sarungmangga.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e5:1b:b1:41:1d:11:85:a5:90:d4:fb:95:f5:90:9d:51:87 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sarungmangga.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:1b:b1:41:1d:11:85:a5:90:d4:fb:95:f5:90:9d:51:87
Serial Number (int): 426410615265025711877102398604258832109959
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8b:06:2f:77:75:fa:4c:d1:68:c2:5f:cc:ae:63:2d:e5:28:1b:03:b9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:f6:f6:04:d7:ac:3f:fe:96:76:af:64:ac:50:2a:89:e2:26:9f:1f
Fingerprint (sha256): 46:63:91:a5:29:27:2d:87:af:d1:08:a9:09:93:58:89:32:82:b8:1d:e9:e6:c3:11:aa:f5:cd:1e:56:74:3b:1e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sarungmangga.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sarungmangga.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1-ski.net
*.addressed.com.au
*.alkods.com
*.b151.cc
*.bolock.com
*.cariuang.co
*.casapaquita.com
*.cursodeinformatica.com
*.decaires.com
*.defogit.com
*.delimont.com
*.deron.com
*.draco.org
*.driby.es
*.fedt.com
*.fotografiadeboda.com
*.frizou.org
*.greenlightart.com
*.grupodias.com
*.herrenring.com
*.issendorf.com
*.jerilyn.com
*.jordanriver.com
*.kalpli.com
*.leelyn.com
*.losangelesloft.com
*.mementism.net
*.moratuwa.com
*.mukilteochocolate.com
*.myonlinecard.com
*.raczek.com
*.radhagovindanyc.com
*.ranferi.com
*.raphats.com
*.rerealestate.com
*.sarungmangga.com
*.scoregeneral.com
*.sienkiewicz.com
*.siteekle.com
*.slingboards.com
*.smallbusinessfinancialservices.com
*.sunkou.com
*.survivalshake.com
*.swisscraft.eu
*.threadingplace.com
*.tsuzuki.com
*.weelz.com
*.wettec.com
*.youttubekids.com
*.zuantan.com
1-ski.net
addressed.com.au
alkods.com
b151.cc
bolock.com
cariuang.co
casapaquita.com
cursodeinformatica.com
decaires.com
defogit.com
delimont.com
deron.com
draco.org
driby.es
fedt.com
fotografiadeboda.com
frizou.org
greenlightart.com
grupodias.com
herrenring.com
issendorf.com
jerilyn.com
jordanriver.com
kalpli.com
leelyn.com
losangelesloft.com
mementism.net
moratuwa.com
mukilteochocolate.com
myonlinecard.com
raczek.com
radhagovindanyc.com
ranferi.com
raphats.com
rerealestate.com
sarungmangga.com
scoregeneral.com
sienkiewicz.com
siteekle.com
slingboards.com
smallbusinessfinancialservices.com
sunkou.com
survivalshake.com
swisscraft.eu
threadingplace.com
tsuzuki.com
weelz.com
wettec.com
youttubekids.com
zuantan.com

Other certificates including the domain name sarungmangga.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sarungmangga.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuWzKdjcCNDzt7XN7p+ZD
OG9dzAuOogmIEGt6YTfMUOD1KVvVmVyWs3I5JsWvjwtNXdOPzFl/b1Fb05+R6mhW
9RC2oSsZ1Su7cAnyzXvnPsoCQsIHbjEn6VE9IQfOwANYcbJCLQRXB6UEs75ZIiPE
StZp5nLXghZO/er8cDJtr1HRx++vPEdi9dcEsuayhA7sYIeSuC2YIj0ie6gWg58W
xgAxu9U5XBNCaVhAfObihN/FQt9tUWxOw/Jk2dW6lq/EWr5PeaF8g4qoIJyk/qgc
crGX8mD9k8ejsmEIXcSPkNgnkXmPR+kqQeGNIuZUEN/6+bj3Tze8Empa5hz7R+dr
5Os8Av+AUnUc5qUjRXZxb6xfr0yDKPqyKFjVK44c13P7SA7oqMWpKlV2G5P8y7ud
vIsvD/ACC4lmVqTQsqbmalEQpuKtcK755JAr08A1S4+D/aciMPN3P+1OHR9V9TF5
LIJS505BBmH/XjMkMoeK78MR9yapy07GuWufqymHDdHqpKPzTsMZSRkWN9J0KoiJ
BTsWGaOVu10sSYG2FWFoarHmjEXYxxYDMM9rz95wvEQWdFKD7WMhNHwIq6/X/TsS
TEHEyKTiYXGcQwv0sw5amOuXFTkr7Y+T6b0ZgqtiQbt8YnwzDlBFb3TjWEai4DxH
7PNxdKBHDAnT8RImiWnPmBcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426410615265025711877102398604258832109959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 09:10:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:10:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sarungmangga.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756467855757240453529746583201845422509980813229057105854313318391732716452850029446894598180412426724878282170680435922419129731537663310516158613260746021762462725204734848730342809829180482045576198964579238525582847545810178562663646504303744986980507396071384169423873376410145015041936850611283570773124139414153370401595909340684724108739659583639702043271642594875204841692105655151237932420803159705695184380442062763244045648991053480884461780514821420868311409555981249544973029008490865835531802657953786309030932931945417789580930875168236433240078413518990182423137656528489427890306124133131841913548647463752131677506446958580673203276936890729534873782143483808146236100803153271188615434100874583192828049398803358699500978715126321070437841995546922198621084823731551876421315132517761344449662328086692467310487406306425003526131865906172740205733609686479916873842202345022487161087535270911428631616597948884956145558581424319557774045005296338967695920734551224855415873546501351027925479261615448996867679707805327339561021773694194614026943879050273432312001676206588170871558377566286458365844834189373515812773046180651758218069142448931477623688867204883209787608986321521776934330884082582679268237482007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b062f7775fa4cd168c25fccae632de5281b03b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1-ski.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addressed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alkods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b151.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cariuang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casapaquita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursodeinformatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defogit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotografiadeboda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frizou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenlightart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupodias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herrenring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.issendorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerilyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jordanriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalpli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leelyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losangelesloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mementism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moratuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mukilteochocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myonlinecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raczek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radhagovindanyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ranferi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raphats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rerealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarungmangga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoregeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sienkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siteekle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slingboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smallbusinessfinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunkou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.survivalshake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swisscraft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threadingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsuzuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weelz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wettec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youttubekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuantan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-ski.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addressed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b151.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariuang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casapaquita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursodeinformatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defogit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delimont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driby.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotografiadeboda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frizou.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenlightart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupodias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herrenring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issendorf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerilyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordanriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalpli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leelyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangelesloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mementism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moratuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mukilteochocolate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myonlinecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raczek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radhagovindanyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranferi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raphats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rerealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarungmangga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoregeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sienkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteekle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slingboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallbusinessfinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunkou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivalshake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisscraft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threadingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsuzuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weelz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wettec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youttubekids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuantan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a985249fd0000040300483046022100b81339cb4cd0291ffd5f0b64932c9e63e65600686756bf4dc07f29bba88babbd022100dc20441b20bcc1d83914942d6da5a92a7d99cb0b30605dfca8395a234d632a980077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a98524a060000040300483046022100b5f41a69fbced31fe596827cc907d85769d4a9ecdb41ec2567891e4ff7a0617702210095a4c947eac6598e26e897ecdc1dc3c3bbf16e6534ee1610bb7e4e7cb5b23ee1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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