www.casandra.fun

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:e0:2e:73:db:e4:6e:ec:df:c6:70:cf:e8:9c:25:d7:87 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.casandra.fun

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:e0:2e:73:db:e4:6e:ec:df:c6:70:cf:e8:9c:25:d7:87
Serial Number (int): 295322800387063730273598975842563832272775
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7d:5c:61:aa:12:24:ea:4c:32:3a:c8:b6:5f:5c:5c:1b:22:b1:f8:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:f3:8b:91:f4:60:12:3f:83:9e:90:97:89:37:c2:07:df:1f:a3:d8
Fingerprint (sha256): 6e:68:34:d6:5b:8b:65:26:35:d8:0c:c7:b3:81:52:b5:e4:04:34:a3:e7:78:1f:1a:a2:a8:32:62:83:fb:da:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.casandra.fun

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.casandra.fun

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4dhybrid.com
623leaf.com
ahimsafoods.in
americanwomenshealthalliance.org
blackdiamonddoughnuts.com
casandra.fun
casinozonderaccount.com
casoria.co
chainsawwoodcarving.com
circuitvalves.com
cubiclesonline.com
dailydareah.com
deuteritiumsphere.com
djbuyingguide.com
esportsprovidence.com
evaporated-milk.com
freakoutandcarryon.com
golfcard.co
greenvillewindowclean.com
housemoversinlouisiana.com
ihappydaily.com
indianrailwaystimings.in
inkjetpostcards.com
jointpainomaha.com
jooncoin.com
just-a-splash.com
lapbureau.com
laughter.store
lonestarconservative.com
lunuo.com
missioncheapenergy.com
nba2kbetting.com
onlinemarketingdomination.com
pepadvantage.com
personalsovereignty.link
purposemyth.com
qtumsec.com
redwineheadache.com
sarasotabaymarina.com
serratec.com
site4tv.com
sk8rnutz.com
sprzedaznieruchomosci.com
the907.com
theeconomicnomad.com
theltc.co
threewheelerinsurance.com
tuttodolce.com
wearbing.com
www.4dhybrid.com
www.623leaf.com
www.ahimsafoods.in
www.americanwomenshealthalliance.org
www.blackdiamonddoughnuts.com
www.casandra.fun
www.casinozonderaccount.com
www.casoria.co
www.chainsawwoodcarving.com
www.circuitvalves.com
www.cubiclesonline.com
www.dailydareah.com
www.deuteritiumsphere.com
www.djbuyingguide.com
www.esportsprovidence.com
www.evaporated-milk.com
www.freakoutandcarryon.com
www.golfcard.co
www.greenvillewindowclean.com
www.housemoversinlouisiana.com
www.ihappydaily.com
www.indianrailwaystimings.in
www.inkjetpostcards.com
www.jointpainomaha.com
www.jooncoin.com
www.just-a-splash.com
www.lapbureau.com
www.laughter.store
www.lonestarconservative.com
www.lunuo.com
www.missioncheapenergy.com
www.nba2kbetting.com
www.onlinemarketingdomination.com
www.pepadvantage.com
www.personalsovereignty.link
www.purposemyth.com
www.qtumsec.com
www.redwineheadache.com
www.sarasotabaymarina.com
www.serratec.com
www.site4tv.com
www.sk8rnutz.com
www.sprzedaznieruchomosci.com
www.the907.com
www.theeconomicnomad.com
www.theltc.co
www.threewheelerinsurance.com
www.tuttodolce.com
www.wearbing.com
www.yenisahibi.com
yenisahibi.com

Other certificates including the domain name casandra.fun

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.casandra.fun in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFj8RKx3BLl28b3RngQp
EbFEFC8P3b+03eM+MZste6l00yiadpScN8k+GYx0nNzQWl9oFNhQJwcJGa5YOHbw
SLVaQhkAJop6h86K5dAJbbfM6DYKObImEljfQSW75cMsepR2q3r0yiw3OkSL7gkC
UOIRXkYBf/2kszEyNRABYerCVWwcprHEgijyN9Kof/DI5i0Slc9mTXtmSs2yfn4E
9coRHImbFI/GHe0tDj9twFP6vBoi9IKYgX8dzxgzHknwZZVdOWcjdFb/UIokh6BJ
YYNsYZTS0UQbPTzulIzC6udtSr1fyIGfjBJV5rM0bNSqu2CBG9cWhe2TWY9SJBQF
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295322800387063730273598975842563832272775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 02:22:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 02:22:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.casandra.fun'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25291541340675500453975258514558714098069011333904679130302766949791808884975318175125549953724205869222461240238508089504926726236579347477648065569343356197451612930699975550805596969311679896909426575564669311168993122591084095378390237180307941486012457724296160186006636381379186074128920803079584381350491904420803416158706924273226519517190412650023941473030249962052033865746770958628464317517997158638068560665817404037917715832760341780750583708322074410718118420502056799396169692435702083210186333315207855936492836059897265236804220407437515134212607922227983487136241621112930685182226155876816346416471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d5c61aa1224ea4c323ac8b65f5c5c1b22b1f872
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dhybrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '623leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahimsafoods.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanwomenshealthalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackdiamonddoughnuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casandra.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinozonderaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casoria.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chainsawwoodcarving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circuitvalves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cubiclesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailydareah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deuteritiumsphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djbuyingguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esportsprovidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evaporated-milk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freakoutandcarryon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfcard.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenvillewindowclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housemoversinlouisiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihappydaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianrailwaystimings.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkjetpostcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointpainomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jooncoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-a-splash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapbureau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laughter.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonestarconservative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missioncheapenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba2kbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinemarketingdomination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalsovereignty.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purposemyth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qtumsec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redwineheadache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarasotabaymarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serratec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site4tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk8rnutz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprzedaznieruchomosci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the907.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theeconomicnomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theltc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threewheelerinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuttodolce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dhybrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.623leaf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahimsafoods.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanwomenshealthalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blackdiamonddoughnuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casandra.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casinozonderaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casoria.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chainsawwoodcarving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.circuitvalves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cubiclesonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailydareah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deuteritiumsphere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.djbuyingguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esportsprovidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.evaporated-milk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freakoutandcarryon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfcard.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenvillewindowclean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.housemoversinlouisiana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihappydaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indianrailwaystimings.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkjetpostcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointpainomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jooncoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.just-a-splash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lapbureau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laughter.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lonestarconservative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lunuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.missioncheapenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nba2kbetting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinemarketingdomination.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pepadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personalsovereignty.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purposemyth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qtumsec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redwineheadache.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sarasotabaymarina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serratec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.site4tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sk8rnutz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprzedaznieruchomosci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.the907.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theeconomicnomad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theltc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.threewheelerinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuttodolce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yenisahibi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yenisahibi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f832cf80d0000040300473045022035dd4a1cca459047d10ae5fee2856aa255352a7cc9eb6081016909904747e76602210084380c08dc7492f1cf7ee18f70e9fa727e3ec4c24c231597466817248cb81fcb007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f832cf83200000403004830460221009fe5b9f9969b5af04b1a35ee1c4927c3a34b5709cfcc3dc3571274185e9ce293022100f1938e736d9b8f13b32ea4a4bbc6fcf3e5f0a4b8d9d88f4172873886f3589558
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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