ask4asset.com

Issued by R3

About this certificate

This digital certificate with serial number 03:aa:6c:2b:df:f8:07:4e:93:e5:fb:e5:65:95:fe:8d:b5:ff was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ask4asset.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:6c:2b:df:f8:07:4e:93:e5:fb:e5:65:95:fe:8d:b5:ff
Serial Number (int): 319328644606778153948080087765129068656127
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:9d:08:54:c7:2e:a8:4c:5a:5e:ae:a3:e3:14:db:4b:7d:67:35:2c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6c:5c:b0:85:28:8d:40:04:24:78:9c:04:2e:52:4c:87:f3:9c:0c:58
Fingerprint (sha256): 48:31:46:4b:73:74:46:dc:c3:2e:49:93:0e:2e:52:5a:79:ce:87:59:b1:1f:09:b6:ae:1a:33:97:70:b9:83:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ask4asset.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ask4asset.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.78secondplace.com
*.amalfipizzerie.com
*.ambest2004.com
*.ask4asset.com
*.berliaelectricals.com
*.boredteacher.com
*.botasmujer.org
*.cardscenter.com
*.consultiabpe.com.br
*.deadliest324.club
*.dianxiaomi.co
*.divyaratnaayurveda.com
*.eukifiz.com
*.faberliceu.com
*.festivy.us
*.globalservicevisa.com
*.gren.vip
*.hh-zambia.com
*.invcorp.trade
*.ipinkvisuales.com
*.jdpreferredjobs.com
*.jjstructuralrepair.com
*.kirmizihap.org
*.kite2021.com
*.lacucinabridgeofallan.co.uk
*.lakestradingco.com
*.los-navalucillos.com
*.melonsupermarket.com
*.monetizem.com
*.mydomdomno.com
*.newzsites.com
*.ohmyundies.com
*.passengers.au
*.payoffcharts.com
*.phila-glass-repair-co.com
*.pianyuan8.com
*.pinguimcursos.com.br
*.printpaper.us
*.quantoseibella.com
*.rajahentai.biz
*.riotclitshave.com
*.saltandvinegarglasgow.co.uk
*.scottylong.com
*.sdplywood.com
*.selfstorageorangetx.com
*.surumbo.com
*.tigerstripe.org
*.wlp.au
*.wocostream.co
78secondplace.com
amalfipizzerie.com
ambest2004.com
ask4asset.com
berliaelectricals.com
boredteacher.com
botasmujer.org
cardscenter.com
consultiabpe.com.br
deadliest324.club
dianxiaomi.co
divyaratnaayurveda.com
eukifiz.com
faberliceu.com
festivy.us
globalservicevisa.com
gren.vip
hh-zambia.com
invcorp.trade
ipinkvisuales.com
jdpreferredjobs.com
jjstructuralrepair.com
kirmizihap.org
kite2021.com
lacucinabridgeofallan.co.uk
lakestradingco.com
los-navalucillos.com
melonsupermarket.com
monetizem.com
mydomdomno.com
newzsites.com
ohmyundies.com
passengers.au
payoffcharts.com
phila-glass-repair-co.com
pianyuan8.com
pinguimcursos.com.br
printpaper.us
quantoseibella.com
rajahentai.biz
riotclitshave.com
saltandvinegarglasgow.co.uk
scottylong.com
sdplywood.com
selfstorageorangetx.com
surumbo.com
tigerstripe.org
wlp.au
wocostream.co

Other certificates including the domain name ask4asset.com

(limited to 100 certificates)
mobileshild.com
boredteacher.com
ask4asset.com
boredteacher.com
boredteacher.com
*.4120weddings.com
ask4asset.com
sql-programmierung.de

Certificate

The complete raw certificate details for ask4asset.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319328644606778153948080087765129068656127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 22:00:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 22:00:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ask4asset.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 927168662863259840938219518367787588337198432578696051483928364964149283048615087130786190291738421742898503899520959717685415741960254285911285774006275710959306939699863510661409464003480905539609376089544130953464499955866543162293605715343314178045978095933356851013700024652145624871131393862400365480886994715063150615597415195842542383948852243181696181973716149744693641562265801815827743838312290073914974890954067450702667681332769425296595681251445084839561627039041952967457880027076893477625687254445618641231170242917349550454600423040179402710822827018790158461161590228367718615582124385304183511017104096418253191222915871553926029059127326605020450403949533176500569329311581845734420517484481767091785099779284812223542453927543347840687597078507291189618255211405280379947448629541671381441310818906572033317658596255617671140578189498131546187901842615095448420100891807548306376354459042232485156590141189438392961072142954428570944380707393373361470623589833792713370801643915979938024828038495494632222651112353869077608772263903652733879160239453829174119634971852853053162386949485299470021231611341870020552927344045027636312034210326832530374729957365824414469390504740898289697544575493120245462388745457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							459d0854c72ea84c5a5eaea3e314db4b7d67352c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.78secondplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amalfipizzerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambest2004.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ask4asset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berliaelectricals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boredteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botasmujer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consultiabpe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadliest324.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dianxiaomi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divyaratnaayurveda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eukifiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faberliceu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.festivy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalservicevisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gren.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hh-zambia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invcorp.trade'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipinkvisuales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jdpreferredjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjstructuralrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirmizihap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kite2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacucinabridgeofallan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakestradingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.los-navalucillos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melonsupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monetizem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydomdomno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newzsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohmyundies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passengers.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payoffcharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phila-glass-repair-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pianyuan8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinguimcursos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printpaper.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quantoseibella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rajahentai.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riotclitshave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saltandvinegarglasgow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottylong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdplywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selfstorageorangetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surumbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigerstripe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wlp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wocostream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '78secondplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amalfipizzerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambest2004.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask4asset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berliaelectricals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boredteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botasmujer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardscenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultiabpe.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadliest324.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dianxiaomi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divyaratnaayurveda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eukifiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faberliceu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festivy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalservicevisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gren.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hh-zambia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invcorp.trade'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipinkvisuales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdpreferredjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjstructuralrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirmizihap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kite2021.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacucinabridgeofallan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakestradingco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'los-navalucillos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melonsupermarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monetizem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydomdomno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzsites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohmyundies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passengers.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payoffcharts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phila-glass-repair-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianyuan8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinguimcursos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printpaper.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantoseibella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rajahentai.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riotclitshave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltandvinegarglasgow.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottylong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdplywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfstorageorangetx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surumbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerstripe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlp.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wocostream.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6c0d5dfb0000040300473045022100e9525bdaf7b9826d3ef25f3747dd0b704160d7a2a23401cf5cf9ca37669d350602204a0b767429d3f76e3b6915fed2f8d2e2be8802c1c8b99ee3a814d111c42cb2110076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d6c0d5e1d000004030047304502204001ccb23f051a7209172f70570e80d6caffce3b2abc54712b6991b251f6e919022100b132db60a2e7b0653e03b176c81281f9628f21e13d5340b9fb63e88b48a09091
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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