cypa.us

Issued by R3

About this certificate

This digital certificate with serial number 03:76:7b:0a:1f:f6:cd:78:54:4d:19:a5:fb:43:ed:16:10:53 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cypa.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:7b:0a:1f:f6:cd:78:54:4d:19:a5:fb:43:ed:16:10:53
Serial Number (int): 301653724706710024217116927457107654348883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:38:56:cf:fe:0f:d2:1e:3c:4d:92:af:46:ac:7e:d2:56:c9:4c:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:fa:00:b2:b8:fc:cb:8d:a6:4e:95:22:41:2f:e9:19:0d:73:b2:d1
Fingerprint (sha256): 66:78:5c:fc:a6:47:56:75:77:8e:77:62:8c:d1:e3:9e:43:a8:8c:62:90:ec:22:92:82:98:f3:a4:5f:0b:54:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cypa.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cypa.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.autogrowlportal.com
*.beembee.com
*.bezwaar.com
*.buypopular.com
*.collegeboar.com
*.consolidatedebt.au
*.crenationwide.com
*.cukegirlblogspot.com
*.cyberliabilityinsurance.au
*.cypa.us
*.dalde.com
*.domainadvisors.au
*.educationoutletusa.com
*.ellierosa.com
*.fabricstoreuk.com
*.falabellaparaempresa.com
*.free-printable-calandar.com
*.freezedried.au
*.freightmanagement.au
*.gasfenosa.com
*.glassreplacements.au
*.gopaientco.com
*.grupomueblesvanessa.com
*.hindimovies4u.com
*.homedeliveries.au
*.hotelsbypostcode.com
*.icedcoffee.au
*.immowelt-de.com
*.ironworkersgear.com
*.javaroasted.com
*.jepanse.com
*.lactationconsultant.au
*.lifeisafrica.com
*.maruthicar.com
*.michaelkorscrossbody.com
*.motoristabr.com
*.myhpnmedicade.com
*.nasdcar.com
*.ntaflix.com
*.policygemius.com
*.prepaidcardstastus.com
*.prepaidcardstutus.com
*.prettynailsuk.com
*.safewayjust4u.com
*.segurocasa.com
*.tdmameritrade.com
*.vefuk.com
*.vipminus.com
*.vivinsolar.com
*.xn--pequein-8za.com
autogrowlportal.com
beembee.com
bezwaar.com
buypopular.com
collegeboar.com
consolidatedebt.au
crenationwide.com
cukegirlblogspot.com
cyberliabilityinsurance.au
cypa.us
dalde.com
domainadvisors.au
educationoutletusa.com
ellierosa.com
fabricstoreuk.com
falabellaparaempresa.com
free-printable-calandar.com
freezedried.au
freightmanagement.au
gasfenosa.com
glassreplacements.au
gopaientco.com
grupomueblesvanessa.com
hindimovies4u.com
homedeliveries.au
hotelsbypostcode.com
icedcoffee.au
immowelt-de.com
ironworkersgear.com
javaroasted.com
jepanse.com
lactationconsultant.au
lifeisafrica.com
maruthicar.com
michaelkorscrossbody.com
motoristabr.com
myhpnmedicade.com
nasdcar.com
ntaflix.com
policygemius.com
prepaidcardstastus.com
prepaidcardstutus.com
prettynailsuk.com
safewayjust4u.com
segurocasa.com
tdmameritrade.com
vefuk.com
vipminus.com
vivinsolar.com
xn--pequein-8za.com

Other certificates including the domain name cypa.us

(limited to 100 certificates)
cypa.us
cypa.us
cypa.us
leihtoilette.de
cypa.us
cypa.us
cypa.us
cypa.us

Certificate

The complete raw certificate details for cypa.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301653724706710024217116927457107654348883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 22:28:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 22:28:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cypa.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 777185094722161705553831744362492374661960544410376094341782870291574363754449367981566905827896081390011557838844137847758768786337962489395766289349790271896437619856642060143296347787363668596018638540163895415847270854151786325850946187041752546499531844524542606578611808748970187188951551081506575445622399526752397410128555571394431868168910504940412911042756938470776038137160414745066576907612382022271211763553240857341373702740160879578469285933076295080412360371645297516392859797595562571965679753759140720536508004054742944500103500796856633093239212928870107962761700581369294372499393927409197404741321052959524367752114434457959279002797024986721259630711068880656808095025337061532164588449966679842555081018498089069104030311726961161867886048504385542837263381329595108250232987886878698272450724998187398282658849130324386406498738398498420841016832008250236769848004218743982384629628871592434564745842606019333917334302010713528545747059249354828921544231147793791794336110628215323295122302816006301501817430644428359470385891645872356411283343650405377619288907748212633059224467878597720684454091968474213488837827510008426271267188928940009373918522920780358268534068510063453334080882261863283868548700147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d63856cffe0fd21e3c4d92af46ac7ed256c94cfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1956 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autogrowlportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beembee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bezwaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buypopular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegeboar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consolidatedebt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crenationwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cukegirlblogspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyberliabilityinsurance.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cypa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainadvisors.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educationoutletusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellierosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabricstoreuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.falabellaparaempresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.free-printable-calandar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freezedried.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freightmanagement.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gasfenosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glassreplacements.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gopaientco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grupomueblesvanessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hindimovies4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homedeliveries.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelsbypostcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icedcoffee.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immowelt-de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ironworkersgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javaroasted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jepanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lactationconsultant.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeisafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maruthicar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelkorscrossbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motoristabr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhpnmedicade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nasdcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntaflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policygemius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaidcardstastus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaidcardstutus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prettynailsuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safewayjust4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segurocasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdmameritrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vefuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipminus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivinsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--pequein-8za.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autogrowlportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beembee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezwaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buypopular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeboar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consolidatedebt.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crenationwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cukegirlblogspot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberliabilityinsurance.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cypa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainadvisors.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationoutletusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellierosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabricstoreuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falabellaparaempresa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'free-printable-calandar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freezedried.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freightmanagement.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasfenosa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glassreplacements.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopaientco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grupomueblesvanessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hindimovies4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedeliveries.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsbypostcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icedcoffee.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immowelt-de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironworkersgear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javaroasted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jepanse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lactationconsultant.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeisafrica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maruthicar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelkorscrossbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motoristabr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhpnmedicade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nasdcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntaflix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policygemius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidcardstastus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidcardstutus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prettynailsuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safewayjust4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurocasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdmameritrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vefuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipminus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivinsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--pequein-8za.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e447229bf000004030046304402207443ec34a1c69e70a2067f5c2a65718ddf408bb6158a3930e57046ec2865535d02206d9e31c0c52a454b81e67f7aa725a29a65b8756a1342713355babec33fdda91300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e447229a90000040300473045022100c97a09621f4714589f19659dc0b5f3402625d8044f8fc8b1a9f4b63a859d3df20220202408b2dbb1a36215e4f27c101c9e31f9e75459844321f60692cef9ea7dcd87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085ad8099cefe119ad8acd4d214dae80bc8cdbe550b45626bfac8bb5a0d85eaee6add4a9798bcb4b3c20335528309c70730a150b962a4ebc2d56054086ab81f95fcb683657c9a2c01042f3879cfed842013ee4debd922f78e162aba0303e41d0f76484866625e62842ec16260a1752c670009bbf0eb2ce5ad1ad5ea807bb057f6fb1cfa1751533b59fa0527a4706600b416a1448fb8ce240ba5de13d38e69712fa9a6c50fa452d8fbb72b70bfa2f3bb994b666b816f81238f32f9c858e9f390213c31fcd44124ae9ac60009351a6ca0192a599a77137e63e5b7e196d037fb29377f6826a1ed69834789aa3caae5f6a371891d53a151d37fe81cd7ab154d3bcc78