merkata.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:9a:d3:4a:d7:ef:fc:b7:7a:68:a8:f4:00:13:3e:0a:8d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=merkata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:9a:d3:4a:d7:ef:fc:b7:7a:68:a8:f4:00:13:3e:0a:8d
Serial Number (int): 296932022159053006077014862903191143320205
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:a5:50:a7:13:2f:2b:35:e2:80:b4:b8:44:53:e3:52:1d:5f:88:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:b5:f6:8d:7c:9d:18:81:d4:a8:9d:44:db:60:10:a2:e0:cc:54:88
Fingerprint (sha256): 6b:ef:31:bb:3c:52:36:39:d0:6b:1b:dc:3d:df:87:2b:e4:9e:cd:0f:dd:cc:25:20:fb:30:8a:7b:4c:e5:21:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate merkata.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for merkata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9527acg.cn
*.a1homerepairsinc.com
*.africahealthcaresummit.com
*.antimedicine.com
*.aprenderanadar.com
*.arcadya.io
*.asinakitaplar.com
*.avavdy.us
*.azmax.us
*.babygearinfo.com
*.blackpeoplerunbikeandswim.com
*.boots2u.us
*.bunnyglobal.us
*.cardserv.us
*.colecciones.us
*.creditcardbill.us
*.cruse.net
*.cryptobubble.net
*.dantelibrary.us
*.datingwold.us
*.dunas.us
*.erli.us
*.exactclock.com
*.fancybongwater.us
*.fnmb.com
*.glamourandgainsbyeve.com
*.hagala.com
*.hdcollect.net
*.iacino.com
*.imei88.xyz
*.inthefield.com
*.kfslots2.com
*.khalisa.com
*.kono-jiyu.com
*.mandur.com
*.mennoruif.nl
*.merkata.com
*.movar.com
*.oyvagoy.com
*.pedrasa.com
*.pguystudio.com
*.poljopartner.com
*.sketsa.com
*.slpmall.com
*.snip-snaps.com
*.tarasyuk.com
*.troncones.com
*.tucsonlenders.com
*.turistear.com
*.usaga.com
9527acg.cn
a1homerepairsinc.com
africahealthcaresummit.com
antimedicine.com
aprenderanadar.com
arcadya.io
asinakitaplar.com
avavdy.us
azmax.us
babygearinfo.com
blackpeoplerunbikeandswim.com
boots2u.us
bunnyglobal.us
cardserv.us
colecciones.us
creditcardbill.us
cruse.net
cryptobubble.net
dantelibrary.us
datingwold.us
dunas.us
erli.us
exactclock.com
fancybongwater.us
fnmb.com
glamourandgainsbyeve.com
hagala.com
hdcollect.net
iacino.com
imei88.xyz
inthefield.com
kfslots2.com
khalisa.com
kono-jiyu.com
mandur.com
mennoruif.nl
merkata.com
movar.com
oyvagoy.com
pedrasa.com
pguystudio.com
poljopartner.com
sketsa.com
slpmall.com
snip-snaps.com
tarasyuk.com
troncones.com
tucsonlenders.com
turistear.com
usaga.com

Other certificates including the domain name merkata.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for merkata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMMzCCCxugAwIBAgISA2ia00rX7/y3emio9AATPgqNMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA2MTcyMjA4NDBaFw0yMzA5MTUyMjA4MzlaMBYxFDASBgNVBAMT
C21lcmthdGEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8Hku
itVib2rxK+yHB9dxfeTlnIQ048ajiUHpvw3FIoBgQGGteWsTToiW6p7EC9nZ5xM8
lEOkVDWrgkF5CKRNimoILu8sks2F6fctDwawofHqtC+1wb2Jo2RMCmKD7vXUl7SB
8Wp6qebx+MJwvMofRjYsYMHAop4jiCQI7ABIE7Fg2vxG9UwNWa6kNft5o1cGLvz9
JmC7JgXhqJzABqpxUI8WATWahuK9UQ+LcBpiVxS8nTt6TZsjumDfqKfNzxdYB6+D
4IVTISrfpCaMpEtbZtzKf42lBEUSEoWCaX/cHrd+AHAcEf0Twkw61qOlYoUEbgYa
kFItAN//QfpDUedBqCIoZc0myLJgrH9ZD3nEop5AysguZErekUdttEpdeU6m2zBz
Epwe+gIoZz1g7LQ3wgFSj/uGVWxL/Ow0iSTR5+XjC5kAeSXgzKfKIWyjfbuAxlEp
pbk8OB2rhdPImAbDoenA89iU+XXk2n29Xndi2DIy4a8a+TpbCdHeMyNAu+jS/G/k
jird1IzdeKIOBm/1TcLv2fX6JrkhKvNEelC2iDMEo1eNm+0sY7PACqg01G9htoKs
9A1qmhHaeCSrFfPm6i3hQ2H9zNR4R6Un5Ia47c3UXI+CyE1rlPuvj1j4YzBwYjzV
mw5hekwWqfLcbmLL9DS5l1Qb+G52ZCPw5kpZD6MCAwEAAaOCCF0wgghZMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUxaVQpxMvKzXigLS4RFPjUh1fiEowHwYDVR0jBBgw
FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF
BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y
My5pLmxlbmNyLm9yZy8wggZlBgNVHREEggZcMIIGWIIMKi45NTI3YWNnLmNughYq
LmExaG9tZXJlcGFpcnNpbmMuY29tghwqLmFmcmljYWhlYWx0aGNhcmVzdW1taXQu
Y29tghIqLmFudGltZWRpY2luZS5jb22CFCouYXByZW5kZXJhbmFkYXIuY29tggwq
LmFyY2FkeWEuaW+CEyouYXNpbmFraXRhcGxhci5jb22CCyouYXZhdmR5LnVzggoq
LmF6bWF4LnVzghIqLmJhYnlnZWFyaW5mby5jb22CHyouYmxhY2twZW9wbGVydW5i
aWtlYW5kc3dpbS5jb22CDCouYm9vdHMydS51c4IQKi5idW5ueWdsb2JhbC51c4IN
Ki5jYXJkc2Vydi51c4IQKi5jb2xlY2Npb25lcy51c4ITKi5jcmVkaXRjYXJkYmls
bC51c4ILKi5jcnVzZS5uZXSCEiouY3J5cHRvYnViYmxlLm5ldIIRKi5kYW50ZWxp
YnJhcnkudXOCDyouZGF0aW5nd29sZC51c4IKKi5kdW5hcy51c4IJKi5lcmxpLnVz
ghAqLmV4YWN0Y2xvY2suY29tghMqLmZhbmN5Ym9uZ3dhdGVyLnVzggoqLmZubWIu
Y29tghoqLmdsYW1vdXJhbmRnYWluc2J5ZXZlLmNvbYIMKi5oYWdhbGEuY29tgg8q
LmhkY29sbGVjdC5uZXSCDCouaWFjaW5vLmNvbYIMKi5pbWVpODgueHl6ghAqLmlu
dGhlZmllbGQuY29tgg4qLmtmc2xvdHMyLmNvbYINKi5raGFsaXNhLmNvbYIPKi5r
b25vLWppeXUuY29tggwqLm1hbmR1ci5jb22CDioubWVubm9ydWlmLm5sgg0qLm1l
cmthdGEuY29tggsqLm1vdmFyLmNvbYINKi5veXZhZ295LmNvbYINKi5wZWRyYXNh
LmNvbYIQKi5wZ3V5c3R1ZGlvLmNvbYISKi5wb2xqb3BhcnRuZXIuY29tggwqLnNr
ZXRzYS5jb22CDSouc2xwbWFsbC5jb22CECouc25pcC1zbmFwcy5jb22CDioudGFy
YXN5dWsuY29tgg8qLnRyb25jb25lcy5jb22CEyoudHVjc29ubGVuZGVycy5jb22C
DyoudHVyaXN0ZWFyLmNvbYILKi51c2FnYS5jb22CCjk1MjdhY2cuY26CFGExaG9t
ZXJlcGFpcnNpbmMuY29tghphZnJpY2FoZWFsdGhjYXJlc3VtbWl0LmNvbYIQYW50
aW1lZGljaW5lLmNvbYISYXByZW5kZXJhbmFkYXIuY29tggphcmNhZHlhLmlvghFh
c2luYWtpdGFwbGFyLmNvbYIJYXZhdmR5LnVzgghhem1heC51c4IQYmFieWdlYXJp
bmZvLmNvbYIdYmxhY2twZW9wbGVydW5iaWtlYW5kc3dpbS5jb22CCmJvb3RzMnUu
dXOCDmJ1bm55Z2xvYmFsLnVzggtjYXJkc2Vydi51c4IOY29sZWNjaW9uZXMudXOC
EWNyZWRpdGNhcmRiaWxsLnVzggljcnVzZS5uZXSCEGNyeXB0b2J1YmJsZS5uZXSC
D2RhbnRlbGlicmFyeS51c4INZGF0aW5nd29sZC51c4IIZHVuYXMudXOCB2VybGku
dXOCDmV4YWN0Y2xvY2suY29tghFmYW5jeWJvbmd3YXRlci51c4IIZm5tYi5jb22C
GGdsYW1vdXJhbmRnYWluc2J5ZXZlLmNvbYIKaGFnYWxhLmNvbYINaGRjb2xsZWN0
Lm5ldIIKaWFjaW5vLmNvbYIKaW1laTg4Lnh5eoIOaW50aGVmaWVsZC5jb22CDGtm
c2xvdHMyLmNvbYILa2hhbGlzYS5jb22CDWtvbm8taml5dS5jb22CCm1hbmR1ci5j
b22CDG1lbm5vcnVpZi5ubIILbWVya2F0YS5jb22CCW1vdmFyLmNvbYILb3l2YWdv
eS5jb22CC3BlZHJhc2EuY29tgg5wZ3V5c3R1ZGlvLmNvbYIQcG9sam9wYXJ0bmVy
LmNvbYIKc2tldHNhLmNvbYILc2xwbWFsbC5jb22CDnNuaXAtc25hcHMuY29tggx0
YXJhc3l1ay5jb22CDXRyb25jb25lcy5jb22CEXR1Y3NvbmxlbmRlcnMuY29tgg10
dXJpc3RlYXIuY29tggl1c2FnYS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSe
HQmBJe20mQAAAYjLniq2AAAEAwBGMEQCIH+irPIsJCxxv2ueg0gCpcdQnny6UkRm
omI7CORGJEPwAiBmO9LpSSu92uIvW9Mie8/0h3u6DD+HS8zBXhwZdiyVJwB2AHoy
jFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABiMueKskAAAQDAEcwRQIh
AJ/0TMJmJq6Ifwvsrt8ymhhvQkuWaiaUjYWUNSNl2eQDAiAzmevLv650WMUbDj0U
XrqkMu4ja9SJ/3tjU0/yRBr7azANBgkqhkiG9w0BAQsFAAOCAQEADdfUklw3AKEF
F/6TwTUNcMy2yD58unFV1RGs++O5FTIXleN6ZYcEQKi6VYyd5MjNl7nopYxhoANc
lt0e9T3Lb34qiX13EhF4cBKHfSUWBd6+z0tTBc4uAgn2Gnb9nfasEb//UclMgmM7
rpiRPv3ERbhJyqi42jQGtV5b/bj5gmffc6vyh7IK9a3mijiZebFLlatiM9dIDmfr
QxGw+Y8FXxicGp+dEongMptIuFt8ZyH1/MpIRkMU6DHnHRrwVNHAA1QA1hJDJsEJ
UCvtYnOGAeVHTQTOH/kD17p5sop6qx3+niZVN0fpBCDxCYbPQwy4fxikyNrHCwJn
0aleE0Du/w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296932022159053006077014862903191143320205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 22:08:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 22:08:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'merkata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 981045742870614900297599127944213418913863608186596187269204507262321685397376741405162010186723566825783264299028291569243375934732868783476904985963116791692142217919608529326247084134882821893963157592929185842804896557756217687134905501851451906948237665100983026459097921087653749766020390748717622281166990171663271205515548025724666640671710880284606961061940750051847571080712625885615064698179312953887233451554444795769034922749999196619134468564268852529700075866830372398252330321386120129233532197000938270634542738559362704535193577406082086412426304403292731191674552846073787403136907347450522398409414256322504634490568344353769757296964605702169265841880103657979185399047630880623821810525679240259420130500056306334495733195853076263704522551023572264019288131299948955445872175983881093738659038390602849668599896490664337853851774278548713849548999544145219367924660967315230547260931866619831482590429714497102682822470895242243071242174917217093399024485843094033060031131313609368317258111790435645163678393806314369664927561644090727604124366986302693109301487874691909682170084033946697541584732382017676867751034088853470968610481980085349946169126879943369020485925273899327584012959299945531459294007203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5a550a7132f2b35e280b4b84453e3521d5f884a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1628 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9527acg.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a1homerepairsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africahealthcaresummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antimedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprenderanadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arcadya.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asinakitaplar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avavdy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azmax.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babygearinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackpeoplerunbikeandswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boots2u.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunnyglobal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardserv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colecciones.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditcardbill.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptobubble.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dantelibrary.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datingwold.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunas.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erli.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exactclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancybongwater.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fnmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamourandgainsbyeve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hagala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdcollect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iacino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imei88.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inthefield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfslots2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khalisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kono-jiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mandur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mennoruif.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merkata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyvagoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pedrasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pguystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poljopartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sketsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slpmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snip-snaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarasyuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.troncones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tucsonlenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turistear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9527acg.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1homerepairsinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africahealthcaresummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antimedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprenderanadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadya.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asinakitaplar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avavdy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azmax.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babygearinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackpeoplerunbikeandswim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boots2u.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunnyglobal.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardserv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colecciones.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardbill.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptobubble.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dantelibrary.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingwold.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunas.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erli.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exactclock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancybongwater.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamourandgainsbyeve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hagala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdcollect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iacino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imei88.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inthefield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfslots2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khalisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kono-jiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mennoruif.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merkata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyvagoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedrasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pguystudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poljopartner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sketsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slpmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snip-snaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarasyuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troncones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonlenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turistear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaga.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188cb9e2ab6000004030046304402207fa2acf22c242c71bf6b9e834802a5c7509e7cba524466a2623b08e4462443f00220663bd2e9492bbddae22f5bd3227bcff4877bba0c3f874bccc15e1c19762c95270076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188cb9e2ac900000403004730450221009ff44cc26626ae887f0becaedf329a186f424b966a26948d8594352365d9e40302203399ebcbbfae7458c51b0e3d145ebaa432ee236bd489ff7b63534ff2441afb6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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