xcefappdigital.plus

Issued by R3

About this certificate

This digital certificate with serial number 04:4a:8e:a2:de:0e:07:3f:5e:84:12:86:5b:a7:89:59:b5:9b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=xcefappdigital.plus

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4a:8e:a2:de:0e:07:3f:5e:84:12:86:5b:a7:89:59:b5:9b
Serial Number (int): 373819634910489342868418155945356114376091
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:93:ba:91:3d:51:f4:f1:fd:24:a4:8b:e9:85:10:e6:b8:58:38:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:53:01:16:f2:e4:ef:02:ac:18:99:98:a9:02:87:bc:05:48:32:84
Fingerprint (sha256): 5c:45:85:c5:72:63:60:0f:14:3d:f7:76:f3:98:22:b3:68:26:8a:e2:e8:4c:9b:5f:0f:43:ac:14:cd:e4:03:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate xcefappdigital.plus

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xcefappdigital.plus

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aanntaylor.com
*.amorsen.com
*.andrijana.com
*.bendvacationrental.com
*.btccash.in
*.connexua.com
*.dancingwiththestart.com
*.divas.co.in
*.driftwater.com
*.elasesor.com
*.eletricistas.com
*.fertilizerblog.com
*.fototifo.com
*.fwp.in
*.gaydosh.com
*.honeybadgerpack.com
*.josefine.com
*.karelina.com
*.lawyer.sg
*.lescocars.com
*.lovinbluegrass.com
*.luxsor.com
*.madeja.com
*.mayana.com
*.mbanetworking.com
*.menmo.me
*.millstreetmarkets.com.au
*.modlily.co
*.molinahealthcare.co
*.mulnivasi.com
*.nails.au
*.nku.au
*.officialforeclosure.com
*.one3rdofturks.com
*.plantationteakfurniture.com
*.projectvinyl.com.au
*.renovationfinance.com.au
*.restructured.com.au
*.samoura.com
*.sandygardeningandlandscaping.com.au
*.shirtspacw.com
*.simcik.com
*.thezimbabwean.com
*.tours.com.sg
*.tqlb.com
*.truenorthmarketingservices.com
*.windstream.co
*.xcefappdigital.plus
*.zakou.com
*.zangrilli.com
aanntaylor.com
amorsen.com
andrijana.com
bendvacationrental.com
btccash.in
connexua.com
dancingwiththestart.com
divas.co.in
driftwater.com
elasesor.com
eletricistas.com
fertilizerblog.com
fototifo.com
fwp.in
gaydosh.com
honeybadgerpack.com
josefine.com
karelina.com
lawyer.sg
lescocars.com
lovinbluegrass.com
luxsor.com
madeja.com
mayana.com
mbanetworking.com
menmo.me
millstreetmarkets.com.au
modlily.co
molinahealthcare.co
mulnivasi.com
nails.au
nku.au
officialforeclosure.com
one3rdofturks.com
plantationteakfurniture.com
projectvinyl.com.au
renovationfinance.com.au
restructured.com.au
samoura.com
sandygardeningandlandscaping.com.au
shirtspacw.com
simcik.com
thezimbabwean.com
tours.com.sg
tqlb.com
truenorthmarketingservices.com
windstream.co
xcefappdigital.plus
zakou.com
zangrilli.com

Other certificates including the domain name xcefappdigital.plus

(limited to 100 certificates)
xcefappdigital.plus

Certificate

The complete raw certificate details for xcefappdigital.plus in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373819634910489342868418155945356114376091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 12:30:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 12:30:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xcefappdigital.plus'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795958782181348061393179648120678977320367618862884078138977689900749004028996322190090418392617887747248494899595801442822041392431576939368937869632964732029293771721491581248951060419044076304546663425702500716889073778443607058556618618708568541524994816587846769089228566186175913524702205193623957546466914002236880280098787474922161646499343182297012630817983669919852469217834260597720884898254494079402879124301843526815991089123451485948428531534709061504644337457516986012650558476712711986740309175048176316621527739720148949803342680364168420047451573088558970884582064351486923425211392433597181839855866707182746523986734370398008859301911853533155644368286780859962787929942629515032064105736124353840135169347278193983388067265000478492845687501857395688062343024049248969742797611891077470132296026604514643944676327708114702420928514624920786614759699572081177495389559219071154018783136787504017377116933787263576099923553295036891981291240067309799020820379484033107302727724905947007839237122456745766655875135201439971034351994740865550994632462137584048285684098481152661051835421813820306212051927617549824523480353742797281020565355852041422470374253504208477442280067863537503162312284642000740814110234143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d693ba913d51f4f1fd24a48be98510e6b858388e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aanntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amorsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andrijana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bendvacationrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btccash.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connexua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dancingwiththestart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.driftwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elasesor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eletricistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fertilizerblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fototifo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fwp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaydosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeybadgerpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.josefine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karelina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawyer.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lescocars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovinbluegrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxsor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madeja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbanetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menmo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millstreetmarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modlily.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.molinahealthcare.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mulnivasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nails.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nku.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officialforeclosure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one3rdofturks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plantationteakfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projectvinyl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renovationfinance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restructured.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samoura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandygardeningandlandscaping.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirtspacw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simcik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thezimbabwean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tours.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tqlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truenorthmarketingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windstream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xcefappdigital.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zakou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zangrilli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aanntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amorsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrijana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendvacationrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btccash.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancingwiththestart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driftwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elasesor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eletricistas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fertilizerblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fototifo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwp.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaydosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeybadgerpack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josefine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karelina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawyer.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lescocars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovinbluegrass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxsor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbanetworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menmo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millstreetmarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modlily.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molinahealthcare.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mulnivasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nails.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nku.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officialforeclosure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one3rdofturks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantationteakfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projectvinyl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovationfinance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restructured.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samoura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandygardeningandlandscaping.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirtspacw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simcik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thezimbabwean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tours.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tqlb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truenorthmarketingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windstream.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcefappdigital.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zakou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zangrilli.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a99092e6e000004030046304402206714ddc8d8445b8e94476620220229bb1c8550e0fc70126de85bb035f3a9860202202d266c2f4dac82fdea3b7fed731736d52e6780131c153d2f674ddf51bb932147007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a99092e6f0000040300473045022049562686538842951deabe8fe1f27c5c9986e3f3482dadf3076043b16a067dd90221009d6fe36c46a994bcae0e20a81a190554657f21ef1417131f13f097ef3f2ac5ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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