pottermor.com

Issued by R3

About this certificate

This digital certificate with serial number 04:88:b5:6e:e2:39:17:22:3e:6a:23:71:d2:a7:0a:60:6c:91 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pottermor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:88:b5:6e:e2:39:17:22:3e:6a:23:71:d2:a7:0a:60:6c:91
Serial Number (int): 394968711636527861463588243806051274615953
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2a:fa:b0:db:e2:79:f3:43:6e:89:f9:ec:06:3b:e6:f9:26:18:c0:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:e9:74:a5:ff:22:1d:81:51:f1:21:8a:8d:40:4c:d9:57:21:4c:65
Fingerprint (sha256): 60:e2:d5:17:23:bd:53:60:4d:d5:ea:2a:1c:91:1e:e7:10:1b:92:20:6b:1e:ca:69:92:50:99:ea:d3:e7:6f:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pottermor.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pottermor.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.16personalities.co
*.aghabi.com
*.agustinas.com
*.androgene.com
*.avies.es
*.bhaktiyogi.com
*.bicyclingblog.com
*.broenells.com
*.caesrs.com
*.calhounaircenter.com
*.capgemini.co
*.careeban.com
*.cenen.com
*.chongxi.com
*.daluthtrading.com
*.eke.com.au
*.estimulos.com
*.farkad.com
*.freeone.com
*.giftswag.com
*.haobi.com
*.hifinancing.com
*.hillside-mhp.com
*.honeymooncruise.com.au
*.hosekits.com
*.kauhane.com
*.kiyani.com
*.laroja.es
*.liste-des-annuaires.com
*.motion.es
*.motorenlinea.com
*.myhdfs.co
*.myshelter.com
*.nguyendo.com
*.phuketvacationrental.com
*.pottermor.com
*.proxyspotting.in
*.quotev.co
*.rivadavia.com
*.semengresik.com
*.soc.com.pl
*.sportsbar.pw
*.suedbayern.com
*.thhredup.com
*.thorneside.com.au
*.trackingsystem.com
*.trrendmicro.com
*.vendorconsultants.com
*.wancho.com
*.yase186.com
16personalities.co
aghabi.com
agustinas.com
androgene.com
avies.es
bhaktiyogi.com
bicyclingblog.com
broenells.com
caesrs.com
calhounaircenter.com
capgemini.co
careeban.com
cenen.com
chongxi.com
daluthtrading.com
eke.com.au
estimulos.com
farkad.com
freeone.com
giftswag.com
haobi.com
hifinancing.com
hillside-mhp.com
honeymooncruise.com.au
hosekits.com
kauhane.com
kiyani.com
laroja.es
liste-des-annuaires.com
motion.es
motorenlinea.com
myhdfs.co
myshelter.com
nguyendo.com
phuketvacationrental.com
pottermor.com
proxyspotting.in
quotev.co
rivadavia.com
semengresik.com
soc.com.pl
sportsbar.pw
suedbayern.com
thhredup.com
thorneside.com.au
trackingsystem.com
trrendmicro.com
vendorconsultants.com
wancho.com
yase186.com

Other certificates including the domain name pottermor.com

(limited to 100 certificates)
chelsealatestnews.com
fortnitepop.com
avies.es
gashi-international.com
gamegeardirect.com
happymea.com
pottermor.com
medicinedrops.com
accuradio.de
clohessy.com
panlook.cn
vacancearabais.com
clohessy.com
briandowd.com.au

Certificate

The complete raw certificate details for pottermor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394968711636527861463588243806051274615953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 10:49:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 10:49:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pottermor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698288203145690783845997846618450324205042862547398153246419928749204340891629970614262849525399279758167012619803328872242070214912912974988817689257143002707495625984891133574748339384064444320551291047681533713568413907358222023889641882956658835718977951992062501763638551756404466871887026834905982675380582229072744804716999543526491671142392002967554319288967718530395616252879079374160311531671781211320969887652251261534744429412265874740169389003017402104754615101988231164005903128202953652354956301582167335022395958011992643973787308045050309569000834767081594395788723738276572194213600052586086251294956142207367477849175737241455271198427289512997155754739937783626216011548063774214593980197857941395637024258367523246445704272124331577527397615877653865953215962120915809662589663027419100220066373323309911552186362749348789236017569794921202379692278264973103170425426343502243103834750774720023030695160806523755112766479603474516340464222218310048263822378082149415016524418224374915532318982526349119907947392462812838729388720288994225697694388487391339658846859002289005325023515783045431909767825198765458398601374598710045889981924698863012822918655028088937366503200378987839558811793234662535919631533457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2afab0dbe279f3436e89f9ec063be6f92618c015
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.16personalities.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aghabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agustinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.androgene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avies.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhaktiyogi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicyclingblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broenells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caesrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calhounaircenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capgemini.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careeban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cenen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chongxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daluthtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eke.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estimulos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farkad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giftswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hifinancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillside-mhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeymooncruise.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosekits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kauhane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiyani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laroja.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liste-des-annuaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhdfs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myshelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nguyendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phuketvacationrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pottermor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxyspotting.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivadavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semengresik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soc.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsbar.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suedbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thhredup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thorneside.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trackingsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trrendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vendorconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wancho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yase186.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16personalities.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aghabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agustinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'androgene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avies.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhaktiyogi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicyclingblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broenells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caesrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calhounaircenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capgemini.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careeban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cenen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chongxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daluthtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eke.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estimulos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farkad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hifinancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside-mhp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeymooncruise.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosekits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauhane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiyani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laroja.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liste-des-annuaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorenlinea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhdfs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myshelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nguyendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuketvacationrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottermor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxyspotting.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivadavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semengresik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soc.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbar.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suedbayern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thhredup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thorneside.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackingsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trrendmicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendorconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wancho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yase186.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018963af39cd0000040300463044022059a612b27ce921387952c41b542039bdff3c9d1c3336f05ba86ee4cf1d68cb0b022012e9158be32c0010db0e8fe7663bdbb2b72f79432fd0e9a8e4e1da33065da7ca007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018963af39f8000004030047304502204e5774f151fdd082f3d6625e58ecc340926cf0e60ce60fdbbd86b4e73b0c8713022100e8dc233517309d1475f08624cc49bbf6d498d02df3d9b103e4c1d61b88ccb1e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00329e9aea6f4b89bf339cfe1d8486a479be9771c664ceeb35ed1f534ebedc408890e5f2edf5dd102b834dc874976c7e4a05aadc3806d3efceb441ae29de103fb7aa86a6e9fbac64aa8f2c1027b2112cda251ebd1dea8b28909c989915251d11037efdc9f2818657d32408cd5ae76cccdbeac2953752d734a06b0b31276e49322a2001a40a5b65093268c62bea6c297753e38b8ae65aa4ab8f02a9309307d4045589da418b182f192e51be94628214217fa9d8ddc59621aaec103c5d2456ea0babbca04faa0933d4c05f3ea87d7e47213308e01e06d8cefa694efadb4d4a9ac8ffa10ac5aed31c07fb73c3c38ba24f10fbcc72b57dfcdab2dad5708b9dfb276d5a