barock.com

Issued by R3

About this certificate

This digital certificate with serial number 03:10:05:93:35:1a:7c:2f:aa:1f:9f:52:7a:ae:4d:da:b2:c4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=barock.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:10:05:93:35:1a:7c:2f:aa:1f:9f:52:7a:ae:4d:da:b2:c4
Serial Number (int): 266788786150698959537338010694911472087748
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:6d:d5:b0:9f:9b:fb:43:db:2d:9c:74:e7:33:0d:f2:b9:6e:18:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 38:88:b6:b0:26:10:0d:be:5c:93:63:b5:82:71:76:e5:d3:99:e4:cb
Fingerprint (sha256): 70:9e:f8:3e:57:46:ac:7d:7c:49:7c:dd:66:0f:aa:c3:06:0a:73:4b:a0:56:34:ff:48:c4:7d:06:15:b3:30:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barock.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barock.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1acontracting.com
*.3copies.com
*.affiliatedlegalservices.com
*.alhadad.com
*.arbolesgrandes.com
*.barock.com
*.bearmen.com
*.biblefinance.com
*.bidrack.com
*.briishairways.com
*.citizenhighschool.com
*.coromina.com
*.creandoconciencia.com
*.demorgans.com
*.diggilo.com
*.dominelli.com
*.dounan.com
*.encuestaspagas.com
*.fatoumata.com
*.feuilledor.com
*.foamrollers.com.au
*.forexrobotspro.net
*.forextradingplatforms.net
*.haemorriten.de
*.haemorroden.de
*.introversion.co
*.jewelrylaguerrerense.com
*.kunoichitrainer.com
*.laquinceanera.com
*.lightenup.com.au
*.londonbeautyclinic.com
*.lougy.com
*.magat.com
*.mossycadillac.com
*.mytechgate.co
*.papelytijera.com
*.peyma.com
*.portaldoforro.com
*.portnercounseling.com
*.psappliancerepair.com
*.sextop1.vn
*.srkcommunication.biz
*.steuererklaeruzng.de
*.steuererkoeaerung.de
*.stravic.com
*.swissreplicastore.com
*.usagotv.tv
*.wwlicindia.in
*.xn--hmorridende-l8a.de
*.xn--steuererklr8ng-fib.de
1acontracting.com
3copies.com
affiliatedlegalservices.com
alhadad.com
arbolesgrandes.com
barock.com
bearmen.com
biblefinance.com
bidrack.com
briishairways.com
citizenhighschool.com
coromina.com
creandoconciencia.com
demorgans.com
diggilo.com
dominelli.com
dounan.com
encuestaspagas.com
fatoumata.com
feuilledor.com
foamrollers.com.au
forexrobotspro.net
forextradingplatforms.net
haemorriten.de
haemorroden.de
introversion.co
jewelrylaguerrerense.com
kunoichitrainer.com
laquinceanera.com
lightenup.com.au
londonbeautyclinic.com
lougy.com
magat.com
mossycadillac.com
mytechgate.co
papelytijera.com
peyma.com
portaldoforro.com
portnercounseling.com
psappliancerepair.com
sextop1.vn
srkcommunication.biz
steuererklaeruzng.de
steuererkoeaerung.de
stravic.com
swissreplicastore.com
usagotv.tv
wwlicindia.in
xn--hmorridende-l8a.de
xn--steuererklr8ng-fib.de

Other certificates including the domain name barock.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for barock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266788786150698959537338010694911472087748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 10:14:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 10:14:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651721719063038870362803124600437229310322278720054041571957525961390578203887922313359940929991901077914855610306954448990626175741050727192273476546491427344382989158446008602040640002779466085826439333576942921054608381901274072886793809510831072862086618837830905342540698862344126806576082938958571184154038292896644660928601257368173374655460023968738938126946564391675348895177638951818400346634502276854959439829365192862962267285621468190188073963329148861499047611349088862591615073114816117809292969075086682786238958791677534524691178700099062211658770107229827281856648304911449232582625745253460154868814221127407029431960558434798590295412400218805501944790754232803881031683996837532942827463800044292232589888369733474763471152603893687228397645898243616259896147864768811823113285044247517049611497637808109489987375621132701125828925299321851340728360631549495048709563442169462414425360378642955127647921310628035117768584125319083813038941623282060754094284297433981340148348237509168398644581178180747624307496085947584792298997243543900816108604271708188104601111757919135188265267102303936754332607902130569017634056400650275140424575057838706143168831615738027927419531140011710834193588052090119690748646479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d6dd5b09f9bfb43db2d9c74e7330df2b96e18d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1906 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1acontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3copies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affiliatedlegalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alhadad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbolesgrandes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bearmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biblefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briishairways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizenhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coromina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creandoconciencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demorgans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diggilo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dominelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dounan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encuestaspagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatoumata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feuilledor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foamrollers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexrobotspro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forextradingplatforms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemorriten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haemorroden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.introversion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewelrylaguerrerense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunoichitrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laquinceanera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightenup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londonbeautyclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lougy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mossycadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytechgate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papelytijera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peyma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portaldoforro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portnercounseling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psappliancerepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sextop1.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srkcommunication.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererklaeruzng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuererkoeaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stravic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swissreplicastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usagotv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwlicindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hmorridende-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuererklr8ng-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1acontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3copies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliatedlegalservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alhadad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbolesgrandes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briishairways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizenhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coromina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creandoconciencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demorgans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diggilo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dounan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encuestaspagas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatoumata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feuilledor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foamrollers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexrobotspro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forextradingplatforms.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemorriten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haemorroden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'introversion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewelrylaguerrerense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunoichitrainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laquinceanera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightenup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonbeautyclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lougy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossycadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytechgate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papelytijera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peyma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldoforro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portnercounseling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psappliancerepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sextop1.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srkcommunication.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererklaeruzng.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuererkoeaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stravic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swissreplicastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usagotv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwlicindia.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hmorridende-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuererklr8ng-fib.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018968b5eb6400000403004630440220723550329d2014fc39a43c33a5af693e65107238c3a4b0c7a1f8fcd87975227702201a9baa393fefe7d953032fd612f183b3936d3ac5fdaca87827e40f2f0c8cf9ec007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018968b5eb560000040300483046022100b2da070ce7209c1328680f503d92aba96ad508fa6d8eedadd6591124be7af566022100f72d35b518a32945b439d916436ba6c8c76767f96859e220c6937f35002b9e3b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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