mail.thebunq.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b8:b4:99:52:7f:eb:70:e0:c7:2b:de:1e:b1:a1:b0:4b:7f was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mail.thebunq.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:b4:99:52:7f:eb:70:e0:c7:2b:de:1e:b1:a1:b0:4b:7f
Serial Number (int): 324188870442686487480114990510710207826815
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:79:80:7c:97:5d:d5:76:25:9d:ed:d9:61:b3:9e:ce:f7:69:76:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:a0:1b:99:c5:16:9b:8d:15:fa:4f:c4:04:f5:3f:e6:dc:68:b7:e7
Fingerprint (sha256): 56:d1:81:e3:d3:17:d0:44:55:cd:9a:5d:95:82:0c:03:ce:d6:a1:e7:7d:a7:ee:a3:67:00:10:09:1e:54:13:ef

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mail.thebunq.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.thebunq.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clavin.embinsights.com
correo.drcasociados.co
correo.oxxidecolombia.com
hendoss.mail.videoscope.biz
inbox.davidmarkmedia.com
mail.a70investment.com
mail.almotawa-lawfirm.com
mail.amorfestival.com
mail.astutr.com
mail.axiontecnologia.com.br
mail.barnegatbaycottage.com
mail.biopredictiva.com
mail.blitzlogisticsltd.com
mail.bryanechannell.xyz
mail.buckhorn.net
mail.bws.rs
mail.cccondos.net
mail.cheztomio.com
mail.chriscables.dev
mail.coalminestudios.ca
mail.core-energy.co.th
mail.cykord.media
mail.deepgreenlawncare.com
mail.djedankh.online
mail.donovanleather.com
mail.easygocarz.com
mail.eliteitmanagement.com
mail.energiesan.com
mail.everaftershop.ca
mail.farkascity.org
mail.farmasup.com.mx
mail.favsob.com
mail.fencinganddecking.nz
mail.formax8.net
mail.gekkotech.ca
mail.globalfitness.com.gt
mail.graphicreserve.com.bd
mail.hi.tours
mail.hometownaccountant.com
mail.iagm.cl
mail.ilovewimpys.com
mail.imobily.net.br
mail.k1elt.com
mail.k2corp.tech
mail.laticiniosriodasflores.com.br
mail.manez.org
mail.medi-thailand.com
mail.mmbc.do
mail.modernworldgaming.online
mail.mountcarmelbaptist.com
mail.nosnaf.us
mail.nusantaraterdepan.my.id
mail.opbarquitectos.com
mail.oudbeijerlandcentrum.nl
mail.paxbi.online
mail.pjbc.gob.mx
mail.playlet.com
mail.rapidgotelematics.in
mail.redlinessl.com
mail.resmail.com.au
mail.reyami.com
mail.seasidelandings.us
mail.secenterprises.net
mail.showcarsillustrated.com
mail.smidnya.online
mail.solverdeproduce.com
mail.sound-grab.com
mail.stebbings.net
mail.tasi.aero
mail.tenetnetworks.com
mail.thebunq.com
mail.tmsia.com.br
mail.topoequipos.mx
mail.tquick2.com
mail.trainhuntkill.com
mail.transviti.com
mail.trites.ca
mail.utilemosaic.com
mail.veritasmarineservices.com
mail.vipclientinvite.com
mail.vrcom.com.br
mail.whitecollarhost.com
mail.wyobraskasurveyor.com
webmail.apacnl.com.br
webmail.charvinity.com
webmail.rairdin.com
webmail.salernopizza.com
webmail.snrengineering.com.sg
webmail.trendtv.tv
workplace.m2animation.com

Other certificates including the domain name thebunq.com

(limited to 100 certificates)
mail.thebunq.com
thebunq.com

Certificate

The complete raw certificate details for mail.thebunq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEnFqSp/7lobomVZ+Qr8Uml5koK+PI
+/8XzkWH49m/FGefdSptd4UEsH4xdJ5V9NFskrVtwHQZ+I1pXCl/SI9hhg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324188870442686487480114990510710207826815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 06:56:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 06:56:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.thebunq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00049c5a92a7fee5a1ba26559f90afc5269799282be3c8fbff17ce4587e3d9bf14679f752a6d778504b07e31749e55f4d16c92b56dc07419f88d695c297f488f6186
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f79807c975dd576259dedd961b39ecef7697606
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2064 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clavin.embinsights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correo.drcasociados.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correo.oxxidecolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendoss.mail.videoscope.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inbox.davidmarkmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.a70investment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.almotawa-lawfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.amorfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.astutr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.axiontecnologia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.barnegatbaycottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.biopredictiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.blitzlogisticsltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bryanechannell.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.buckhorn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bws.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cccondos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cheztomio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chriscables.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.coalminestudios.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.core-energy.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cykord.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.deepgreenlawncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.djedankh.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.donovanleather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.easygocarz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.eliteitmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.energiesan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.everaftershop.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.farkascity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.farmasup.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.favsob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fencinganddecking.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.formax8.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gekkotech.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.globalfitness.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.graphicreserve.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hi.tours'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.hometownaccountant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.iagm.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ilovewimpys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.imobily.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.k1elt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.k2corp.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.laticiniosriodasflores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.manez.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.medi-thailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mmbc.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.modernworldgaming.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mountcarmelbaptist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nosnaf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nusantaraterdepan.my.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.opbarquitectos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.oudbeijerlandcentrum.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.paxbi.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pjbc.gob.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.playlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rapidgotelematics.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.redlinessl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.resmail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.reyami.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.seasidelandings.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.secenterprises.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.showcarsillustrated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.smidnya.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.solverdeproduce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sound-grab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stebbings.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tasi.aero'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tenetnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thebunq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tmsia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.topoequipos.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tquick2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.trainhuntkill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.transviti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.trites.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.utilemosaic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.veritasmarineservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vipclientinvite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vrcom.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.whitecollarhost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wyobraskasurveyor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.apacnl.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.charvinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.rairdin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.salernopizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.snrengineering.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.trendtv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplace.m2animation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc92cb6ea000004030047304502202d6dae4afdc3bc7006bb92e5828c9e4cac859ce1d236aba8e430e361f2e0548a0221008c16a9a6a3165e7f729c9bcfab25d8d7cf0898fae73740af29a1492a9ad07cdd007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cc92cb70a0000040300463044022019b5e704a06d4a262088c502a9a4acd4283feb2eb0359999bd833af436f57e4d02203a145112071a3fa8058bd4cf787032de7e1b2b8d5afbbe78dbf98e182a6874aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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