hmsassist.com

Issued by R3

About this certificate

This digital certificate with serial number 04:86:0e:21:fb:d4:a6:c3:f7:88:0b:eb:bb:bc:8e:39:a1:66 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hmsassist.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:86:0e:21:fb:d4:a6:c3:f7:88:0b:eb:bb:bc:8e:39:a1:66
Serial Number (int): 394065766539916853552812811775298474975590
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:cd:99:b1:e0:f3:aa:84:09:7f:97:c4:71:5c:46:d8:b7:9d:81:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:f7:d6:d2:ec:5c:58:24:c8:f4:83:35:45:13:b9:99:cc:89:3f:41
Fingerprint (sha256): 52:a6:e0:a4:4d:dd:f9:e5:a9:74:19:55:ff:4c:8f:fd:f3:17:57:43:d6:90:55:ff:62:1f:c1:85:68:ed:db:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hmsassist.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hmsassist.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2000travel.com
*.adiidas.com
*.aesthetichair.net
*.ancetory.com
*.atlanticclinicalresearch.com
*.atlcpets.com
*.caliberhomeloan.com
*.certifiedtoyota.com
*.coipons.com
*.collagehillshonda.com
*.crackstreamsboxing.net
*.dentalimplant-price.xyz
*.ebboks.com
*.fighteronline.com
*.fox13newsnow.com
*.happydayrj.com
*.hmsassist.com
*.hoffybrands.com
*.iamintosports.com
*.idealservicenw.com
*.iltephouse2.com
*.in-side.online
*.insiratexto.com
*.intelextreammasters.com
*.jointhatnearpod.com
*.knijarnitzabg.com
*.lacountyproperty.com
*.legitimoney.com
*.mcsgjy.com
*.mummum.shop
*.mynastyasians.com
*.myshirtconnection.com
*.nationgeographic.com
*.nbcbews.com
*.ncwz23.xyz
*.outtolunchcreations.com
*.parkmayra.com
*.pasoalau.org
*.pawfamilies.com
*.radiance-candles.shop
*.rckstrlfe.com
*.refraseie.com
*.shortattentionspade.com
*.swissgarden.net
*.topiarii.com
*.torobravos2014.com
*.trovanotizie.com
*.victoroassecret.com
*.vsnolvadexv.com
*.youtubele.com
2000travel.com
adiidas.com
aesthetichair.net
ancetory.com
atlanticclinicalresearch.com
atlcpets.com
caliberhomeloan.com
certifiedtoyota.com
coipons.com
collagehillshonda.com
crackstreamsboxing.net
dentalimplant-price.xyz
ebboks.com
fighteronline.com
fox13newsnow.com
happydayrj.com
hmsassist.com
hoffybrands.com
iamintosports.com
idealservicenw.com
iltephouse2.com
in-side.online
insiratexto.com
intelextreammasters.com
jointhatnearpod.com
knijarnitzabg.com
lacountyproperty.com
legitimoney.com
mcsgjy.com
mummum.shop
mynastyasians.com
myshirtconnection.com
nationgeographic.com
nbcbews.com
ncwz23.xyz
outtolunchcreations.com
parkmayra.com
pasoalau.org
pawfamilies.com
radiance-candles.shop
rckstrlfe.com
refraseie.com
shortattentionspade.com
swissgarden.net
topiarii.com
torobravos2014.com
trovanotizie.com
victoroassecret.com
vsnolvadexv.com
youtubele.com

Other certificates including the domain name hmsassist.com

(limited to 100 certificates)
hmsassist.com
salvationarmy.shop
bsatroop172.org
cwellsfargo.com
www.hmsassist.com
bsatroop172.org
www.hmsassist.com
kina.au
www.hmsassist.com

Certificate

The complete raw certificate details for hmsassist.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394065766539916853552812811775298474975590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 10:49:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 10:49:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hmsassist.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741365702792762630843929640516820786008515445588315692686069685112325146398117349610713027087787128536882248857602375662473533858346857959184899541216920457419121423629749346557498312833651916947558623295745244267019052887227732333460502853989717718667669100575060387762037495198395990259585689832440338896248867349857543173268697090204201031040809453416510713160531326740319660352640593646731010225166295981011606873608858778380285796041740145206232581777194103302863535750150451637870293106692468992314369313576247813667623229761507633999244370436465323181605275567494589687959899431510276245485123841473700143857696597661468801566196046701872954858897175090746407814814474461732159774052974969831864020150459513948376226547711473331568040748991059959347950662201140648581367213961745921644255373893424180916477779631942490803560190237422379341073994282969529832386007191885450369922897313908644466511486916628962623859351080409710590735744301564783330322878137102043014402632262014718018310811672282871339083194986334069375871901711974082518887511752761812665125919723707423547032879670978932983882402516688340624710259913683287116992407645761481261315568673968372402627249672467688457880616920528404009672304237137221146652083581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eecd99b1e0f3aa84097f97c4715c46d8b79d8170
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1920 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2000travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adiidas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aesthetichair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancetory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlanticclinicalresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlcpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caliberhomeloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certifiedtoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coipons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collagehillshonda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crackstreamsboxing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalimplant-price.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebboks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fighteronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fox13newsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happydayrj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmsassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoffybrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamintosports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idealservicenw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iltephouse2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.in-side.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insiratexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelextreammasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jointhatnearpod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knijarnitzabg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacountyproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legitimoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcsgjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mummum.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynastyasians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myshirtconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbcbews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncwz23.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outtolunchcreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkmayra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasoalau.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawfamilies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiance-candles.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rckstrlfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refraseie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortattentionspade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swissgarden.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topiarii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torobravos2014.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trovanotizie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoroassecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vsnolvadexv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtubele.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2000travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adiidas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aesthetichair.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancetory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticclinicalresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlcpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caliberhomeloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiedtoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coipons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collagehillshonda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackstreamsboxing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalimplant-price.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebboks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fighteronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fox13newsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happydayrj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmsassist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoffybrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamintosports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idealservicenw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iltephouse2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-side.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insiratexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelextreammasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhatnearpod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knijarnitzabg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacountyproperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legitimoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcsgjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mummum.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynastyasians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myshirtconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationgeographic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbcbews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncwz23.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outtolunchcreations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkmayra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasoalau.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawfamilies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiance-candles.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rckstrlfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refraseie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortattentionspade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissgarden.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topiarii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torobravos2014.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trovanotizie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoroassecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsnolvadexv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtubele.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fc9558554000004030046304402205848d2a599a8828bbdd95210edc6970417a878fb7d47a227b093f03785c285d90220422ed36acf1e7d623d32a4fc71fe5d1c66df127f6ad9c02f5890612be8d6b140007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fc955854f0000040300473045022100c1096fa1b9f40ae1124839a32c0784ca6c2ba98d58b7d7a26fabb363a3ab1dd6022004a2111746085c358ce00c5090ba6b1978444f4a0d3b0973ca6d447146a60cce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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