcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veprek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voluptuosas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vomcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yinch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ee42999450000040300473045022100b6369a8823b905251ebdd3127e60b5ac5a90461961821ef794a06ffbed968b83022078debb327b7dcf7fd31a02b655843c6ce7a601909e64ead811c9f47aed658f8600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee42999720000040300473045022033af8388c7ec2e24faa1d32bd3ddea08a0d6916136bfa17ea29658dd9460a901022100b9737842d37f3d7a7b64b672bcdd58dead84f3b61df2f4bdac77deb40eedfeb7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006672dfffa1fff6d9547ac24c0cd8697d334e8e3ef7166d6d83f722cdb20b94ab4320aeb1db7d598433b2e069bf8557a2dac3fc6ff5402858af6c36d527febb3ef93897ad27d493e219def67e33c309a3555b90513cd208a2a1cd87142fad5a81a914806d19e8fe10b6661b97ff51ba70197d24e03ff12f4b47f741c044653c861fae38eb9765ac445deb796f516c23619f40f4da5664d2e9d70312638067310b927e2536c78666a49ae1e23be002048d6ab8df1a5596ee073951395bbf4812e81db8c41ca5518107260ea485daee89092d5ac15d3d926d79e964ea709d69fac836e05174c3f10b1ec8e92965dc707436838e4f2a7ec8644af5e264b25a4f6e89