livingwatersd.org

Issued by R3

About this certificate

This digital certificate with serial number 04:29:39:db:71:54:86:70:c1:4a:90:76:ae:38:bc:ea:c0:18 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=livingwatersd.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:29:39:db:71:54:86:70:c1:4a:90:76:ae:38:bc:ea:c0:18
Serial Number (int): 362477626178180281088137141391982456389656
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:e9:f4:65:98:a3:2a:33:b6:3a:34:d8:eb:7a:8f:2d:ea:ae:d9:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:5c:6d:8c:6e:37:47:6b:5d:ea:2d:21:af:16:6f:48:2f:0f:c2:d3
Fingerprint (sha256): 66:ef:07:ad:fb:ad:af:78:5b:eb:40:54:6a:80:b3:08:e0:ae:c5:0d:65:a0:8b:ae:91:59:80:f1:d7:e9:dc:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate livingwatersd.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livingwatersd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agsha.net
*.almacogan.com
*.altorathalmasehy.com
*.americanclassicnow.com
*.amymetcalfe.com
*.anchitspace.com
*.artbelleza.org
*.azcentralpromo.com
*.benidormclubdeportivo.org
*.bioskopin21.xyz
*.bistrobeppo.com
*.buranding.com
*.cholesterol-chart.com
*.clinicabrelo.com
*.csgopen.com
*.cumcow.com
*.deenile.com
*.dev47appps.com
*.filmsenzalimiti.info
*.forest-fragrance.com
*.goparking.info
*.gtracklive.com
*.hatsu-yuki.com
*.hiitss.info
*.hujantoto75.com
*.ibomma.mobi
*.ingenimundi.com
*.kurtgutenbrunner.com
*.lesbauxmaisonartistes.com
*.livingwatersd.org
*.mangata.space
*.mantraregalos.com
*.mcallenmotorsports.com
*.memphisyouthsoccer.com
*.nikeki.com
*.picacgmic.com
*.redlaks.com
*.restaurant-mangobay.com
*.richcoastcr.com
*.sanalarkadas.xyz
*.saooz.com
*.skirenn.com
*.tapestryontheriverapartments.com
*.treoutlet.com
*.uuyishu.com
*.vitaldistance.com
*.vstorehub.com
*.wsotv.com
*.yoga05.com
*.zarephathacademy.org
agsha.net
almacogan.com
altorathalmasehy.com
americanclassicnow.com
amymetcalfe.com
anchitspace.com
artbelleza.org
azcentralpromo.com
benidormclubdeportivo.org
bioskopin21.xyz
bistrobeppo.com
buranding.com
cholesterol-chart.com
clinicabrelo.com
csgopen.com
cumcow.com
deenile.com
dev47appps.com
filmsenzalimiti.info
forest-fragrance.com
goparking.info
gtracklive.com
hatsu-yuki.com
hiitss.info
hujantoto75.com
ibomma.mobi
ingenimundi.com
kurtgutenbrunner.com
lesbauxmaisonartistes.com
livingwatersd.org
mangata.space
mantraregalos.com
mcallenmotorsports.com
memphisyouthsoccer.com
nikeki.com
picacgmic.com
redlaks.com
restaurant-mangobay.com
richcoastcr.com
sanalarkadas.xyz
saooz.com
skirenn.com
tapestryontheriverapartments.com
treoutlet.com
uuyishu.com
vitaldistance.com
vstorehub.com
wsotv.com
yoga05.com
zarephathacademy.org

Other certificates including the domain name livingwatersd.org

(limited to 100 certificates)
livingwatersd.org
fasteyes.com
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
livingwatersd.org
acupunctureoceanbeach.com

Certificate

The complete raw certificate details for livingwatersd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362477626178180281088137141391982456389656
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 22:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 22:03:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livingwatersd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780902953078908645081991184040468337098339356095925651486544938047317608297853748241822520908613448605500496465292854262195420343999797778744828203551820694828053069983009315974747846319062815613568598359431316395359890704289029894062213944518796489274204266686358348678101583904108322740010041017755596871517538569641481179369691479582170960594097624399134344549597947665410805616099808094012281689979363389474180127169926389179370785148851692730282847305573319042504931118127416977565447604492362448298115448654136843241459445552378377141892288962909197875552951253689905489089537095428019692320407394646531081432089005850665484366043314906282002267126559969162710413498611725250076914981876595587880769449054019461812211109761265100505043248185508714177764249130392964038579518157275605450034045245054300418356990536701998182699384205453027549718477511223652324031128800128104760996717674563489770602380025930978351575822068406532151799772312299333055676257447260569225047799242136331801196674630008982836369988118917932960164025510382069657084224528921884483074811968345011666414818703891724903430315740804976190197470725361052627648984207233935867019437012603382130293060125675233217296835665028564953513750842650798657497885213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20e9f46598a32a33b63a34d8eb7a8f2deaaed969
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1864 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agsha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almacogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altorathalmasehy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanclassicnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amymetcalfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anchitspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artbelleza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azcentralpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benidormclubdeportivo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioskopin21.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bistrobeppo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buranding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cholesterol-chart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicabrelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csgopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumcow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deenile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev47appps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmsenzalimiti.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forest-fragrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goparking.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtracklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hatsu-yuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiitss.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hujantoto75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibomma.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingenimundi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurtgutenbrunner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesbauxmaisonartistes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangata.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mantraregalos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcallenmotorsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memphisyouthsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nikeki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picacgmic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redlaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurant-mangobay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richcoastcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanalarkadas.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saooz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skirenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapestryontheriverapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uuyishu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitaldistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vstorehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoga05.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zarephathacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsha.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almacogan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altorathalmasehy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanclassicnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amymetcalfe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anchitspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artbelleza.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azcentralpromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benidormclubdeportivo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioskopin21.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bistrobeppo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buranding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cholesterol-chart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicabrelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumcow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deenile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev47appps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmsenzalimiti.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forest-fragrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goparking.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtracklive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hatsu-yuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiitss.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hujantoto75.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibomma.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingenimundi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurtgutenbrunner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesbauxmaisonartistes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingwatersd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangata.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantraregalos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcallenmotorsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memphisyouthsoccer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikeki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picacgmic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redlaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant-mangobay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richcoastcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanalarkadas.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saooz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skirenn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapestryontheriverapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treoutlet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uuyishu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaldistance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vstorehub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoga05.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zarephathacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fb1ff29dc0000040300483046022100fc2a861903ca715e9987cd2c9e376c13cf89b9397554d85250ed24331fd00ec9022100f84b47da9c7dc92739743ef1c3abb087f54b7caa418965f821cb657b3d8abf8b007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fb1ff2a9e0000040300483046022100b94a3699408bad8dc528eb5a9b8334ee3ebdc5c40bf7c447639401d5dc9d7359022100c2980710ab3e91ea0e2778c694f3a07f3d9736f8a0c08798341003e0807be8f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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