guardamovel.com

Issued by R11

About this certificate

This digital certificate with serial number 03:87:00:27:ee:41:60:fc:ec:32:92:ac:d2:ec:a7:1e:33:c6 was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=guardamovel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:87:00:27:ee:41:60:fc:ec:32:92:ac:d2:ec:a7:1e:33:c6
Serial Number (int): 307275184661578247923890314271680439923654
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:3a:ef:2a:45:9c:40:b0:36:84:83:47:3d:dc:6e:dc:6b:7e:50:c8
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 42:18:97:06:98:c7:97:58:e2:ac:94:ce:c3:d3:ad:99:64:bd:5d:8e
Fingerprint (sha256): 61:99:a5:b7:87:94:78:4f:d8:28:71:e8:14:dc:9e:40:ad:88:dc:d7:e5:a8:4a:86:b2:95:cc:af:6b:5a:ec:ad

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate guardamovel.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for guardamovel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.argon.run
*.avsim.online
*.balticnet.de
*.bancodeareia.com
*.beancapital.com
*.bearasset.com
*.boletindarsenas.es
*.card-shop.live
*.cavalomarinho.com
*.coinfriday.com
*.corretorabitcoin.com
*.ctran.org
*.dailymotion.me
*.disenaturopa.net
*.ecografiaroma.it
*.embodiworks.org
*.expo-ocio.es
*.fingerprintproductions.com.au
*.guardamovel.com
*.imovelshow.com
*.interviewquestions.com
*.istanbuldedikodu.com
*.llzf.xyz
*.localxh6.com
*.mansoes.com
*.miningrig.com
*.northcyprustourism.com
*.odesk-tests.net
*.ofori.club
*.poodleinucoin.com
*.prefixinsert.com
*.project2degrees.org
*.read-kingdom-manga.online
*.receivebitcoins.com
*.riopreto.com
*.saintluciatourism.com
*.smartbuildingskin.com
*.soapdayx2.to
*.solarconditioner.com
*.stealthaddress.com
*.styxcapital.com
*.suntyfeed.com
*.testvelocitaadsl.it
*.velomovil.com
*.voleidepraia.com
*.w777.club
*.xing-nutzen.com
*.xn--90aqcndw3l.com
argon.run
avsim.online
balticnet.de
bancodeareia.com
beancapital.com
bearasset.com
boletindarsenas.es
card-shop.live
cavalomarinho.com
coinfriday.com
corretorabitcoin.com
ctran.org
dailymotion.me
disenaturopa.net
ecografiaroma.it
embodiworks.org
expo-ocio.es
fingerprintproductions.com.au
guardamovel.com
imovelshow.com
interviewquestions.com
istanbuldedikodu.com
llzf.xyz
localxh6.com
mansoes.com
miningrig.com
northcyprustourism.com
odesk-tests.net
ofori.club
poodleinucoin.com
prefixinsert.com
project2degrees.org
read-kingdom-manga.online
receivebitcoins.com
riopreto.com
saintluciatourism.com
smartbuildingskin.com
soapdayx2.to
solarconditioner.com
stealthaddress.com
styxcapital.com
suntyfeed.com
testvelocitaadsl.it
velomovil.com
voleidepraia.com
w777.club
xing-nutzen.com
xn--90aqcndw3l.com

Other certificates including the domain name guardamovel.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for guardamovel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307275184661578247923890314271680439923654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 19:23:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-08 19:23:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'guardamovel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671361082813777946125033443242436359595660398094530522125110274500903156332911575259458681329006988461416644757838244779983947514234089193368368551037849541932916835667719440292257295501656619330634875860987656271263384252419300967591972576960531354878220675341088469152212069454067563929415359214676163748356730858563980406855814600234635298363138768374989372829418232359966923813776292410481502662502303436016005975331908990990336826220823804586569394955606411742829429534563127420871630023888681973545150087801890049148405595316315302082301411640773779612976630463661931144735882029323957155795936108769723877107581695628592834302742524050090409359885316810273549528752440573475725344188774538515497639900459654535308049837301012706433057948729392050120295293390994978743440705034069995698258971045930923377681079517879409324076686563805261592186007513888410374537960706180863363931442174932170624851997928820647377454284229029813180210347203475785964767117979789455328391976030058139067994704291874748383895969816907053882106205397856961938319528011116830783431923962547109351946810562773346603200298117810146196440586278567673116295515575247291167325479725487585994213562379089486367144191229783452256188423306826693315411939529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e3aef2a459c40b0368483473ddc6edc6b7e50c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.argon.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avsim.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balticnet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancodeareia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beancapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bearasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boletindarsenas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.card-shop.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cavalomarinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinfriday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corretorabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctran.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailymotion.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disenaturopa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecografiaroma.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embodiworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expo-ocio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fingerprintproductions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardamovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imovelshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interviewquestions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istanbuldedikodu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llzf.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.localxh6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mansoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miningrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcyprustourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.odesk-tests.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ofori.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poodleinucoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prefixinsert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project2degrees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.read-kingdom-manga.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.receivebitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riopreto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saintluciatourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartbuildingskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soapdayx2.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarconditioner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stealthaddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.styxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suntyfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testvelocitaadsl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velomovil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voleidepraia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w777.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xing-nutzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--90aqcndw3l.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'argon.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avsim.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balticnet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancodeareia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beancapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearasset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boletindarsenas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card-shop.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cavalomarinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinfriday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corretorabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctran.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailymotion.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disenaturopa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecografiaroma.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embodiworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expo-ocio.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fingerprintproductions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardamovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imovelshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interviewquestions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istanbuldedikodu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llzf.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localxh6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mansoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miningrig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcyprustourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odesk-tests.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofori.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poodleinucoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefixinsert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project2degrees.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'read-kingdom-manga.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receivebitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riopreto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintluciatourism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartbuildingskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapdayx2.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarconditioner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stealthaddress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styxcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntyfeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testvelocitaadsl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velomovil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voleidepraia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w777.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xing-nutzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--90aqcndw3l.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019003d19e5c000004030046304402204a98fe3d9dc32d3e8c35242607ad81672d27967f7f5476f85f2496c2c3fad40c02200b702151e178dda760ae863ee26bdc03590e1da207d618b1d268836f3c6fae5a0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019003d19e660000040300483046022100be89e486e8bc57d1688d097f98c83a2134bf071363d85c9e6bb91e1e274e42fa022100dffd22cc3d82b53498e05826423ebda86830c093880855872dc985b34c73f4da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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