medicatr.com

Issued by R3

About this certificate

This digital certificate with serial number 03:96:5a:f1:2d:ab:0b:56:67:b4:31:44:06:3a:0c:ca:05:23 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=medicatr.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96:5a:f1:2d:ab:0b:56:67:b4:31:44:06:3a:0c:ca:05:23
Serial Number (int): 312500095622845015528118312205484955403555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:95:85:54:fe:28:b1:16:69:23:94:a8:6b:32:77:c8:a0:dc:9e:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 59:3e:55:0c:da:21:4b:34:a7:46:6b:2a:a8:08:1f:19:72:8a:c5:6c
Fingerprint (sha256): 6b:b9:11:7e:76:03:33:23:97:8b:6c:01:23:d9:a0:09:66:f1:bf:18:14:cc:19:25:3c:63:1e:9f:10:9f:8b:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate medicatr.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for medicatr.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advanceameria.net
*.agridulce.net
*.attwireess.com
*.bakuland.net
*.balsa.com.au
*.barunmovie.com
*.bcj14-25.org
*.brodiams.com
*.cabintent.org
*.catpadcoin.com
*.cbseresult2015.com
*.ccaafoundation.org
*.chosindabazomhloba.com
*.customloanquotes.com
*.delicatediscovery-tocomprehendtoday.info
*.download-computer-games.com
*.dudabrack.com
*.egardinen.de
*.eggray.me
*.elquin.com
*.exoert.de
*.finafeliz.de
*.firex.cc
*.forgedtools.com
*.globalranks.co
*.heartoftea.com
*.jmartinsprodutosopticos.com
*.katelynrausch.com
*.lonelyheartsclub.com.au
*.lovingfotografia.com
*.loyal.com.au
*.luchaysiesta.com
*.medicatr.com
*.mobilephoneblog.com
*.nextdaysale.com
*.onhotnews.com
*.plainlocalschools.org
*.playstationgiftcards.com
*.sguialo.com
*.sistemassisdca.com
*.streamstv.live
*.stromcarlson.com
*.swingstockexchangpro.com
*.tabletrack.com
*.technogin.com
*.transoriente.com
*.voicebomb.com
*.web88design.com
*.wwcmskchp.com
*.xax.in
advanceameria.net
agridulce.net
attwireess.com
bakuland.net
balsa.com.au
barunmovie.com
bcj14-25.org
brodiams.com
cabintent.org
catpadcoin.com
cbseresult2015.com
ccaafoundation.org
chosindabazomhloba.com
customloanquotes.com
delicatediscovery-tocomprehendtoday.info
download-computer-games.com
dudabrack.com
egardinen.de
eggray.me
elquin.com
exoert.de
finafeliz.de
firex.cc
forgedtools.com
globalranks.co
heartoftea.com
jmartinsprodutosopticos.com
katelynrausch.com
lonelyheartsclub.com.au
lovingfotografia.com
loyal.com.au
luchaysiesta.com
medicatr.com
mobilephoneblog.com
nextdaysale.com
onhotnews.com
plainlocalschools.org
playstationgiftcards.com
sguialo.com
sistemassisdca.com
streamstv.live
stromcarlson.com
swingstockexchangpro.com
tabletrack.com
technogin.com
transoriente.com
voicebomb.com
web88design.com
wwcmskchp.com
xax.in

Other certificates including the domain name medicatr.com

(limited to 100 certificates)
medicatr.com
medicatr.com
medicatr.com

Certificate

The complete raw certificate details for medicatr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1idlbtTlLnzBHxVjAV0X
FkPMZbwJ1hpWUcFbWzz+UAgcSuPzugRViqwAs80n44MzWme2djT1Ukk24rQUIH0M
dY4UCFkj8potsFlcAN+aPrbWvUOlcfCEYmj39Fg3Wd5kLX2Ug07b+UQinRw4Qu6t
64F4PqLAMHnMspQNnyt3r2Pkjg4+jaRxJgFftJoQSlXguBtP70+NdG9xlhjpHq/l
dBwUGLueNHuXvcxEmFWm5U5gtYIyt7QYnDxOzE73ZiscQCX4WwLaF/p842U8kbqs
/el7liJ9BJNUZvoY6/g5cGNLYmQRb8zoR0bQTH3lu1PKWkthXMvkwPs0cFblqv25
+lxkjigTYdWCeSbwVxvY3/4DG7o2ladc1Jrt0X07OZOsHpeEfSQJKzhfR824vZcG
oYAnVJb7uhzvRm2ULVcqcCNvex9GwKqF4j6SRV9SED3GJtLdkNy2McmOKY7PQxGf
C3MbZaSLij82bFLkR76JrNgCzLIJw6JlsOYZhjEu+D8krjcFUnGYexogfBNPJcVB
FxcN65GdGy8DuE/He2n6BgssSRo7R1j2jvf3aodNkdZ9ltxFYkQaHFn1ubVdhply
CrF1Oh8woE9hV1MolQWgH5EgJMPLXFMvEu0Y5kYXTf0okx/39WKUKngKQ9RzcIhk
ZYa6ny33NyiCMqfed1f/XVMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312500095622845015528118312205484955403555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 19:57:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 19:56:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'medicatr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873671653076004185347783823330397573385837093246328300102233212274857496740228215793879433778669454627060425525061459530225583625367634568996574044307163335649799377763858733316240338741116802109853531619384462473639194184092605655369287587387047049690820652648351065901525425821580065488129717581740821310959473986306571515854283042985006433458451072726927198811882375230745410760206629870965089785900806440554800931456678252516329310640117153579018580177550219604893672316908589540917769012603953758173046783049214369844415388612815170052078183080316065114096273192374628039922804725492559264855184182833233829095503870560210271250050699474411183002172076010437877640613091595218829703315626907962639225401859517653002765290128473773732903832972007058241371252156675293427520302562188228055777538272043358041319973194746421436451830209129015377776658122223588823079764705584929651179242836338304933170950166119190856426598585050959952437706439095360491551346775516384658591133511912939966150453442653478185752964000700020100933184349405332829668881444983260425508994404805397213721771427414041488879450671054444745823636121281792800801433930833266714088699158292000420036849212313769628914333963451397170287234641886624559688277331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20958554fe28b116692394a86b3277c8a0dc9ec5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanceameria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agridulce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attwireess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakuland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balsa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barunmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcj14-25.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brodiams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabintent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catpadcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbseresult2015.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chosindabazomhloba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customloanquotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delicatediscovery-tocomprehendtoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.download-computer-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dudabrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egardinen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eggray.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elquin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exoert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finafeliz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forgedtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalranks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartoftea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmartinsprodutosopticos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katelynrausch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonelyheartsclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovingfotografia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loyal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luchaysiesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicatr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilephoneblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextdaysale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onhotnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plainlocalschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playstationgiftcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sguialo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sistemassisdca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamstv.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromcarlson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swingstockexchangpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabletrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transoriente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicebomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web88design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwcmskchp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xax.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceameria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agridulce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attwireess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakuland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balsa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barunmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcj14-25.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brodiams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabintent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catpadcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbseresult2015.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccaafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chosindabazomhloba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customloanquotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delicatediscovery-tocomprehendtoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-computer-games.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dudabrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egardinen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eggray.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elquin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exoert.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finafeliz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firex.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgedtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalranks.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartoftea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmartinsprodutosopticos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katelynrausch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonelyheartsclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovingfotografia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luchaysiesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicatr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilephoneblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextdaysale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onhotnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plainlocalschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playstationgiftcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sguialo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sistemassisdca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamstv.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromcarlson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swingstockexchangpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transoriente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicebomb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web88design.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwcmskchp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xax.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e399aa5dd000004030047304502206ffaf0d210c0b5b7c8da71d6e60c6a1c703bec54ab6e2e07516478121276529f022100c9508f1e3a93f7b1e154fe119de00592467677e101651f0ffcff0aac2235d8d000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e399aa6330000040300473045022100fab8f94a8e6a6fa0ec4d5a3055dd62227187a378ad0659d0d25d61901799cf9502205b3d18fba8db2189a45953e13953c850aefdaa6e1778e60bc50fdb9bda090e7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009190d320bdae03aad1f858da74489344083f8291ba8eab343281440863efd3a6ce6c7b454a85a8b8006896360fa610edfb7dc35fc2c249680e96085b2374c65257f7df1ec1837c727e5cd5208bc2b7e2d551166428194324f6b69c0f4c9354da5d9ea7ddb6e7b48d02298af39949b204d3c4f49ca26ce3592f4e0a948d890d110a6e6560555e4053fb47ebed8c2f1845b005f2c4d365a814d96a7258b807bca5af935aa96759eaac38555f3b3c20defb92eeee4a7421d096eada4d3f8f2a4df4fd9c86d67e9d0cb7bb3a3dfc826b21aef58a73247ab9cf16ef9158b727f295a6881e55f46484877778b46a5c3e3c6a24c1ec66c86b73b59323268a134e53bd8c