aurotech.org

Issued by R3

About this certificate

This digital certificate with serial number 04:61:ec:01:e2:e1:3f:e4:00:cd:69:1a:f6:56:d2:72:9b:2a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aurotech.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:ec:01:e2:e1:3f:e4:00:cd:69:1a:f6:56:d2:72:9b:2a
Serial Number (int): 381770240919344796408757626744828922600234
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:bd:8a:15:41:69:b6:e8:70:57:18:dc:8e:f3:d5:b5:49:3f:b1:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:ed:8d:de:ca:c3:54:70:14:b9:ac:7d:8d:55:e0:44:90:7b:d7:2a
Fingerprint (sha256): 62:4f:cc:d3:11:aa:b5:bb:ca:02:12:eb:f3:f4:f4:bb:06:72:63:da:6c:70:ee:07:66:e0:3e:5c:dc:fa:92:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aurotech.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aurotech.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a-finance.org
*.anotherdining.com
*.aurotech.org
*.banjercito.co
*.bijouxtocara.info
*.bindpartition.cn
*.boommediajo.com
*.ccipolicy.org
*.chaturbat.es
*.clarkmowandgo.com
*.counseling-ys.net
*.coupleszone.net
*.digiproleads.com
*.drumpupil.co
*.fgmusic.org
*.filippocurzi.com
*.flizhq.id
*.getyourplanerightontime.com
*.ggbases.co
*.graffity.org
*.gymshinestor.com
*.hinhnen.me
*.instintobinario.com
*.kayo-chan.com
*.lamesangeraie.com
*.lchzxk.biz
*.lngmetrology.info
*.longviewcptl.com
*.mac5enterprise.com
*.magic-affaires.com
*.niallmcclelland.com
*.nippybox.co
*.norastreetstyle.co
*.novayagazeta.co
*.onluyenthi.com
*.pioneerfarmflowers.com
*.qrtymfgdthkr.co
*.r393.com
*.seconnect.net
*.servantfootwear.co
*.tadeokids.com
*.thalesdocs.co
*.thetamilyogi.co
*.ticketswap.org
*.underwoodartfactory.com
*.vaadvogados.org
*.veg2bowls.co
*.video-people.com
*.watchdominion.co
*.yakiyama.com
a-finance.org
anotherdining.com
aurotech.org
banjercito.co
bijouxtocara.info
bindpartition.cn
boommediajo.com
ccipolicy.org
chaturbat.es
clarkmowandgo.com
counseling-ys.net
coupleszone.net
digiproleads.com
drumpupil.co
fgmusic.org
filippocurzi.com
flizhq.id
getyourplanerightontime.com
ggbases.co
graffity.org
gymshinestor.com
hinhnen.me
instintobinario.com
kayo-chan.com
lamesangeraie.com
lchzxk.biz
lngmetrology.info
longviewcptl.com
mac5enterprise.com
magic-affaires.com
niallmcclelland.com
nippybox.co
norastreetstyle.co
novayagazeta.co
onluyenthi.com
pioneerfarmflowers.com
qrtymfgdthkr.co
r393.com
seconnect.net
servantfootwear.co
tadeokids.com
thalesdocs.co
thetamilyogi.co
ticketswap.org
underwoodartfactory.com
vaadvogados.org
veg2bowls.co
video-people.com
watchdominion.co
yakiyama.com

Other certificates including the domain name aurotech.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for aurotech.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381770240919344796408757626744828922600234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 15:37:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 15:37:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aurotech.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849702073031517560923908096497401017256639597839498462321346772724736763000060277959563959790351436699003988228319724045329166721423340135736778184140175575900556235911252321081466769983815744549549487737474762822549506295507369094677301924565052550769791694012435640284075695749999111941967065706948111359385886440490346413210752267753532666664696195382909014102511329706300702253118321338014770858264372549900230014711372948143281741636433623967943692525570733161884222073341561961840861525332531224308268899685911417662069081030892970786189979654198719744537503576668039708588325236746107187844359756770155669024253547891469333713854309828683189940800414264722932310041892757105355088855424832398680431424527663271069557648401749253940078913916309425010926868913185803003312037397048295250273822831002735134723578696976969870899784680065382484172133279916059811924685785708689289987315487051267313249288918040764605856982850388494943072572895902080296559402784283623422476208150974150262303881259709529219920857811218861369112926860484670524852116410763220713835945697011544621699756903428043283663178873963041044093895212778116875534695862005126955410676277102322141157880508619759492526225388116898083014391758092971134940156189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61bd8a154169b6e8705718dc8ef3d5b5493fb169
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1796 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-finance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anotherdining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurotech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banjercito.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bijouxtocara.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bindpartition.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boommediajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccipolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaturbat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarkmowandgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.counseling-ys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coupleszone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiproleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drumpupil.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fgmusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filippocurzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flizhq.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getyourplanerightontime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggbases.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graffity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gymshinestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hinhnen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instintobinario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kayo-chan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamesangeraie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lchzxk.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lngmetrology.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longviewcptl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mac5enterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magic-affaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niallmcclelland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nippybox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norastreetstyle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novayagazeta.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onluyenthi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pioneerfarmflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qrtymfgdthkr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r393.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servantfootwear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tadeokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thalesdocs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetamilyogi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketswap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.underwoodartfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaadvogados.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veg2bowls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video-people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchdominion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yakiyama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-finance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anotherdining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurotech.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banjercito.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bijouxtocara.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bindpartition.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boommediajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccipolicy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaturbat.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarkmowandgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counseling-ys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupleszone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiproleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drumpupil.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgmusic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filippocurzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flizhq.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getyourplanerightontime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggbases.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graffity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymshinestor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hinhnen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instintobinario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kayo-chan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamesangeraie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lchzxk.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lngmetrology.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longviewcptl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac5enterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magic-affaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niallmcclelland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nippybox.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norastreetstyle.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novayagazeta.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onluyenthi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfarmflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrtymfgdthkr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r393.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seconnect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servantfootwear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tadeokids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thalesdocs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetamilyogi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketswap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwoodartfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaadvogados.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veg2bowls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-people.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchdominion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakiyama.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cf43c2dbc0000040300483046022100ff83d77861d95d5a76f352ef32e5ec8c04ceca192d01d4fba94aaff8c39456ce02210090b884b0b1d5252a1fe55ec0bf84b4e97dc514da2ed60b2bb59d9ff735853a78007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cf43c2dc7000004030046304402201c6be68c595615f28dd1175324b1982738a6b9d2bbf5b570136afb569efb459a02201b021216f75b3d94ae6168a54de7d439e071a08565fcd15077a09627307196c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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