ksn.me

Issued by R11

About this certificate

This digital certificate with serial number 03:83:ec:b4:d3:dc:3d:76:39:9a:f7:14:d2:2c:ae:f4:ff:78 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ksn.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:83:ec:b4:d3:dc:3d:76:39:9a:f7:14:d2:2c:ae:f4:ff:78
Serial Number (int): 306228484579401098703072128532846866661240
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:fd:23:89:b3:8e:e9:e6:ee:9a:99:27:9b:da:a6:49:95:96:89:f1
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): dc:d6:53:e5:fa:6d:91:2e:8d:d7:61:63:04:3b:ef:4e:bc:f5:77:f4
Fingerprint (sha256): 5b:72:f6:50:65:ed:dd:3f:23:54:9a:a4:cd:79:b7:4c:d6:84:81:e6:88:9e:70:df:54:fa:c2:f9:08:9d:c5:1f

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate ksn.me

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ksn.me

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adelaidefamilylawyer.com
aifatima.com
amarsons.in
arbitrageus.com
axialturbine.com
bengalproperty.in
bestattorneyfirms.com
betterthanpantscoupons.com
bizpromotion.com
businessbuilders.org
buypsprt.com
californiabankruptcyattorney.com
call.jessicamilioto.com
caringchurchnetwork.net
cartelfamily.com
certifiednaturalgas.com
chicagoprotection.com
classifiedadspages.com
creditper.com
dailyveteran.org
dataminig.com
decarbonizemybusiness.com
devabc.com
dfwprivateschoolfinder.com
drjohnsonresearchinstitute.com
duncare.com
eastcoastresurfacingmyrtlebeach.com
eco4vip.com
enerpactoolsgroup.uk
epik.co
fairydogparents.com
fetishtour.com
flippingheavyequipment.com
floridaroofrefresh.com
freeclassifiedspages.com
gaysurgeons.com
globaltalentdata.com
goodasgold.io
gws.co.in
haymorfl.com
houstondemolitioncompany.com
jalandhardental.in
joshuafontanilla.com
ksn.me
ldj.co.in
learntofilm.com
leedsstore.com
lowbudgetautosales.com
maleunderwear.com
markandmarina.com
martingrahamcloudcoaching.com
medicalscope.com
michiganmetalandscraprecycling.com
mikesmotorsports.com
minthillproperties.com
muraba.org
mychocolat.com
myvilla.in
namecrew.com
newsharon.com
nlour.com
noerythritol.com
nomadicbears.com
ofquick.com
ojinaga.com
ooojob.com
pashma.in
personaeffects.com
ponderacounty.com
portableshippingcontainerhomes.com
prakruti.in
premiumwebtemplates.com
privateequityarbitrage.com
privateinvestingcourse.com
psicologosenmonterrey.com
rafaniello.com
rampanelli.com
saltlakehomeloans.com
sanantoniolocal.com
sapiens.sapia.pe
sbstop.com
scihunttags.org
seacontainerhomes.com
seasonsinthesun.com
showsetdesign.com
smartipoint.com
stamfordbankruptcyattorney.com
stoneoakfamilydoctors.com
svanidhi.com
tensasparish.com
truckkingdom.com
trumpnewstodaylatest.com
unframe.net
usprobate.com
weatherboarding.com
worcestertow.com
www.selantic.com
xespo.com
yep-dice.com

Other certificates including the domain name ksn.me

(limited to 100 certificates)
arbitrageurs.id
ksn.me
ksn.me
takebacktheculture.net.ksn.me
ksn.me
livingwater.bible
ksn.me
ksn.me
ksn.me
deliver.tube
www.metaxianity.bible
ksn.me

Certificate

The complete raw certificate details for ksn.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVYCNRB/oEadsfmAUQMU
kzCqhSgU1BiJwjcC6KXAE9Pc5H/Y1ECpSfijkYPVAyq5kmw5gyx2TTZ8AN3EIrsI
lJ/XbfiF3v90DNXN1OVH4UdhyyEqJaqv4Xv5JMpCBKtDJdSuMUdCxpf4a+uGSv81
OPrqxoEHu5BwKjekk7/ndG805Y1ZiGs3EW6VaTvbZKH1goEKpG7nDINqiZj3X9rA
S2MUK72prestWJsXjVy+8YVTBwQm4NvtjRoZ4n22E0J8PEQVJ6LYbVD9Fq81+Jcz
tq2nBWlCjG1RA2MumIVREiqjS90PJab+tZwCJaB6wuvuaSZ/scGwTxgOhHhbpx4q
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306228484579401098703072128532846866661240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 03:41:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 03:41:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ksn.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24406405290788745261103666950995657673878109768263003400034508849836185025222333299197542359435593014219705261596016739167809481501348044226544262770782353447890888587945481286237447247140943878585343864079468109123809201386776047456255901209220015609916891817844030054030881921901326155037088445018978773711353966459861726103745908976684396748718517453715229311407118280033530394100429876823811505717745274683803859021796494767656189807533057580265359615235174578012015956891392827356688947469500755862513252452485606234292379183214930371719783313419993324404670576103378722846425111450219979375857756608669473974787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ffd2389b38ee9e6ee9a99279bdaa649959689f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1951 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adelaidefamilylawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aifatima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amarsons.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axialturbine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengalproperty.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestattorneyfirms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterthanpantscoupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizpromotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessbuilders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buypsprt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiabankruptcyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'call.jessicamilioto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caringchurchnetwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartelfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certifiednaturalgas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagoprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classifiedadspages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyveteran.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataminig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decarbonizemybusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devabc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwprivateschoolfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drjohnsonresearchinstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastresurfacingmyrtlebeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eco4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpactoolsgroup.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epik.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairydogparents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetishtour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flippingheavyequipment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridaroofrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeclassifiedspages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaysurgeons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaltalentdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodasgold.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gws.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haymorfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstondemolitioncompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jalandhardental.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joshuafontanilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldj.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learntofilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leedsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowbudgetautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maleunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markandmarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martingrahamcloudcoaching.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michiganmetalandscraprecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikesmotorsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minthillproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muraba.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mychocolat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myvilla.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namecrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsharon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noerythritol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomadicbears.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofquick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojinaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ooojob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pashma.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personaeffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponderacounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portableshippingcontainerhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prakruti.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumwebtemplates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateequityarbitrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privateinvestingcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psicologosenmonterrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafaniello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rampanelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakehomeloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniolocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapiens.sapia.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbstop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scihunttags.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seacontainerhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasonsinthesun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showsetdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartipoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stamfordbankruptcyattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneoakfamilydoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svanidhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tensasparish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckkingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trumpnewstodaylatest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unframe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usprobate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weatherboarding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcestertow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xespo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yep-dice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff1002ccd0000040300483046022100e4ffece2c85b013f2eab69ede65f66cb5c8a7d6e604c06f30506df12e8d4c259022100ce5d11c2c18cd80547c00264c80f482b0fe8d1da615af870d84ff0e2cda88d110076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff1002cd6000004030047304502201556f6237d0d6503a022f9794be1477db3e68c7fba26c0cbed9f98f6b5c94b73022100ca247112a9cbd49732449969d557652f2b785e75c1f571e4a9f92cdeed5e79f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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