ssoy.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bc:59:2d:71:0f:43:5e:7b:83:bd:fc:97:8c:1a:09:13:a4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssoy.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bc:59:2d:71:0f:43:5e:7b:83:bd:fc:97:8c:1a:09:13:a4
Serial Number (int): 412540765946282466665860834622909975172004
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ce:29:37:bd:46:73:b9:3b:e4:89:54:d5:24:b4:b9:8a:2a:e8:15:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:e2:b4:6d:15:09:3c:03:3b:b5:77:a4:e2:ec:27:97:1e:2a:ef:c0
Fingerprint (sha256): 49:eb:1e:4c:2c:1d:d8:02:fc:d5:fd:f2:68:d8:e3:18:e7:2b:4e:ce:b7:e0:7a:af:36:01:6a:dd:99:22:8a:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssoy.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssoy.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alpinehills.com
*.anchorloan.com
*.asoftmurmur.co
*.asusu.com
*.bergendal.com
*.best4shipping.com
*.bluebeecafe-hub.com
*.bursada.com
*.childshoes.com.au
*.darkfetishnet.co
*.duinen.com
*.ecuatorianos.com
*.elainasframingandart.com
*.escoladeteologia.com
*.filefactoryl.com
*.furnitureforthepeople.com
*.garhwal.com
*.gites-et-spa-du-bien-etre.com
*.goldcollectors.com
*.hadband.com
*.healthyfoodchoices.com
*.hrtide.com
*.katholish.de
*.mohona.com
*.mypompanobeach.org
*.nassib.com
*.nubras.com
*.panle.com
*.pfex.cc
*.pokazy.com
*.positivityskill.com
*.promedia.au
*.puntoviral.com
*.quillota.com
*.realityinstitute.net
*.ruckle.com
*.saladroll.com
*.sariwon.com
*.shelleyrealestate.com.au
*.smokytopaz.com
*.ssoy.com
*.sujay.com
*.sunny102.com
*.supprtpets.com
*.talesofterror.com
*.trejour.com
*.tremps.com
*.turecibo.co
*.wwwsecuritasdirect.es
*.wwwucespp.net
alpinehills.com
anchorloan.com
asoftmurmur.co
asusu.com
bergendal.com
best4shipping.com
bluebeecafe-hub.com
bursada.com
childshoes.com.au
darkfetishnet.co
duinen.com
ecuatorianos.com
elainasframingandart.com
escoladeteologia.com
filefactoryl.com
furnitureforthepeople.com
garhwal.com
gites-et-spa-du-bien-etre.com
goldcollectors.com
hadband.com
healthyfoodchoices.com
hrtide.com
katholish.de
mohona.com
mypompanobeach.org
nassib.com
nubras.com
panle.com
pfex.cc
pokazy.com
positivityskill.com
promedia.au
puntoviral.com
quillota.com
realityinstitute.net
ruckle.com
saladroll.com
sariwon.com
shelleyrealestate.com.au
smokytopaz.com
ssoy.com
sujay.com
sunny102.com
supprtpets.com
talesofterror.com
trejour.com
tremps.com
turecibo.co
wwwsecuritasdirect.es
wwwucespp.net

Other certificates including the domain name ssoy.com

(limited to 100 certificates)
ssoy.com
ssoy.com
ssoy.com
ssoy.com
ssoy.com
ssoy.com
ssoy.com
ssoy.com
ssoy.com
bestnine2019.com
ssoy.com
karmakitchen.me
hedgedfund.com
dibblex.com

Certificate

The complete raw certificate details for ssoy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412540765946282466665860834622909975172004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 10:19:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 10:19:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssoy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 995341892416355395374544054843748780386527965493824163015997983671385600002510660381999434968549733261919598024847949058933820663253531289261823085082057687465375682468547703614804196934436286466817355661943390849090929392910183905305877857334978205412791765523331719100866510542297252945669464951149590504322909230034157033498062567100876629918389527840765679674905485279918547661971186689392118133634854453651062760026328815281494668583341116696025665046051693852752810926802997343173089685090308956648006555072539207561415741642242198069429851590717804395079347076520125037722450035371439080555729649035289735940543690902457281786492710159815376924612528616397008045714594563946070937437016734356549340217032067150956421063136133369260102178041275022903021210447710823657030130022967601676076194562704185781252147661210507027231677767830013227531830636837188760165858714501476089960545127275933041456983408885852076193550194845575506916145290828282286142015839214742511793186042957438909528891673657630916215016864397657946985150929077486339330247840544117112950312347213329351288034703141246377818468547724042184173287700171975852873495733857421161448596824512318612466429738161195850032098161425255300550716015959225803425980591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce2937bd4673b93be48954d524b4b98a2ae81551
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1738 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpinehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anchorloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asoftmurmur.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asusu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bergendal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.best4shipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluebeecafe-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bursada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkfetishnet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecuatorianos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elainasframingandart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escoladeteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filefactoryl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furnitureforthepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garhwal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gites-et-spa-du-bien-etre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldcollectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthyfoodchoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrtide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katholish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mohona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypompanobeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nassib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nubras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pfex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokazy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.positivityskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promedia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puntoviral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quillota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realityinstitute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruckle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saladroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sariwon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shelleyrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smokytopaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sujay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunny102.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supprtpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talesofterror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trejour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tremps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turecibo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsecuritasdirect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwucespp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpinehills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchorloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asoftmurmur.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asusu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergendal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'best4shipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebeecafe-hub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bursada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkfetishnet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duinen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecuatorianos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elainasframingandart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escoladeteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filefactoryl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furnitureforthepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garhwal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gites-et-spa-du-bien-etre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldcollectors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfoodchoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrtide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katholish.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mohona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypompanobeach.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nassib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nubras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokazy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positivityskill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promedia.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntoviral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quillota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realityinstitute.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruckle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saladroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sariwon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelleyrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokytopaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sujay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunny102.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supprtpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talesofterror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trejour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tremps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turecibo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecuritasdirect.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwucespp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a98913c4c00000403004830460221008fda8a91c99fe278b25d89bb94a7e34653af60fe30bd54a54ddf3398a472ef72022100e2f92ef3ad4712162ee3d9de2693643fa0f82a6f12f16b8daf7573a0cc0fac65007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a98913c770000040300483046022100843a4a7404b876e55b2aedd380dcf88e826770f7a10703b48a5bdb431fc6f2be022100e01aa283cf3fb3a8790f1f259b6afa6d9746897a1ccdd0e8cf87afb9bd436662
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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