clinicaaya.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b4:ca:b0:5f:58:da:17:2b:30:78:cb:0f:b8:df:52:c7:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=clinicaaya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b4:ca:b0:5f:58:da:17:2b:30:78:cb:0f:b8:df:52:c7:15
Serial Number (int): 409969389606074051535446980632977580672789
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 75:f8:3e:7d:b5:d8:09:b9:72:b4:31:74:ce:99:16:dc:92:23:d0:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6b:1a:c8:6f:b8:bc:8e:96:90:e1:ab:32:9e:05:34:21:98:96:d4:90
Fingerprint (sha256): 6f:36:64:1e:70:1d:99:3b:d0:df:3d:f4:91:ec:56:05:e4:b2:b0:7a:76:d8:0c:93:a6:f4:e4:df:fd:40:81:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate clinicaaya.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clinicaaya.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2msakura.com
*.abc7nyc.com
*.advyson.com
*.algolite.site
*.answerwireless.com
*.apsphsicianbilling.com
*.aragoninternational.net
*.autocriativo.com
*.aws-west2-ses.com
*.birchenstock.com
*.bluestone.store
*.chespflights.com
*.clinicaaya.com
*.cpwd.com
*.expressdat.com
*.fosil.com
*.gladioluscorp.com
*.idwriter.com
*.indianegle.com
*.innovasioncuisine.com
*.insaneinflateable5k.com
*.instinctually.com
*.ionacollege.com
*.knptxjqunasfywu.com
*.macroscorp.com
*.meetolivianicole.com
*.mfyha.com
*.moviesporn.online
*.onscreens.eu
*.otacianalopesimoveis.com.br
*.principlednews.org
*.safe-buynow.site
*.soberanagas.com
*.ssunwin.live
*.takem7.com
*.tool-torials.com
*.vangaurdvet.com
*.veeperks.com
*.vegasworl.com
*.veiwmycard.com
*.vfsglobe.com
*.villiagegreen.com
*.vitaminshopped.com
*.vivitseats.com
*.vivivseats.com
*.vocetelecon.com
*.voipvpn.com
*.xn--mdchensex-v2a.com
*.zaksfifthavenue.com
*.ziprecurter.com
2msakura.com
abc7nyc.com
advyson.com
algolite.site
answerwireless.com
apsphsicianbilling.com
aragoninternational.net
autocriativo.com
aws-west2-ses.com
birchenstock.com
bluestone.store
chespflights.com
clinicaaya.com
cpwd.com
expressdat.com
fosil.com
gladioluscorp.com
idwriter.com
indianegle.com
innovasioncuisine.com
insaneinflateable5k.com
instinctually.com
ionacollege.com
knptxjqunasfywu.com
macroscorp.com
meetolivianicole.com
mfyha.com
moviesporn.online
onscreens.eu
otacianalopesimoveis.com.br
principlednews.org
safe-buynow.site
soberanagas.com
ssunwin.live
takem7.com
tool-torials.com
vangaurdvet.com
veeperks.com
vegasworl.com
veiwmycard.com
vfsglobe.com
villiagegreen.com
vitaminshopped.com
vivitseats.com
vivivseats.com
vocetelecon.com
voipvpn.com
xn--mdchensex-v2a.com
zaksfifthavenue.com
ziprecurter.com

Other certificates including the domain name clinicaaya.com

(limited to 100 certificates)
clinicaaya.com
clinicaaya.com

Certificate

The complete raw certificate details for clinicaaya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409969389606074051535446980632977580672789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 00:47:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 00:47:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clinicaaya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692497156526768562727028761942105855942173727835990646017575946681489503900971039653681608598458520799403608249098499455038553946940221251505907325651845736356012714109747127906363750976149935260645994311089066086166992040375900398212609173749905094683713419192498392798604907058964420860803185087135517527013073373724697576519029155637206637386134230104094555273301531301991872230153242028594195439317693000856752175217690382062146134421109150188188049317206198172815648899054517932022134839779723363854137574703904467319710436601161771192963289613698141765431701515408384206734857786143301963122558235205496534550622825379468987606475813832560480041892802559627292601470311711908985193298400884955311329873682876437271228947994158826173788250127244652857125927484842557262982487551090260489478055698835479096110458216635297983996282208386543656772102351235343598420008253231054376639909860194701139430374614050863747018176998806487365528655474941450635336976665725624941078950758357815907083275452020691490928083345372923964993161775999232260173062234645352036928559994365618800789962935341896959905977813206377666176019172188600338615042734194746183746795508524333238505600490484014663547950301216434961653187587765626701665746211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							75f83e7db5d809b972b43174ce9916dc9223d0f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2msakura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc7nyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advyson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.algolite.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.answerwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apsphsicianbilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aragoninternational.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autocriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws-west2-ses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birchenstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluestone.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chespflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clinicaaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressdat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fosil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gladioluscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idwriter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianegle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.innovasioncuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insaneinflateable5k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instinctually.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ionacollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knptxjqunasfywu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macroscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meetolivianicole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfyha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviesporn.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onscreens.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otacianalopesimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.principlednews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safe-buynow.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soberanagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssunwin.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takem7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tool-torials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vangaurdvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veeperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vegasworl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veiwmycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfsglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villiagegreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitaminshopped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivitseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vivivseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocetelecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voipvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mdchensex-v2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaksfifthavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ziprecurter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2msakura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc7nyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advyson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algolite.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answerwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apsphsicianbilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aragoninternational.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autocriativo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-west2-ses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birchenstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluestone.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chespflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clinicaaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpwd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressdat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gladioluscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idwriter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianegle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovasioncuisine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insaneinflateable5k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instinctually.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionacollege.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knptxjqunasfywu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macroscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetolivianicole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfyha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesporn.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onscreens.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otacianalopesimoveis.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'principlednews.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safe-buynow.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soberanagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssunwin.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takem7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tool-torials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vangaurdvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veeperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegasworl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veiwmycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfsglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villiagegreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitaminshopped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivitseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivivseats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocetelecon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voipvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mdchensex-v2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaksfifthavenue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ziprecurter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fad6e468900000403004730450220223d1d5e509873e548803546433d6d79518528c0ccfc80a1924f419629aac18b022100d4e5ca6f6b172b60fec882da47b98a8cc0f6fcaebc8f0ed5e5cd65e73c4bb024007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fad6e468600000403004730450220687253c4937db73050c3dec54808e0047ad905ba5028c3b831a37c9398b431e3022100f99765b2f06c1bbc4813580305ba341e7baf81287b3dc18f35312fe2125e8307
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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