liveyasuni.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a1:5d:9e:5a:7e:b9:b2:7e:e6:ae:52:ed:17:ea:f9:05:05 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=liveyasuni.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:5d:9e:5a:7e:b9:b2:7e:e6:ae:52:ed:17:ea:f9:05:05
Serial Number (int): 316246759291520561556754346454411258692869
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c2:1e:c8:0c:3d:c2:fc:c3:aa:f4:e1:e7:f8:b0:f5:64:fa:23:fe:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:87:0f:e8:61:1b:1f:5a:af:11:a2:bb:da:9e:ad:bb:50:31:e1:5a
Fingerprint (sha256): 4b:f6:c6:04:03:a5:8f:33:1f:8e:64:9a:5a:4c:af:17:c3:af:98:f5:c9:0f:39:b8:2a:38:05:b5:66:0a:a4:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate liveyasuni.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liveyasuni.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1penny.com
*.222ffe.com
*.aestheticism.com
*.akademi.com
*.aluminiumresidencyworldwide.com
*.antitee.com
*.bargainbedsnh.com
*.bblasenentzuendung.de
*.bestflashlight.com
*.bestmens-pictures.com
*.bodette.com
*.clickaaa.com
*.elvideo.com
*.engenhariaminuto.com
*.feedlines.com
*.feijixs.xyz
*.fiorela.com
*.gifsources.com
*.goodurl.com
*.hotel-peppertree.com
*.insgrum.com
*.isera.com
*.ityc.com
*.jiorockers.org
*.kaotaashopping.com
*.kasho-usa.com
*.kettlers.com
*.kimdeal.com
*.kypriotis.com
*.lataberna.com
*.legato.com.au
*.lichsu.com
*.littlegiftbasketboutique.com
*.liveyasuni.org
*.marcontell.com
*.mckeestowntradingpost.com
*.mebelindo.com
*.newcenturycustomcabinets.com
*.nickcapra.com
*.pizzeriapulcinellancona.com
*.realestateagentsmelbourne.net.au
*.ropita.com
*.scrubskeywest.com
*.silsilk.com
*.smtebooks.us
*.suann.com
*.sveto.com
*.thikana.com
*.usanetwork.net
*.viverito.com
1penny.com
222ffe.com
aestheticism.com
akademi.com
aluminiumresidencyworldwide.com
antitee.com
bargainbedsnh.com
bblasenentzuendung.de
bestflashlight.com
bestmens-pictures.com
bodette.com
clickaaa.com
elvideo.com
engenhariaminuto.com
feedlines.com
feijixs.xyz
fiorela.com
gifsources.com
goodurl.com
hotel-peppertree.com
insgrum.com
isera.com
ityc.com
jiorockers.org
kaotaashopping.com
kasho-usa.com
kettlers.com
kimdeal.com
kypriotis.com
lataberna.com
legato.com.au
lichsu.com
littlegiftbasketboutique.com
liveyasuni.org
marcontell.com
mckeestowntradingpost.com
mebelindo.com
newcenturycustomcabinets.com
nickcapra.com
pizzeriapulcinellancona.com
realestateagentsmelbourne.net.au
ropita.com
scrubskeywest.com
silsilk.com
smtebooks.us
suann.com
sveto.com
thikana.com
usanetwork.net
viverito.com

Other certificates including the domain name liveyasuni.org

(limited to 100 certificates)
sergeynefedov.com
liveyasuni.org
liveyasuni.org
liveyasuni.org
liveyasuni.org
sergeynefedov.com
liveyasuni.org
liveyasuni.org
liveyasuni.org

Certificate

The complete raw certificate details for liveyasuni.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316246759291520561556754346454411258692869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 21:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 21:33:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liveyasuni.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869711352660953710959972574085098812208123990238549384619584565745936264948897579944241677262458915282490719638264092049600539766180462377232920093739790511807793663382152980146009359189295795119062965166885847887041313838461774884566714761960734671733290081987633630361753532904070865175510572810434976360007939289678370756426412449314351679853276717085822067158929915285275217216956007741466299788997628720484039493751707885120933169309351405759443562195679796753587519495195817749739625748371320517062404445656712618119635038108650091854700907686054065851561899117908163479660624780653810373259373769920614036126687517118012896315429294219071310394889360663945120677467634445611222862761571896357197801451223555050683509635486628660105091581863548315487711262480481682302242406083134464276364429518456511171980885363130203878813547783403433606813091185204933215014713507213999986272244111204329368965041254588796069593981981950442845305710754198742693852263830007572881139837879355246891665800586035285944625926305294792810250688593522440833504860562147389110513843743455772370088131458147950677558393200884701942803121880142162909288181287615107373748026099653175051846847393907789257702037912610348966285497172894259283270598231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c21ec80c3dc2fcc3aaf4e1e7f8b0f564fa23fef3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1792 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1penny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.222ffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aestheticism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aluminiumresidencyworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antitee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bargainbedsnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bblasenentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestflashlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestmens-pictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clickaaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engenhariaminuto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feedlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feijixs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiorela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gifsources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotel-peppertree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insgrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ityc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiorockers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaotaashopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kasho-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kettlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kypriotis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lataberna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legato.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lichsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littlegiftbasketboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveyasuni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcontell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mckeestowntradingpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mebelindo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newcenturycustomcabinets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickcapra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizzeriapulcinellancona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestateagentsmelbourne.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ropita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrubskeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silsilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smtebooks.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sveto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thikana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usanetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viverito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1penny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '222ffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aestheticism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aluminiumresidencyworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antitee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bargainbedsnh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bblasenentzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestflashlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestmens-pictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickaaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engenhariaminuto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feijixs.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiorela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gifsources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-peppertree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insgrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ityc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiorockers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaotaashopping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kasho-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kettlers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimdeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kypriotis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lataberna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legato.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlegiftbasketboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveyasuni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcontell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckeestowntradingpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mebelindo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcenturycustomcabinets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickcapra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzeriapulcinellancona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateagentsmelbourne.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ropita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrubskeywest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silsilk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtebooks.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sveto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thikana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usanetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viverito.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0f4213dc00000403004730450220680c4221ceb0c89657df7b9d174e9fff69e4903001470a01212c4940fa875aac022100feb0e49c33ac5bcccdee39dbfcdf9f91a0babc8c4e8ea581bfb2d9b4164701f400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d0f4214db0000040300483046022100a61a785b9cf9fccfb5f8bed1e45af3c61c3c4b6dae24da6ceffd259f04524358022100d14ea703df248431e09fd253bae33c07c64035285f131d0892ce83f767190390
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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