miuibrasil.org

Issued by R3

About this certificate

This digital certificate with serial number 03:f6:95:2b:e4:53:33:7d:9b:8b:3d:00:0e:b0:4e:26:f7:05 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=miuibrasil.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f6:95:2b:e4:53:33:7d:9b:8b:3d:00:0e:b0:4e:26:f7:05
Serial Number (int): 345244602928949734121540980906953475028741
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:25:72:c3:7f:f5:d0:23:57:e6:c9:27:cb:c2:a1:5f:8b:5f:eb:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:2f:ed:84:f0:26:e6:2d:14:2e:a3:c5:55:b5:23:85:85:f0:9d:3c
Fingerprint (sha256): 59:d9:0b:e2:85:2d:e1:2d:d5:9e:6f:f0:ed:2f:ae:c9:31:b2:3e:d5:ee:ab:b5:b2:87:44:eb:0f:19:26:fc:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate miuibrasil.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for miuibrasil.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1800cintacts.com
*.1st4stickers.com
*.aapak.org
*.anranhealthcare.com
*.armycessory.com
*.arteriorsfurniture.com
*.bolbol.academy
*.brandywinespca.com
*.bylucky7.com
*.caminstant.com
*.cellophane.com.au
*.characters.com.au
*.cloudlaw.com.au
*.cultureanalyst.com
*.dailymusic.com
*.datapunt.com
*.fesabook.com
*.floorz-n-more.com
*.forumprod.com
*.frysgood.com
*.glycerin.com.au
*.graceys.com
*.guiltypleasurecupcakes.com
*.hfywc.com
*.hoopacademynw.org
*.hydroglask.com
*.ikhedut.com
*.jpwright.net
*.medstarhealthjobs.com
*.meiwa-cash.com
*.memorialchasehoa.com
*.mineralshield.com
*.miuibrasil.org
*.noblok.net
*.receptionists.com.au
*.regioons.com
*.rocketmmortgage.com
*.sazehgostar-co.com
*.shortsbrewingtctrailfest.com
*.soccerjerseydiscount.com
*.spywares.com
*.technoglobaluniversitysironjmp.org
*.teengirl.com.au
*.the4xplorer.net
*.thephotagbox.com
*.toosbymailny.com
*.universalcrane.com
*.urilacrosse.com
*.wamaet.com
*.watchworksonline.com
1800cintacts.com
1st4stickers.com
aapak.org
anranhealthcare.com
armycessory.com
arteriorsfurniture.com
bolbol.academy
brandywinespca.com
bylucky7.com
caminstant.com
cellophane.com.au
characters.com.au
cloudlaw.com.au
cultureanalyst.com
dailymusic.com
datapunt.com
fesabook.com
floorz-n-more.com
forumprod.com
frysgood.com
glycerin.com.au
graceys.com
guiltypleasurecupcakes.com
hfywc.com
hoopacademynw.org
hydroglask.com
ikhedut.com
jpwright.net
medstarhealthjobs.com
meiwa-cash.com
memorialchasehoa.com
mineralshield.com
miuibrasil.org
noblok.net
receptionists.com.au
regioons.com
rocketmmortgage.com
sazehgostar-co.com
shortsbrewingtctrailfest.com
soccerjerseydiscount.com
spywares.com
technoglobaluniversitysironjmp.org
teengirl.com.au
the4xplorer.net
thephotagbox.com
toosbymailny.com
universalcrane.com
urilacrosse.com
wamaet.com
watchworksonline.com

Other certificates including the domain name miuibrasil.org

(limited to 100 certificates)
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
www.miuibrasil.org
miuibrasil.org
forum.miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
miuibrasil.org
os.miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
breastfest.com
forum.miuibrasil.org
sni140126.cloudflaressl.com
www.miuibrasil.org
sni140126.cloudflaressl.com
forum.miuibrasil.org
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
*.miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
staging.miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
shopchecker.miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
miuibrasil.org
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com
sni140126.cloudflaressl.com

Certificate

The complete raw certificate details for miuibrasil.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345244602928949734121540980906953475028741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 15:01:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-22 15:01:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'miuibrasil.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 836387456402937223191836824857803170043311430882891853342912764306528692786892338196390882560907814463259725326610459908592474514039882856572520297952923413332589962789605447415662051789879233834427389887793468469983956701675408247941457162244592181614241060462787061161509290448505050959861550200199361941660335748330559405018371179553889474086279070467478710749701285837526278149831842146776562744751792886266891906789383386217648211196509647673640897151423394175125328394083600558552197536225321661674353218112768540930738702762422098896659964740479361593454504400156755264519609345633891577492282464603396364423376865952661031531962026777000877112562404661295520178846558308930608299321636732667694967464246245575938469896109995540519742370732216115940709408826852021038407466956265861549184550408905511892516947068062110502096348895638745269401045728919362022694026754441995998647484050417005914806173945365245106356023464324270645488864740937160898804785779122823799114414860134654496668254312880828023774109627121515068522280115752523779462642330657159408947104671740200348094096765213486628067214262635128655302761889493143664598961957048028005531047253549250904967388332365190831910883238115228976800526212014335622590829999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d22572c37ff5d02357e6c927cbc2a15f8b5febe1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1800cintacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1st4stickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aapak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anranhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armycessory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arteriorsfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolbol.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandywinespca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bylucky7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caminstant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cellophane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.characters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudlaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultureanalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailymusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datapunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fesabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floorz-n-more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forumprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frysgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glycerin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graceys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guiltypleasurecupcakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hfywc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoopacademynw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hydroglask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikhedut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpwright.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medstarhealthjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meiwa-cash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memorialchasehoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mineralshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miuibrasil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noblok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.receptionists.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regioons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketmmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sazehgostar-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortsbrewingtctrailfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccerjerseydiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spywares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technoglobaluniversitysironjmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teengirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the4xplorer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thephotagbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toosbymailny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urilacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wamaet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchworksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1800cintacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1st4stickers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aapak.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anranhealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armycessory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arteriorsfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolbol.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandywinespca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bylucky7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminstant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cellophane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'characters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudlaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureanalyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailymusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datapunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fesabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floorz-n-more.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumprod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frysgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glycerin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graceys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiltypleasurecupcakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfywc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoopacademynw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydroglask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikhedut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpwright.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medstarhealthjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meiwa-cash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memorialchasehoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineralshield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miuibrasil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noblok.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receptionists.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regioons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketmmortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sazehgostar-co.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortsbrewingtctrailfest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccerjerseydiscount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spywares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technoglobaluniversitysironjmp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teengirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the4xplorer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thephotagbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toosbymailny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalcrane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urilacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wamaet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchworksonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fab55da3b0000040300473045022044b940e06ed8e4e32c4a4f3fadb9d429bc6e30309e63c6bff2b6ad9d4ed3f545022100e4da2b773632f121b94576d680ea9ecb157988dce6392d7a13778167f990cac200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fab55da9e000004030047304502210092a93751d904e733b3f51f4dadc549a664f4d8a8c4e00d532015190619cc6871022000f0273d058639a6ee6966f1d123a38ea8d843535749d7d774fb4184997f9ce2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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