ravinto.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:44:f4:6f:7e:29:73:0f:1d:fd:83:c1:08:af:83:a1:b4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ravinto.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:44:f4:6f:7e:29:73:0f:1d:fd:83:c1:08:af:83:a1:b4
Serial Number (int): 273678679689924423867245379599388121473460
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:d3:f6:9f:f8:24:b5:25:ad:e9:32:72:32:f2:3d:ad:74:e2:29:9d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:d1:c0:bb:ae:b7:01:52:58:20:2a:f2:01:5d:50:4b:fd:7a:1a:5b
Fingerprint (sha256): 6a:b7:79:0f:ed:f9:69:8a:e5:0d:65:15:52:23:cb:90:58:4b:76:6c:c0:94:3c:86:fa:0b:97:56:c7:d6:c7:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ravinto.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ravinto.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5minuten.com
*.aerospheric.com
*.arterna.com
*.bnaimitzvah.com
*.buyrs.com
*.cashinlink.com
*.casma.com
*.cotizaciondeleuro.com
*.extraviados.com
*.flueler.com
*.freshtricks.com
*.fundulete.com
*.gestorias.net
*.greenbrier.cc
*.haendel.com
*.herboristeria.com
*.houtal.com
*.katsoulis.com
*.kawali.com
*.kebob.com
*.khoi.net
*.languirand.com
*.laurer.com
*.lineas.com
*.loyaltypunchcard.com
*.maiona.com
*.meetandgreets.com
*.miradero.com
*.myonlinecard.com
*.nuevawebmx.com
*.pacete.com
*.partens.com
*.qualvision.com
*.quecosacabrona.com
*.ravinto.com
*.rejuvenecimiento.net
*.seizon.com
*.slastyonoff.com
*.sosin.com
*.steelband.com
*.teawitch.com
*.tesdacourses.com
*.theamber.com
*.theconvention.com
*.turyaga.com
*.twerkaholics.com
*.twigsandsprigs.com
*.vistasms.com
*.xushuang.com
*.zoudai.com
5minuten.com
aerospheric.com
arterna.com
bnaimitzvah.com
buyrs.com
cashinlink.com
casma.com
cotizaciondeleuro.com
extraviados.com
flueler.com
freshtricks.com
fundulete.com
gestorias.net
greenbrier.cc
haendel.com
herboristeria.com
houtal.com
katsoulis.com
kawali.com
kebob.com
khoi.net
languirand.com
laurer.com
lineas.com
loyaltypunchcard.com
maiona.com
meetandgreets.com
miradero.com
myonlinecard.com
nuevawebmx.com
pacete.com
partens.com
qualvision.com
quecosacabrona.com
ravinto.com
rejuvenecimiento.net
seizon.com
slastyonoff.com
sosin.com
steelband.com
teawitch.com
tesdacourses.com
theamber.com
theconvention.com
turyaga.com
twerkaholics.com
twigsandsprigs.com
vistasms.com
xushuang.com
zoudai.com

Other certificates including the domain name ravinto.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ravinto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273678679689924423867245379599388121473460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 05:13:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 05:13:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ravinto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817376139252479185934678227116287329273805254515118265307329738869702668996597067891173134650789250305334592079483200784905087853902242859829075890269482147973820718893159792334075154360465004291027386533474122859425553523508168221059989167518380332163540345041533376991495708381155900823303858426178894060952084347087870107507910256634973381603814101640591551311180271891047188797244318040006138676694475723930658940866807304137100619667494652992313029793332954912663092275157152929023455078287793276201564483232842900248003337755354681096252276862024498948427171660849378737616231077942052784486688305359220027265804460634573047238021479524581473257681601423043770800751411579401066946158534013642786453797824733605913273609801921964446438377115278937441676542813080423513842567558706578760800503066273358092595905653716089545836132911481274947812522264168083998051622036472498219686048949475006700472742263426220661796277734042633513706672861628334070919374718159420214208376480502178399241905096893105102751951813889272744787127783859697516229796699241439250512075001784488562856104926299566317555924669055148320334154435209328776950504721023253169316439021802587035029919427944094014114536554656478108310212772630398479694471099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bd3f69ff824b525ade9327232f23dad74e2299d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5minuten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerospheric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arterna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnaimitzvah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashinlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cotizaciondeleuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extraviados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flueler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshtricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundulete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gestorias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenbrier.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haendel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herboristeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houtal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katsoulis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kawali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kebob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khoi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.languirand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laurer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loyaltypunchcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maiona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meetandgreets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miradero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myonlinecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuevawebmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quecosacabrona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ravinto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rejuvenecimiento.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slastyonoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sosin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steelband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teawitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tesdacourses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theconvention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turyaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twerkaholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twigsandsprigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistasms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xushuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoudai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5minuten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerospheric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arterna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnaimitzvah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashinlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotizaciondeleuro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraviados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flueler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshtricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundulete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestorias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenbrier.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haendel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herboristeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houtal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katsoulis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kawali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kebob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khoi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'languirand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lineas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyaltypunchcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maiona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetandgreets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miradero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myonlinecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuevawebmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quecosacabrona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravinto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejuvenecimiento.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seizon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slastyonoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steelband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesdacourses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theconvention.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turyaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twerkaholics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twigsandsprigs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistasms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xushuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoudai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f45fd1fda000004030046304402204ccd020d416376be1fd2a73d126d53b2bbdef5bedcab3bce60228d5c030e76e702205e3a371c068ef74facdc5864aa06145021a356ab6c19007e084e86ae7431bf970076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f45fd20100000040300473045022027db261982eeae809a7885cf54bf3af6af312ea83ab8a61e6874f3b04351159d022100a7614f3ec8bbcc841a738caf3dcb29e1e85cfc5bce86ad19c9cc63cd7dd73db8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064f60054581cc3d18d2decd5ec84a166bba0ff26e32cd0be3a466fd38ea9b939cf76235650c73a678c7344564e2dbb7daa899f57e624c484361a9683acfaed18a3e4c16e34c8c378baf762ae1266e53fff2f6444ea65cc9129564be4b6af4b7320ebc46d74ff8ba2fc23a316971e3fd8df1ebbad528de49fe8d8638f349a01061ad656cbbb25f94455401df2fceea671a2579f7f9597e327057ca803aac5bcf60a5e31397de262f52aafdbf4e09bd93be9b490a1a3ec0dee72ce7f31b9b6cc6b72a2f8e09b9574c66c0a0df55d63f1b1facc39a79d96bd961ef5ec5acb037ab3e4c43413e62ba68ee182cbc4026bd45c2a91d42bdf0c024efdfcd8d9b8852389