apva.us

Issued by R3

About this certificate

This digital certificate with serial number 04:1f:ae:8e:88:e2:9c:df:66:d0:7d:d3:d0:3f:34:7d:10:7c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apva.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:ae:8e:88:e2:9c:df:66:d0:7d:d3:d0:3f:34:7d:10:7c
Serial Number (int): 359229922855372386823636917284957232894076
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 98:8d:1b:a6:de:5e:67:ac:a7:af:71:8d:7d:37:c3:45:4e:14:48:17
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:f7:a0:a8:2b:fc:7e:17:73:34:5f:99:0d:17:17:36:41:ee:c7:b7
Fingerprint (sha256): 4c:cf:01:57:34:9d:0e:e6:36:26:b6:8c:d7:cf:17:ec:be:b0:c8:08:3b:93:26:42:f4:ad:5e:82:13:07:68:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apva.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apva.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acessotnp.me
*.allrad.com
*.apva.us
*.augres.com
*.avggin.com
*.blegateway.com
*.bullian.com
*.casedamare.com
*.ciudadinteligente.com
*.colligicollagenshop.com
*.comedor.org
*.dabola.info
*.deupree.com
*.dharmatalks.info
*.gayseks.com
*.gds-manuals.com
*.gratik.io
*.hemofili.com
*.igggames.pro
*.indianpornfirl.com
*.infrarotheizung.pro
*.isto.pro
*.kalyug.com
*.knowknotsspa.info
*.lightnovelreader.net
*.losporches.com
*.lowermymortgagepayments.com
*.mydivetravel.com
*.nldomain.com
*.noches.org
*.orjuela.com
*.oyugi.com
*.pskovleshoz.pro
*.putilin.com
*.radiarecovery.io
*.royalblog.info
*.sad-quotes.info
*.segunda.me
*.senchou.com
*.sharrows.com
*.shunon.com
*.sirajaqq.pro
*.sky-garden.info
*.smartkarts.io
*.syas.com
*.tbt.tv
*.teglia.com
*.tekal.com
*.tfy.in
*.vix.au
acessotnp.me
allrad.com
apva.us
augres.com
avggin.com
blegateway.com
bullian.com
casedamare.com
ciudadinteligente.com
colligicollagenshop.com
comedor.org
dabola.info
deupree.com
dharmatalks.info
gayseks.com
gds-manuals.com
gratik.io
hemofili.com
igggames.pro
indianpornfirl.com
infrarotheizung.pro
isto.pro
kalyug.com
knowknotsspa.info
lightnovelreader.net
losporches.com
lowermymortgagepayments.com
mydivetravel.com
nldomain.com
noches.org
orjuela.com
oyugi.com
pskovleshoz.pro
putilin.com
radiarecovery.io
royalblog.info
sad-quotes.info
segunda.me
senchou.com
sharrows.com
shunon.com
sirajaqq.pro
sky-garden.info
smartkarts.io
syas.com
tbt.tv
teglia.com
tekal.com
tfy.in
vix.au

Other certificates including the domain name apva.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for apva.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL7zCCCtegAwIBAgISBB+ujojinN9m0H3T0D80fRB8MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjkxMzA4MTJaFw0yNDAyMjcxMzA4MTFaMBIxEDAOBgNVBAMT
B2FwdmEudXMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC2LwBxGuRo
k0Lw+DScPpfv0OBtKBkOMu3BrUuk2A+IN2n+6THIPe/6r4wDpp3FhrrJFCTDyITP
qwbRsKXqBdcZCS/V7ruWqi0EctAKQ+LBwv3R60ju1Y+vMYsfNwfQ+wyOZvBxlsXW
5c02RASfjqYhI0OrToEqDJRdIwnwnvBhMybMQ2gqAoIDqgabQilMB7tIArcynB7J
LcBQxXvuZeiijbcs5OIL19iZqWk39ad1DovmjM7ts6O55s9pZGmtwqU6c7q7/EP1
K7ievZVYvHhtJWyCGqGxWrU31wL6Qbf5BgObxhXYXsCElH1zzNGIaXtGnKeAqVec
mkPm+oR5swArYBTlEQFx68cj9Yqe7WRSV9T1weOYbttCbgyrfqyG2exALZwZO7N1
AVGsHccxc4oGYqJ2/9LCYCDRzi1uB60vzJTIpoXLdOV723GxHoQdeJZDciUORV66
RYzJY08cQDN8fLkyVhN+iWnf3ecgRdUO0ssCKUbeK/mvsMiLE1Hcy/mPe7TSJUnw
tuG5+Av1QNRjVSAYwyXYmwH7MBP2AAY5CPgxK5K8XwR2lSaVg260DSIzTd8AvgWv
8ESEhZZocYxoXe8lAcMQgEL6lymiknSJSf67dkoK/YDjr7qb0MyH9mBm8QBeqadm
GMMpku+WpeDwrQ/WtOjpk8nCH2B0Q+Z5VwIDAQABo4IIHTCCCBkwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBSYjRum3l5nrKevcY19N8NFThRIFzAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCBiUGA1UdEQSCBhwwggYYgg4qLmFjZXNzb3RucC5tZYIMKi5h
bGxyYWQuY29tggkqLmFwdmEudXOCDCouYXVncmVzLmNvbYIMKi5hdmdnaW4uY29t
ghAqLmJsZWdhdGV3YXkuY29tgg0qLmJ1bGxpYW4uY29tghAqLmNhc2VkYW1hcmUu
Y29tghcqLmNpdWRhZGludGVsaWdlbnRlLmNvbYIZKi5jb2xsaWdpY29sbGFnZW5z
aG9wLmNvbYINKi5jb21lZG9yLm9yZ4INKi5kYWJvbGEuaW5mb4INKi5kZXVwcmVl
LmNvbYISKi5kaGFybWF0YWxrcy5pbmZvgg0qLmdheXNla3MuY29tghEqLmdkcy1t
YW51YWxzLmNvbYILKi5ncmF0aWsuaW+CDiouaGVtb2ZpbGkuY29tgg4qLmlnZ2dh
bWVzLnByb4IUKi5pbmRpYW5wb3JuZmlybC5jb22CFSouaW5mcmFyb3RoZWl6dW5n
LnByb4IKKi5pc3RvLnByb4IMKi5rYWx5dWcuY29tghMqLmtub3drbm90c3NwYS5p
bmZvghYqLmxpZ2h0bm92ZWxyZWFkZXIubmV0ghAqLmxvc3BvcmNoZXMuY29tgh0q
Lmxvd2VybXltb3J0Z2FnZXBheW1lbnRzLmNvbYISKi5teWRpdmV0cmF2ZWwuY29t
gg4qLm5sZG9tYWluLmNvbYIMKi5ub2NoZXMub3Jngg0qLm9yanVlbGEuY29tggsq
Lm95dWdpLmNvbYIRKi5wc2tvdmxlc2hvei5wcm+CDSoucHV0aWxpbi5jb22CEiou
cmFkaWFyZWNvdmVyeS5pb4IQKi5yb3lhbGJsb2cuaW5mb4IRKi5zYWQtcXVvdGVz
LmluZm+CDCouc2VndW5kYS5tZYINKi5zZW5jaG91LmNvbYIOKi5zaGFycm93cy5j
b22CDCouc2h1bm9uLmNvbYIOKi5zaXJhamFxcS5wcm+CESouc2t5LWdhcmRlbi5p
bmZvgg8qLnNtYXJ0a2FydHMuaW+CCiouc3lhcy5jb22CCCoudGJ0LnR2ggwqLnRl
Z2xpYS5jb22CCyoudGVrYWwuY29tgggqLnRmeS5pboIIKi52aXguYXWCDGFjZXNz
b3RucC5tZYIKYWxscmFkLmNvbYIHYXB2YS51c4IKYXVncmVzLmNvbYIKYXZnZ2lu
LmNvbYIOYmxlZ2F0ZXdheS5jb22CC2J1bGxpYW4uY29tgg5jYXNlZGFtYXJlLmNv
bYIVY2l1ZGFkaW50ZWxpZ2VudGUuY29tghdjb2xsaWdpY29sbGFnZW5zaG9wLmNv
bYILY29tZWRvci5vcmeCC2RhYm9sYS5pbmZvggtkZXVwcmVlLmNvbYIQZGhhcm1h
dGFsa3MuaW5mb4ILZ2F5c2Vrcy5jb22CD2dkcy1tYW51YWxzLmNvbYIJZ3JhdGlr
LmlvggxoZW1vZmlsaS5jb22CDGlnZ2dhbWVzLnByb4ISaW5kaWFucG9ybmZpcmwu
Y29tghNpbmZyYXJvdGhlaXp1bmcucHJvgghpc3RvLnByb4IKa2FseXVnLmNvbYIR
a25vd2tub3Rzc3BhLmluZm+CFGxpZ2h0bm92ZWxyZWFkZXIubmV0gg5sb3Nwb3Jj
aGVzLmNvbYIbbG93ZXJteW1vcnRnYWdlcGF5bWVudHMuY29tghBteWRpdmV0cmF2
ZWwuY29tggxubGRvbWFpbi5jb22CCm5vY2hlcy5vcmeCC29yanVlbGEuY29tgglv
eXVnaS5jb22CD3Bza292bGVzaG96LnByb4ILcHV0aWxpbi5jb22CEHJhZGlhcmVj
b3ZlcnkuaW+CDnJveWFsYmxvZy5pbmZvgg9zYWQtcXVvdGVzLmluZm+CCnNlZ3Vu
ZGEubWWCC3NlbmNob3UuY29tggxzaGFycm93cy5jb22CCnNodW5vbi5jb22CDHNp
cmFqYXFxLnByb4IPc2t5LWdhcmRlbi5pbmZvgg1zbWFydGthcnRzLmlvgghzeWFz
LmNvbYIGdGJ0LnR2ggp0ZWdsaWEuY29tggl0ZWthbC5jb22CBnRmeS5pboIGdml4
LmF1MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv
AHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMG2imJAAABAMA
RjBEAiAzTw6EN9ufBtz0kQCr8I7NwZxZdRN03rahc0go54N8MQIgHWRjUoKzMjDu
ndarm3kjEeiCstYGZ0zNdtHoILuhIS4AdgB2/4g/Crb7lVHCYcz1h7o0tKTNuync
aEIKn+ZnTFo6dAAAAYwbaKcOAAAEAwBHMEUCICccjEzSJqBvhdh/TtqcnIaWhHau
UwRoBYsp3rXXYnZKAiEAoHwj8VwBGSkg92GK7p0p4UT7cQtyBIhzhagISx6y5bow
DQYJKoZIhvcNAQELBQADggEBAEktDlNmhbKnEiMjEF4OlfXuK8IJkBEOqEy0Iyxy
B7SSd22xrC/RoFsL2Iy5aEpIqxmQuJmLElPB5rJoViNGlxNjRtIXZRxHfPz70N+5
+7ultzyn4UvqUU3SSgHCfVFquAr7iH+QaFYX5SoDSHSD9ig+PUfLfJ6DXlhnw7Pi
GEwmptV0od6WVO3rZqKbnKNUHAgikOp+MD4ZEPGN1e1/v8bj8qrox0kqAhagQIGl
rs7E2Fu6h7AkZoRk88HiJxow6yK7Bz3qajIGVGrJ8fhkqv6w7fWcravIy3c9JP9a
A7jYxhJyc1SG1HKlr68dVeoKQf2HPp7tuz4Cb4/PQELLQeY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359229922855372386823636917284957232894076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 13:08:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 13:08:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apva.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743244245036048300394614520296062038665066064387924955784970939194194994059525276996188132380284728080908107290913286955445798128449829080191074674274377147756976417311964198348721889006480957374059255621251572455795534392727342524133903763628672789672475225060976246562350826668257074491639027150110449186594389759353903082896143752341544625600917358062630174248621801540102585418394342142884154069422421694605238906103286581705647065969814717186699268626559643048486697816310759822536382562989634906938188602137315178654965529284559398842864205612420124938562496313271151596389912820993011786772473026354072922405666730295499830405106132136993600704268768842096099720695366467501014211198937178917145376804819508229733338321617190503219277533739292230133343038805452663615800829120672428115233414039015890611368764804074783176840809393855134833909393452492814225529269544515567779865834097571208434853263691792496183413611409239780153865238404046038269465171815238627213309181807103242442053466198045232392716179960372503873012961644278745104168285030059799534767129175938827394926624357213021514101344105484359578078501915315229604526555643587528925901694402974125882014702644771582630540137925915994445121106206699955881884678487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							988d1ba6de5e67aca7af718d7d37c3454e144817
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1564 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acessotnp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apva.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blegateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bullian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casedamare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciudadinteligente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colligicollagenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comedor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dabola.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deupree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dharmatalks.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gayseks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gds-manuals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gratik.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hemofili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igggames.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianpornfirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infrarotheizung.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isto.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalyug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knowknotsspa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightnovelreader.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losporches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowermymortgagepayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydivetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nldomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noches.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orjuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyugi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pskovleshoz.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putilin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiarecovery.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalblog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sad-quotes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segunda.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharrows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shunon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sirajaqq.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sky-garden.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartkarts.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teglia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tekal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tfy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vix.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acessotnp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apva.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avggin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blegateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casedamare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudadinteligente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colligicollagenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comedor.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dabola.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deupree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dharmatalks.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gayseks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gds-manuals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gratik.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemofili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igggames.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianpornfirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infrarotheizung.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isto.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalyug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowknotsspa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightnovelreader.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losporches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowermymortgagepayments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydivetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nldomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noches.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orjuela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyugi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pskovleshoz.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putilin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiarecovery.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalblog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sad-quotes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segunda.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharrows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shunon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirajaqq.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sky-garden.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartkarts.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbt.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teglia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfy.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vix.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1b68a62400000403004630440220334f0e8437db9f06dcf49100abf08ecdc19c59751374deb6a1734828e7837c3102201d64635282b33230ee9dd6ab9b792311e882b2d606674ccd76d1e820bba1212e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c1b68a70e00000403004730450220271c8c4cd226a06f85d87f4eda9c9c86968476ae530468058b29deb5d762764a022100a07c23f15c01192920f7618aee9d29e144fb710b7204887385a8084b1eb2e5ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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