contraprova.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:64:79:8d:e3:6f:a0:f3:32:c7:67:de:bc:cb:39:08:c8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=contraprova.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:64:79:8d:e3:6f:a0:f3:32:c7:67:de:bc:cb:39:08:c8
Serial Number (int): 402007029278965794069995447565643297654984
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5e:62:81:d6:96:6a:06:61:41:81:b6:f6:06:f6:f6:44:3b:55:8d:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:5e:53:1a:48:a8:bc:6d:f1:f6:bd:86:02:79:7d:3a:5e:63:bc:8c
Fingerprint (sha256): 51:8b:9e:9e:bb:7a:45:21:28:d9:1d:ee:24:1a:c5:3e:22:18:d0:f2:02:4a:15:98:62:45:ce:26:33:9b:88:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate contraprova.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for contraprova.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aamukampa.com
*.affordablewatersofteners.com
*.alicam.com
*.aliyan.com
*.bajwa.com
*.beritasumber.com
*.bitkub.co
*.bitrabbit.co
*.bulbrokers.co
*.cerist.co
*.contraprova.com
*.corces.com
*.daadkracht.com
*.docvadis.ch
*.fflogs.co
*.fxflat.co
*.geblaese.com
*.gormanston.com
*.graaam.co
*.kaochi.com
*.katrac.co
*.litefore.co
*.matkalle.com
*.meipin.co
*.meituri.co
*.mxkc888.com
*.mzco.org
*.netcoc.co
*.nielit.co
*.noofs.com
*.protovation.com
*.qmaile.co
*.quickbooksx.com
*.ralpha.com
*.shao.net
*.sofmap.co
*.southerncompany.co
*.sumibi.com
*.superiogrocers.com
*.szexkereso.com
*.taqat.co
*.teledit.co
*.themeisters.com
*.tradeviewforex.co
*.vestle.co
*.vijayendra.com
*.waitsun.co
*.wayafir.com
*.wwwblack-friday.net
*.yurchenko.com
aamukampa.com
affordablewatersofteners.com
alicam.com
aliyan.com
bajwa.com
beritasumber.com
bitkub.co
bitrabbit.co
bulbrokers.co
cerist.co
contraprova.com
corces.com
daadkracht.com
docvadis.ch
fflogs.co
fxflat.co
geblaese.com
gormanston.com
graaam.co
kaochi.com
katrac.co
litefore.co
matkalle.com
meipin.co
meituri.co
mxkc888.com
mzco.org
netcoc.co
nielit.co
noofs.com
protovation.com
qmaile.co
quickbooksx.com
ralpha.com
shao.net
sofmap.co
southerncompany.co
sumibi.com
superiogrocers.com
szexkereso.com
taqat.co
teledit.co
themeisters.com
tradeviewforex.co
vestle.co
vijayendra.com
waitsun.co
wayafir.com
wwwblack-friday.net
yurchenko.com

Other certificates including the domain name contraprova.com

(limited to 100 certificates)
xpressvideos.com
myshinyjewelry.com
contraprova.com
lesdelices.com
contraprova.com
xiheng.com
contraprova.com

Certificate

The complete raw certificate details for contraprova.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402007029278965794069995447565643297654984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-21 20:13:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 20:13:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'contraprova.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741206803760029827974172167349015527832156673480718450800626865694011569740449645819678869741505612889400232474349503368118312528628138727124138415704199380753983639957687856790739840774372490954744974705743411532850650161964198318303024780895704780997244043808675660908708085089665620871014404984876679270685552853824275101407476023748540597460823684183079933132068652105772739150279559773552424490717964235701280478850718831668237315842183987859954272979820333306392681595914363626312631243474934494551080336756233568063577502675403465714451750611958246564231476661374999372374417698543604260699255708964837142261812602053766512876229938073138422804797074071583358910882324034568811231349421135173818247592453962678619043348045606888902502204619625939231950111901389546270139230528437841154983476721395441388703011334950952774118185159515515344181411275482639006139601130706781860992027814390705097340084681763589180753094617290266582283418936469512320757499333046570530033007265910234657114427022824120735936756075963138609184449903210135746853630676646979606733127510476035135555477354204644131242325410851131338901777403028577350741893077343140951967022616950759157241685100532457855520718414056952920386020239702636816488420799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e6281d6966a06614181b6f606f6f6443b558d27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aamukampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affordablewatersofteners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alicam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bajwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beritasumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitkub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitrabbit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulbrokers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contraprova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daadkracht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docvadis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fflogs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxflat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geblaese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gormanston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graaam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaochi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katrac.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.litefore.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matkalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meipin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meituri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mxkc888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netcoc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nielit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noofs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qmaile.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickbooksx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ralpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sofmap.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southerncompany.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sumibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superiogrocers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.szexkereso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taqat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teledit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themeisters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradeviewforex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vestle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vijayendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waitsun.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayafir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwblack-friday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yurchenko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aamukampa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordablewatersofteners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alicam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliyan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bajwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beritasumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitkub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitrabbit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulbrokers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contraprova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daadkracht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docvadis.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fflogs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxflat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geblaese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gormanston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graaam.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaochi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katrac.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litefore.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkalle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meipin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meituri.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxkc888.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netcoc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nielit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noofs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qmaile.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickbooksx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ralpha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shao.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofmap.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerncompany.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiogrocers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'szexkereso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taqat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teledit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themeisters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradeviewforex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vestle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vijayendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitsun.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayafir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwblack-friday.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yurchenko.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001849c09a0a20000040300483046022100aa209642eb4593057b2d5f8e8a20ebf6e21142895515ce0ea7fa20b1f1e4cea702210085a2ec74f3454ccfc83802cd5ff65402c37eb49d2b516f7c89a86161488c357c007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001849c09a29c000004030047304502206578440d7955e1903c2d59b342db684360ef6910483ec9a03fca004c4cfa46180221008bbd3deb7c7a70d8b4dd59dd0e0b1f913011b4e26904ef109d25e270b8a780bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000800799ff4464fe3be9723b8f890e20191c58a8c119188899761cde61bc9fdb115a7b0883e5c897786084c025e1ab0b859005376594dc73e26733f0ee62109b42b169eee403e10dadcbb30230a4cdae4fd70070ea4a783f3fb12e47f4c92ceab0b11271119100488600ff2732f1cdd10a2ce76d4e4469e6cf3463597811ccb891c1f0242b6c625b0610c786cb0c09682dc8c5fd5eba501ba867f47e69b66013dc1ab9dcb369de8f5922434e5f37fe2538d3da3d263d67c96288be685317b09e36eabefe9bd7dbb4a69dbaea9826d5e50a632efbf9c33a8c32b1d5ae1f846195118f0423d0dc439043c6d4a9290e54b9c6642afc3db8d64b886f58f34d4d86304