abordo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ed:f2:f4:20:27:4d:a8:b6:cc:66:2b:ec:91:7f:2e:98:59 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abordo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ed:f2:f4:20:27:4d:a8:b6:cc:66:2b:ec:91:7f:2e:98:59
Serial Number (int): 429419005434867874529944362193042994534489
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:f3:66:3d:cf:08:d0:9a:79:ef:c4:8b:8e:15:bc:48:e8:b5:ae:53
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:56:7d:0f:ca:dc:3d:54:e4:04:46:b9:03:0a:42:be:f8:f1:c0:7f
Fingerprint (sha256): 66:ed:ae:b4:b3:e8:f5:fe:bb:22:88:11:29:a7:e0:72:44:74:ad:7d:bc:f1:68:91:e0:6d:9e:be:c3:8a:4b:bc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abordo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abordo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2xingchen.com
*.abordo.com
*.alabama.cafe
*.anastadiadate.com
*.anastasiadata.com
*.beneficios-sociales-ar.com
*.brime.live
*.c9nn.com
*.checkrain.pro
*.cymplermails.com
*.delexilio.com
*.eroerotengoku.com
*.everthingbutt.com
*.facffebook.com
*.find-digitalmarketingjobs-es.info
*.floridadepartmentofcorrections.com
*.gsmempire.com
*.hentailicio.us
*.hmanhwan.net
*.honeyell.com
*.inaby.com
*.iraqi.church
*.jairocarioca.com
*.jamesvillepizza.com
*.kirvin.com
*.laid.live
*.littlebooklane.com
*.marks.repair
*.nordstsroms.com
*.northcarolina.direct
*.payonee.com
*.physio.cards
*.polygonhomeloans.com
*.priceless-poses-photography.com
*.shangbaozhai2012.com
*.solar-movie.pro
*.springfield.clothing
*.stvincentcatholicchurch.org
*.superiorlocal.com
*.tacoma.direct
*.thathotelwasgood.com
*.the-science-mom.com
*.thewebisnice.com
*.top1-seo-service.com
*.xsm18.com
*.xsm93.com
*.xubep1.com
*.ygf144.com
*.yohdr.com
*.zwgay.com
2xingchen.com
abordo.com
alabama.cafe
anastadiadate.com
anastasiadata.com
beneficios-sociales-ar.com
brime.live
c9nn.com
checkrain.pro
cymplermails.com
delexilio.com
eroerotengoku.com
everthingbutt.com
facffebook.com
find-digitalmarketingjobs-es.info
floridadepartmentofcorrections.com
gsmempire.com
hentailicio.us
hmanhwan.net
honeyell.com
inaby.com
iraqi.church
jairocarioca.com
jamesvillepizza.com
kirvin.com
laid.live
littlebooklane.com
marks.repair
nordstsroms.com
northcarolina.direct
payonee.com
physio.cards
polygonhomeloans.com
priceless-poses-photography.com
shangbaozhai2012.com
solar-movie.pro
springfield.clothing
stvincentcatholicchurch.org
superiorlocal.com
tacoma.direct
thathotelwasgood.com
the-science-mom.com
thewebisnice.com
top1-seo-service.com
xsm18.com
xsm93.com
xubep1.com
ygf144.com
yohdr.com
zwgay.com

Other certificates including the domain name abordo.com

(limited to 100 certificates)
hairgrowfast.com
valivet.com
*.abordo.com
nccaa.com
arizonaopry.com
nccaa.com
laure.com
abordo.com
floridadepartmentofcorrections.com
alunizaje.com
caredealer.com
nccaa.com

Certificate

The complete raw certificate details for abordo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429419005434867874529944362193042994534489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 20:16:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 20:16:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abordo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716102761127713730745820245508986463872145967497753855848197434640533439969409860958290513665032043388410286039212283465439897649165889379952363554767437096519656045451297711890137973848267083899578328193847653495819020526784772693807568253212226567579328140369447927633288864420362903086734812632940514875550407533895772659558535070593489349722157884801258192942176178568351620762703624473399067966532170376013644047086660379710996443595393473030672866657704265892067776055382800948532929841404571735055387616493243316448279952713932517416928333651658578687885048184212328176459170588042825120229496218061977984389159322467653398622603277545817492721867797996174947174269389305263781407845412112108976680132157711549677297829244511333563204147777526482294917142734106159488109166480318543725694133095021111348142678446384608041602199145670644284784843167780810777094888580885304525148802083009590968178306680444143486039474145202588461325663357466373264227340806481017359395936415979128673760150576460791805386476597380453526194781273236750243645196112427757925294813435098347361632995471820164175923828233878400200162280280908159767767875700591033806724476435012998072245424318646462614764901699812054970160261270344501702477666231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8f3663dcf08d09a79efc48b8e15bc48e8b5ae53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2xingchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alabama.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anastadiadate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anastasiadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beneficios-sociales-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brime.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c9nn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkrain.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cymplermails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delexilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eroerotengoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everthingbutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facffebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.find-digitalmarketingjobs-es.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floridadepartmentofcorrections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsmempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hentailicio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmanhwan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iraqi.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jairocarioca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamesvillepizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laid.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littlebooklane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marks.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordstsroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcarolina.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payonee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physio.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polygonhomeloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.priceless-poses-photography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shangbaozhai2012.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solar-movie.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.springfield.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stvincentcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superiorlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacoma.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thathotelwasgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-science-mom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewebisnice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.top1-seo-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsm18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsm93.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xubep1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ygf144.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yohdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zwgay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2xingchen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abordo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabama.cafe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anastadiadate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anastasiadata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficios-sociales-ar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brime.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c9nn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkrain.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cymplermails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delexilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroerotengoku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everthingbutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facffebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'find-digitalmarketingjobs-es.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridadepartmentofcorrections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsmempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentailicio.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmanhwan.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeyell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inaby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iraqi.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jairocarioca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesvillepizza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laid.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlebooklane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marks.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordstsroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcarolina.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payonee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physio.cards'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polygonhomeloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priceless-poses-photography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shangbaozhai2012.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solar-movie.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'springfield.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stvincentcatholicchurch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiorlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacoma.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thathotelwasgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-science-mom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewebisnice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'top1-seo-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsm18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsm93.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xubep1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygf144.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yohdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zwgay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e86ec0d560000040300473045022100f18938a818215a68d067f2f361f8c7bac5f41a275d8496046c570b3e55010e19022014c4239064ce89a5e38f8ca8649caed694c15bc7789debfa80ddc98a250159f6007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e86ec0d2e0000040300483046022100c5433a3e7f279b8f29fd758c2726dfbf3aab5d96abbd918e234f2ab8c3071f5f0221009dd366f4a8dbe34d324e8d30474b1126cc5d7e3e441344a1b23c1a5f422ef1e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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