magicatncd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:1d:4b:60:db:ca:67:76:53:cc:30:bf:97:a0:be:bb:34 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=magicatncd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:1d:4b:60:db:ca:67:76:53:cc:30:bf:97:a0:be:bb:34
Serial Number (int): 347807517991866192923267819837226187930420
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f0:1d:00:40:d7:49:31:57:19:dd:48:9d:12:85:6f:ac:99:c5:8b:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:02:53:17:44:b0:1c:49:24:09:b5:07:b2:d6:f5:47:c3:6f:18:9a
Fingerprint (sha256): 4f:b6:e3:51:73:26:77:a9:8e:3c:e0:25:b8:fe:c6:f1:31:db:8a:84:fb:e1:dd:c4:d6:40:c3:e3:72:ad:b4:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate magicatncd.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magicatncd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adultfriendfonder.com
*.allarthritishospital.info
*.assurancewrieless.com
*.bbcsnc.com
*.benefitsofgoji.com
*.bensughty.com
*.bmweugene.com
*.bosurgi.com
*.burslem.com
*.carders.com
*.developselfconfidence.com
*.duoduoxi.com
*.episodegame.online
*.ezbrick.com
*.fargo.center
*.hican.com
*.holsterman.com
*.hqbrokers.com
*.inversoresglobales.com
*.klieskin.com
*.luxentertainment.us
*.magicatmxd.com
*.magicatncd.com
*.magnifymoey.com
*.matsie.com
*.mexnew.info
*.mhund.com
*.midwayusaa.com
*.mobilereplicas.com
*.morningbreak.com
*.myconquest.com
*.myspacejet.com
*.oprndns.com
*.pharmacyconsultant.com
*.practiecfusion.com
*.quedtionpro.com
*.sigilscribe.com
*.siteadvsor.com
*.stambenikrediti.com
*.sum.dog
*.swaminarayanmandir.com
*.sweetwaetr.com
*.technibharathi.com
*.tncash.com
*.torontodominionsecuritiesettlement.com
*.torontodominionsecuritysettlement.com
*.vidanuevaradio.com
*.walmartgocery.com
*.walmrtgrocery.com
*.wwwtorontodominionsecuritiessettlement.com
adultfriendfonder.com
allarthritishospital.info
assurancewrieless.com
bbcsnc.com
benefitsofgoji.com
bensughty.com
bmweugene.com
bosurgi.com
burslem.com
carders.com
developselfconfidence.com
duoduoxi.com
episodegame.online
ezbrick.com
fargo.center
hican.com
holsterman.com
hqbrokers.com
inversoresglobales.com
klieskin.com
luxentertainment.us
magicatmxd.com
magicatncd.com
magnifymoey.com
matsie.com
mexnew.info
mhund.com
midwayusaa.com
mobilereplicas.com
morningbreak.com
myconquest.com
myspacejet.com
oprndns.com
pharmacyconsultant.com
practiecfusion.com
quedtionpro.com
sigilscribe.com
siteadvsor.com
stambenikrediti.com
sum.dog
swaminarayanmandir.com
sweetwaetr.com
technibharathi.com
tncash.com
torontodominionsecuritiesettlement.com
torontodominionsecuritysettlement.com
vidanuevaradio.com
walmartgocery.com
walmrtgrocery.com
wwwtorontodominionsecuritiessettlement.com

Other certificates including the domain name magicatncd.com

(limited to 100 certificates)
magicatncd.com
kyliedkin.com
codtracker.gg
oginjector.co

Certificate

The complete raw certificate details for magicatncd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347807517991866192923267819837226187930420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 13:35:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 13:35:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magicatncd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830318748076929075945532005990259245787918193335467586923108641857987547323400498109907997225656700899363297859715054644756585735214340404951000630787658513805794901737172426113614852911628976549079829671486903079996360372165763878377602448075997362622767557605307410372549677899396056561677138489335646736444134736950343608244705837203998145265352380955799549776280795647465230564970887536239328238468644815507667263196809768119164131586947597249289073580482935496921231290505782521748650916909100314928877479822162829738986758294960113724210933908537346642387463939713950451956691269684885560938473524625133311848355768974772871078319276752790168388332763197433653575766538672520842997752752038079558363294614967364260345627247557474881137908884656133944448016720866658721457414897724392501793054202908317089733246139114462643584854254408671294900310265474488761371720203513000922175889048766351835608043133674841666026808055210452018967511014264577250931352208863167328033930211280908513763993184877943548199438590667894306830787445181515079101087323529472891677685217412245857123903114643614077096035847189780849319242216117388699335505543886093961527920348538194400667327130402650253723367121342040970342381523488821744959179181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f01d0040d749315719dd489d12856fac99c58b18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultfriendfonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allarthritishospital.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assurancewrieless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbcsnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benefitsofgoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bensughty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmweugene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bosurgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burslem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developselfconfidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duoduoxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.episodegame.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fargo.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holsterman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inversoresglobales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klieskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxentertainment.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicatmxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicatncd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnifymoey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matsie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mexnew.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwayusaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilereplicas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morningbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myconquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myspacejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oprndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmacyconsultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.practiecfusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quedtionpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigilscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siteadvsor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stambenikrediti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sum.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swaminarayanmandir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetwaetr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technibharathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tncash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontodominionsecuritiesettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontodominionsecuritysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidanuevaradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmartgocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmrtgrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwtorontodominionsecuritiessettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultfriendfonder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allarthritishospital.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurancewrieless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcsnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitsofgoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensughty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmweugene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosurgi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burslem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developselfconfidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duoduoxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'episodegame.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fargo.center'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holsterman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqbrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inversoresglobales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klieskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxentertainment.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicatmxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicatncd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnifymoey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matsie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexnew.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwayusaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilereplicas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myconquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myspacejet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oprndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmacyconsultant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiecfusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quedtionpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigilscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteadvsor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stambenikrediti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sum.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swaminarayanmandir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetwaetr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technibharathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tncash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontodominionsecuritiesettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontodominionsecuritysettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidanuevaradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmartgocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmrtgrocery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtorontodominionsecuritiessettlement.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f385575560000040300463044022033ee723652d889ffd3298b4b45785e58a2c504b0fda19e16d8d31e7b7ff5f2ee0220021e77447e675b43b7d88e03ef3db88228e5f6386093c8d47ec5325a44d409e200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f385575810000040300473045022100972c6da3521c3f601e3a2acfdfc79c1a44962289533ab0ed19168e924f51ac2302204b80a276eb3f1c3daf760e2fccf2981ba0e0ba67914a2587885e225deaee36a3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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