tophealthpartners.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5c:3b:49:fa:e0:2a:64:50:94:ca:65:8f:01:34:87:e2:87 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tophealthpartners.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5c:3b:49:fa:e0:2a:64:50:94:ca:65:8f:01:34:87:e2:87
Serial Number (int): 379833930061551937263685565772896754197127
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fe:f9:b1:49:10:9c:a3:f1:77:a9:ac:93:e3:b6:ba:4a:1d:ec:92:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:61:0c:f4:85:97:b2:c9:47:30:e9:9d:a2:fe:c2:04:e7:ae:87:fb
Fingerprint (sha256): 4f:fb:d3:98:81:d0:bf:c8:a1:0a:1a:82:8b:85:2a:cf:cc:25:1c:93:fd:58:86:45:32:fe:a4:0f:22:ec:4a:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tophealthpartners.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tophealthpartners.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1769zzz.com
*.1957-chevrolet-alternator-conversion.com
*.786xx.com
*.abdlpics.com
*.advanfree.com
*.bitfarms1.com
*.cafemelange.com
*.callewright.com
*.chopper.me
*.clickvibe.org
*.cumberlandfarms-zipline.com
*.customerservicekohls.com
*.cwabmqitaioxntg.com
*.dadaratv.com
*.digitalkes.com
*.douvlelist.com
*.e-factpos.com
*.fahunterassociates.com
*.falcao.live
*.harunjahja.net
*.influencersognewild.com
*.javpreview.com
*.jegs.cm
*.kevinseikaiwa.com
*.marketingnews.com.au
*.movie4us.com
*.pachimura.com
*.pandmnursery.com
*.pdfdocdownloadspanel.site
*.peixosalicia.com
*.piratescovepoboys.com
*.premiertaxrefound.com
*.psngeneratorcard.com
*.sbttrck.com
*.sharkbitestoast.com
*.sibmateriais.com
*.stoppingspam.com.au
*.tassonespizzadeli.com
*.taymecouture.com
*.themoneymeltdown.com
*.tophealthpartners.com
*.totalnailsedinburgh.com
*.toy-shop.com
*.twinrivergiftplus.com
*.unclebillspices.com
*.universalautonv.com
*.vidadeempreendedoradigital.com
*.villasatstthereseassistedliving.com
*.watchswries.mx
*.wcidl.com
1769zzz.com
1957-chevrolet-alternator-conversion.com
786xx.com
abdlpics.com
advanfree.com
bitfarms1.com
cafemelange.com
callewright.com
chopper.me
clickvibe.org
cumberlandfarms-zipline.com
customerservicekohls.com
cwabmqitaioxntg.com
dadaratv.com
digitalkes.com
douvlelist.com
e-factpos.com
fahunterassociates.com
falcao.live
harunjahja.net
influencersognewild.com
javpreview.com
jegs.cm
kevinseikaiwa.com
marketingnews.com.au
movie4us.com
pachimura.com
pandmnursery.com
pdfdocdownloadspanel.site
peixosalicia.com
piratescovepoboys.com
premiertaxrefound.com
psngeneratorcard.com
sbttrck.com
sharkbitestoast.com
sibmateriais.com
stoppingspam.com.au
tassonespizzadeli.com
taymecouture.com
themoneymeltdown.com
tophealthpartners.com
totalnailsedinburgh.com
toy-shop.com
twinrivergiftplus.com
unclebillspices.com
universalautonv.com
vidadeempreendedoradigital.com
villasatstthereseassistedliving.com
watchswries.mx
wcidl.com

Other certificates including the domain name tophealthpartners.com

(limited to 100 certificates)
tophealthpartners.com
tophealthpartners.com
tophealthpartners.com
tophealthpartners.com
tophealthpartners.com
tophealthpartners.com
alphaestilo.com
tophealthpartners.com
*.3dbeamer.de
tophealthpartners.com
tophealthpartners.com
tophealthpartners.com
tophealthpartners.com
alphaestilo.com

Certificate

The complete raw certificate details for tophealthpartners.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379833930061551937263685565772896754197127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 22:44:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 22:44:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tophealthpartners.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687921094282954900183165343794134765622654946250662594706903638850653845240681559966988620584889265005860389272883426730018728913384769121691937836250019583171046619927090239942917256717122536584140013635899710097510484513395497994076074513211867406199079671895018679345443935806229323753161746208014416613644619079947741980234041643421263837387936691733927994719254407632097113056502473904967189162087330665359131796650051360626716185838166248234495902481004329675334259038288823441043485947766526520128437226874873086117836865771839410980897321689843586974887933390221570067076447007179219053522268564001818659333962729115350941097053143194772642553592772017302094146511327769824210320406422917385274709163117662827698785519431796420131747762895168735095929047892254831967068117960026499637673861347727672001656497028202760080908821997239303273620403436040876442552389433434306529276752432232483860603927281546881641468640999467309972783579936246262113954772782391884064045020691746561426747221671740308851596896537115796918104475335908625636028844880427729217083958515856167768344550459633641418713695568550014566691489252026795493357501082144147678862867755930593316854788328321899168129583856546423237983812958264169474034887587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fef9b149109ca3f177a9ac93e3b6ba4a1dec922a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2046 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1769zzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1957-chevrolet-alternator-conversion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.786xx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abdlpics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitfarms1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafemelange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callewright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chopper.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clickvibe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumberlandfarms-zipline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customerservicekohls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwabmqitaioxntg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dadaratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalkes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.douvlelist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-factpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahunterassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falcao.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harunjahja.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.influencersognewild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jegs.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kevinseikaiwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingnews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movie4us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pachimura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandmnursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdfdocdownloadspanel.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peixosalicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piratescovepoboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premiertaxrefound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psngeneratorcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbttrck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharkbitestoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sibmateriais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoppingspam.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tassonespizzadeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taymecouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themoneymeltdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tophealthpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalnailsedinburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toy-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinrivergiftplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unclebillspices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalautonv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidadeempreendedoradigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villasatstthereseassistedliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchswries.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcidl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1769zzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1957-chevrolet-alternator-conversion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '786xx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdlpics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitfarms1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafemelange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callewright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chopper.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickvibe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberlandfarms-zipline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerservicekohls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwabmqitaioxntg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadaratv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalkes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'douvlelist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-factpos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahunterassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falcao.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harunjahja.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'influencersognewild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javpreview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jegs.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevinseikaiwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingnews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movie4us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pachimura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandmnursery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdfdocdownloadspanel.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peixosalicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piratescovepoboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiertaxrefound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psngeneratorcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbttrck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkbitestoast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sibmateriais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoppingspam.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tassonespizzadeli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taymecouture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themoneymeltdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tophealthpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalnailsedinburgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toy-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinrivergiftplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unclebillspices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalautonv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidadeempreendedoradigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villasatstthereseassistedliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchswries.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcidl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6db351ca0000040300483046022100b0c7713102f0dbd47683c77f455ed73610e866ce8d14bfb1af964b70278dc6fa022100e6c9f20648a9e7aeeec60acf1061f1d98cf2c9ee18affd9f7c58baee1280383b007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6db359c7000004030046304402202f8a876ecc93bbdfd66781c93492216f053c327921ddba54001a3bdab78343cb02207abec315ded31cda97fde3dc46eb06c1cc37fd6a11207f07182a00af34c41d73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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