jkestates.com

Issued by R3

About this certificate

This digital certificate with serial number 04:74:2f:46:a8:2a:bd:49:54:70:58:95:8f:4f:33:ff:06:dd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jkestates.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:2f:46:a8:2a:bd:49:54:70:58:95:8f:4f:33:ff:06:dd
Serial Number (int): 387984738877282814388479531089700654614237
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0e:4c:fa:27:bd:88:e3:56:b7:03:5c:68:53:8a:07:54:4c:90:3d:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:a6:b9:c0:5d:4f:f9:7d:53:cf:b9:f4:84:ba:e8:1d:ee:9b:38:3d
Fingerprint (sha256): 4e:f5:6f:fd:24:a2:fb:91:ad:b4:57:0b:cd:e0:81:db:6a:3f:5f:ac:93:8f:55:2a:4b:08:b2:9c:c0:9b:c6:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jkestates.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jkestates.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1mkconstruction.net
*.alexandrascutariu.com
*.amae.net
*.analyn.com
*.andujar.com
*.appinvestment.com
*.aviationexpertlaw.com
*.avizoon.com
*.bjornn.com
*.complexplus.com
*.condominiobosquedelsol.com
*.critique.tv
*.dcjs.org
*.disquus.com
*.drvape.us
*.emilyknighttv.com
*.estudias.com
*.fantaci.cc
*.flatheadv8.org
*.fotogrammetria.com
*.frade.com
*.gaviria.com
*.jkestates.com
*.jordancars.com
*.kamiar.com
*.lageri.com
*.makefield.com
*.managemyhealth.co
*.manrey.com
*.mobetrack.com
*.myopic.org
*.newforestgardenmarqueehire.co.uk
*.oqueelogradouro.co
*.pacojet.pro
*.pintado.com
*.roseraie.com
*.sakurachan.com
*.stlouis.net
*.streamguide.tv
*.supertraderfx.com
*.thebaers.com
*.theheels.com
*.todayofferindia.in
*.ueverything.com
*.vabir.com
*.vansshoes.com.au
*.wwwcatch.com
*.xaourta.com
*.yadosa.com
*.zaiswd.com
1mkconstruction.net
alexandrascutariu.com
amae.net
analyn.com
andujar.com
appinvestment.com
aviationexpertlaw.com
avizoon.com
bjornn.com
complexplus.com
condominiobosquedelsol.com
critique.tv
dcjs.org
disquus.com
drvape.us
emilyknighttv.com
estudias.com
fantaci.cc
flatheadv8.org
fotogrammetria.com
frade.com
gaviria.com
jkestates.com
jordancars.com
kamiar.com
lageri.com
makefield.com
managemyhealth.co
manrey.com
mobetrack.com
myopic.org
newforestgardenmarqueehire.co.uk
oqueelogradouro.co
pacojet.pro
pintado.com
roseraie.com
sakurachan.com
stlouis.net
streamguide.tv
supertraderfx.com
thebaers.com
theheels.com
todayofferindia.in
ueverything.com
vabir.com
vansshoes.com.au
wwwcatch.com
xaourta.com
yadosa.com
zaiswd.com

Other certificates including the domain name jkestates.com

(limited to 100 certificates)
jkestates.com
jkestates.com
jkestates.com
jkestates.com
jkestates.com
jkestates.com
clipinbangs.com
scarfies.com
bienesraices360.com
circlescarves.com
jkestates.com
www.puteiros.com
jkestates.com
jkestates.com
jkestates.com
cinemahdaqkaqq.com

Certificate

The complete raw certificate details for jkestates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387984738877282814388479531089700654614237
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 21:51:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 21:51:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jkestates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852308115614309416911683972285720596157115304879490107993257898757568342740702724515295590090888155243622845971768917136875596567551220943832912201454482464839260961058660038165551531750578809647119053178881049384289598399462491137658977660365538530235468980668398017838988989394207648232656465301664674902188257985360457621742831741728290031678001604675477677505049796640267445196610009316369165993694113064427080273114629846659708344836228091656057690909910400696899714212374856265723755494520829311946962138356098141609733684551421512623830363181997404364480153233110148626574131648693949641278035392703005190416825191426510602205749209287238748193156909430666989538387651061166145409718045493633407925798641091089805991242345016316827168523407099545978521809993915255574576759402346741238212205636183073953722457732163297871687179145776942858467731073489660913831654493529437569613960491082542177617593835144649444330200847580056068565135168012292089510850947981052472866845484724252357551289127256949635478120456142797030208289036021865910848143068410895589444105573481954365423476031609369988631379807911903883575386429133531141201825901319114119930469468592894004876386268812042299313201300059614250568684385492264359437081241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e4cfa27bd88e356b7035c68538a07544c903dbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1652 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1mkconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexandrascutariu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amae.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andujar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviationexpertlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avizoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjornn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.complexplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condominiobosquedelsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.critique.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcjs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disquus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drvape.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emilyknighttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estudias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantaci.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flatheadv8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotogrammetria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaviria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jordancars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lageri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makefield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managemyhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myopic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newforestgardenmarqueehire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oqueelogradouro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacojet.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pintado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roseraie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sakurachan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stlouis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamguide.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supertraderfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebaers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todayofferindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ueverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vabir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vansshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xaourta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yadosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaiswd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1mkconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandrascutariu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amae.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andujar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviationexpertlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avizoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjornn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complexplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condominiobosquedelsol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'critique.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcjs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disquus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drvape.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilyknighttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estudias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantaci.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatheadv8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotogrammetria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaviria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordancars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lageri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makefield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managemyhealth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobetrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myopic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newforestgardenmarqueehire.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oqueelogradouro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacojet.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pintado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseraie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakurachan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stlouis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamguide.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supertraderfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebaers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todayofferindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ueverything.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vabir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vansshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xaourta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yadosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaiswd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa5578e700000040300483046022100fb8d5ce7e18860cca32bc7aa9f9cb7fb74c358feb96861c3010388b7dee7b3f8022100ad7b1e37d670c2d2d06631f7c66c6eeb54b164138435fb12983b8366b90ea3f2007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aa5578ed10000040300483046022100debcc8baeb443f5181483ff5d4faced85e2bdee62aade219a0d62f75cf2255c4022100ba3f30f8ef8c54482992a863704faad2e89ad69da1b826942de21b7691a722de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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