cygneglace.fr

Issued by R3

About this certificate

This digital certificate with serial number 04:70:e1:27:a6:7e:9c:b4:5d:37:1e:88:e5:0f:d2:97:3a:cc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cygneglace.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:70:e1:27:a6:7e:9c:b4:5d:37:1e:88:e5:0f:d2:97:3a:cc
Serial Number (int): 386860050997726423815425534787616490601164
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:1c:54:ce:c1:35:24:8a:e4:f2:e8:a8:96:b8:02:c8:60:ed:61:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:c3:9e:6e:ba:42:0d:f9:52:b7:51:d0:ff:40:9e:01:d2:a2:56:ce
Fingerprint (sha256): 47:4b:59:c5:a0:81:4b:0b:a3:fe:81:0a:c2:b1:92:18:06:69:72:15:97:4a:85:4f:e2:52:58:82:be:06:85:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cygneglace.fr

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cygneglace.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adulttv.uk
*.afghansportsfederation.org
*.apkhack.eu
*.cafeluxhaiti.com
*.compu.es
*.csgohouse.org
*.cygneglace.fr
*.damfhlkep.net
*.deanessays.org
*.designjournal.org
*.domesticabuse.de
*.europinocchio.it
*.fps-1.com
*.fps-i.com
*.gaforit.eu
*.goodnewsus.org
*.ibmr.org
*.iddy.me
*.iglesiaecumenicasanfranciscodeasis.org
*.jglue.org
*.kangaros.de
*.keocloud.fr
*.kora-live-goal.co
*.kpopsong.me
*.kracker.au
*.linkvalentine.com
*.lojamensageiro.com
*.maheaithconnector.org
*.mediafiredownloads.net
*.medpoint24.online
*.mybet-gaming.me
*.octodons.org
*.padrinhos.com
*.pronosafemondial.fr
*.rockymountianpower.net
*.sepctrumbusiness.net
*.serums.uk
*.servicioscontables.com
*.snowshoes.com.au
*.spectrrum.net
*.stbartholomewschool.org
*.steyningmotorcompany.co.uk
*.tamilblasers.com
*.trustworthycasinoreviews.com
*.vactionofalifetime.info
*.visitesvirtuelles2020.org
*.vyprodejpovleceni.eu
*.wheekoffortune.com
*.wildschweinbilder.de
*.xn--sterrich-m4a.de
adulttv.uk
afghansportsfederation.org
apkhack.eu
cafeluxhaiti.com
compu.es
csgohouse.org
cygneglace.fr
damfhlkep.net
deanessays.org
designjournal.org
domesticabuse.de
europinocchio.it
fps-1.com
fps-i.com
gaforit.eu
goodnewsus.org
ibmr.org
iddy.me
iglesiaecumenicasanfranciscodeasis.org
jglue.org
kangaros.de
keocloud.fr
kora-live-goal.co
kpopsong.me
kracker.au
linkvalentine.com
lojamensageiro.com
maheaithconnector.org
mediafiredownloads.net
medpoint24.online
mybet-gaming.me
octodons.org
padrinhos.com
pronosafemondial.fr
rockymountianpower.net
sepctrumbusiness.net
serums.uk
servicioscontables.com
snowshoes.com.au
spectrrum.net
stbartholomewschool.org
steyningmotorcompany.co.uk
tamilblasers.com
trustworthycasinoreviews.com
vactionofalifetime.info
visitesvirtuelles2020.org
vyprodejpovleceni.eu
wheekoffortune.com
wildschweinbilder.de
xn--sterrich-m4a.de

Other certificates including the domain name cygneglace.fr

(limited to 100 certificates)
cygneglace.fr
cygneglace.fr

Certificate

The complete raw certificate details for cygneglace.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386860050997726423815425534787616490601164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 15:38:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-11 15:38:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cygneglace.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839857044110742191957260508661039344990152232012834139547999760944985517186003843009331416947005305091192134666024214844572051322496782400051342563713469811695459154735086107542036933832554246842743226241510672885621906253717304071616768240219205011481886896151436826573850574095737976839379666323492217687797426192607936208409808485857622825600955486002783579113270024444399184785060129617188660623096661495532763049101549650417255017138354304567794285784453109505804431378375967873989768951446169370090330622952603746034127292577312464325225362090528208913638924792598838402003621154726851731079971811625830190930070617746229059998660792914201479859822114663067422960439478202956808400283403939502465023916429996457986057267983669715712389279149724626770880045737303022472562888785406262568414527963624516196887179163074262729757030432137993629609454583468170360717134216641460485030629367275507513513269552618277057326204453365442222060067164494935340411050493982802256259521591170596545700108287493779276298777555488496025505517477303003571308675649110376158021720166121949346347311848410621784017469706367415541468791478486170189873774597114441686476042437345236498157653069192615596112127492155530917371518946736402967632828341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed1c54cec135248ae4f2e8a896b802c860ed6122
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1924 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adulttv.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afghansportsfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apkhack.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafeluxhaiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csgohouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cygneglace.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damfhlkep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deanessays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designjournal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domesticabuse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.europinocchio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fps-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fps-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaforit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodnewsus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibmr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iddy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iglesiaecumenicasanfranciscodeasis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jglue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kangaros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keocloud.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kora-live-goal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpopsong.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kracker.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkvalentine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojamensageiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maheaithconnector.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediafiredownloads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medpoint24.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybet-gaming.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.octodons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.padrinhos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronosafemondial.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockymountianpower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sepctrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serums.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicioscontables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stbartholomewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steyningmotorcompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamilblasers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustworthycasinoreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vactionofalifetime.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitesvirtuelles2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vyprodejpovleceni.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheekoffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wildschweinbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sterrich-m4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulttv.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afghansportsfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apkhack.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeluxhaiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgohouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cygneglace.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damfhlkep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deanessays.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designjournal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticabuse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europinocchio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fps-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fps-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaforit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodnewsus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibmr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iddy.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iglesiaecumenicasanfranciscodeasis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jglue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangaros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keocloud.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kora-live-goal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpopsong.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kracker.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkvalentine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojamensageiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maheaithconnector.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediafiredownloads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medpoint24.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybet-gaming.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octodons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padrinhos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronosafemondial.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockymountianpower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepctrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serums.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicioscontables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbartholomewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steyningmotorcompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilblasers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustworthycasinoreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vactionofalifetime.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitesvirtuelles2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyprodejpovleceni.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheekoffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildschweinbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sterrich-m4a.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ed32c78a90000040300473045022100e122a710d1f3c57f33eaafcecd1c9c7fa3683e53a99705c9a7cea8be716f0ae402207d2fe39436fffe2966bd6c1a62d67be221948a08260eb8144b8f4f916129d765007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018ed32c79710000040300473045022100b52052486e94af8abe22ef0c8c11f0455356b5d246ecb6af9d15bbfdca4154e102200a26a8d343b3432da28beeeaf176ef9c39dce48578b1d68840da5c8400394274
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b6ad453fc5f2b45391305287d45b36b9b9b499e903bf89d4b717f5a39b3d001934287848508f2526facda26a93a76bf91e98bda3fb24baad246b11f7d264b324c62a47fa8ccbec17a77b02a57bcb61a43708b34804fc32ba001fa747c77e87da1613b7bdb35b3e9941157929138868cae3d848c8737fadebc345995e1ab81694c21e7e520e0dd53fb38077de44dc57d8dbac2503725a7f376a264d2098a34e0e4dee17ffcdbb104b886fe9eb39ebb46992fb6da5dac03cc4980d67a5a96e0a861cc974d5b17c08a33685a50183eaebac58b1e6089a10c6079b082813f65acd7781ef12f4baaa0bb5cccc425eac63e66d0d265f8180688fc6c95f1a99d21f418