avelina.mx

Issued by R3

About this certificate

This digital certificate with serial number 04:ce:df:b0:e5:aa:3f:12:15:c3:03:35:6e:b4:bc:80:bd:a8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=avelina.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ce:df:b0:e5:aa:3f:12:15:c3:03:35:6e:b4:bc:80:bd:a8
Serial Number (int): 418844647658221554711978942207663508864424
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c1:4a:ea:16:f7:b3:cc:77:47:1c:73:f2:bd:5b:08:6a:52:20:ca:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:90:e5:dc:36:0d:22:d7:7b:77:4c:91:b7:bc:16:73:09:fd:f3:8f
Fingerprint (sha256): 71:b1:df:b8:5e:58:bc:b1:54:01:37:f8:cd:66:23:74:c6:b1:c4:d8:ad:48:27:2e:84:7c:de:83:bd:88:2f:c7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate avelina.mx

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avelina.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.affleunt.co
*.airfour.com
*.alqabasspp.com
*.amemura.com
*.aquanorte.com
*.ati.co.in
*.atkina.com
*.avelina.mx
*.avonn.com
*.barossavalleyrealestate.com.au
*.chos.net
*.ddirecttv.com
*.doortechgaragedoors.net
*.duplika.eu
*.euro-accastillage.com
*.gahoi.com
*.invidou.us
*.jaeyun.com
*.juggleballs.com
*.kazumaparts.com
*.kongslie.com
*.learonthefarm.com
*.legierung.com
*.loudliquid.com
*.marocemploi.com
*.nassartire.com
*.netpixiv.net
*.nmoneyhub.com
*.nvwn-ucsn.biz
*.online2livestreams.us
*.precca.com
*.puebladelasierra.com
*.ranae.com
*.resourcerus.org
*.roxburyprintshop.com
*.rt66autobody.com
*.rtxhealthyou.com
*.shikou.com
*.sjiek.com
*.sostenedor.com
*.stilskinamestaj.com
*.stromauto.com
*.temasea.com
*.themobileauthority.biz
*.tusinmuebles.com
*.ukroko.org
*.vidotto.com
*.xn--drabe-wib.net
*.youhtube.co
*.zhongtang.com
affleunt.co
airfour.com
alqabasspp.com
amemura.com
aquanorte.com
ati.co.in
atkina.com
avelina.mx
avonn.com
barossavalleyrealestate.com.au
chos.net
ddirecttv.com
doortechgaragedoors.net
duplika.eu
euro-accastillage.com
gahoi.com
invidou.us
jaeyun.com
juggleballs.com
kazumaparts.com
kongslie.com
learonthefarm.com
legierung.com
loudliquid.com
marocemploi.com
nassartire.com
netpixiv.net
nmoneyhub.com
nvwn-ucsn.biz
online2livestreams.us
precca.com
puebladelasierra.com
ranae.com
resourcerus.org
roxburyprintshop.com
rt66autobody.com
rtxhealthyou.com
shikou.com
sjiek.com
sostenedor.com
stilskinamestaj.com
stromauto.com
temasea.com
themobileauthority.biz
tusinmuebles.com
ukroko.org
vidotto.com
xn--drabe-wib.net
youhtube.co
zhongtang.com

Other certificates including the domain name avelina.mx

(limited to 100 certificates)
avelina.mx

Certificate

The complete raw certificate details for avelina.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418844647658221554711978942207663508864424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 10:46:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 10:46:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avelina.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 867167913140421239807473861260410966337726805530887443247694409159663820869248712761969239053105627410967950829828744278223300023867721471647100913602445579064335360084422305412800334620542671733439281011283123504036370155091993057999124596628179976229291808269052857872786516912614607323400051528363729711532057322391054550663010543379844013647739302678512608733365514745862550390418022632497686178358420886017291210327238168471813091604798900497154592485214080597205563921954152746215465588233779718932077294214994273080561513715656594955219815730447011120806330451599091258904688721368098882417443080198229317565534958274138919419822011576534008409432167106536041215317621251602587000046923779351452564084536681351649766451836505391037318369206208013293016498458879738514260362402947962215432315004104265517246869890369326291386732473768155472705194475610280143048454363002317195524803902707851340370399656799723301689888079367331841576628294167462520438569925671785131214926552980246215278806174243237648788423232459663745618111444166833296646720133916468296290805768686128947363711972908897294180185242931784489025525446288705229631105703731522228638411428992105945541687981222201932477881225830779084744097638880646320837524803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c14aea16f7b3cc77471c73f2bd5b086a5220ca5b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affleunt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airfour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alqabasspp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amemura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquanorte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ati.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atkina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avelina.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avonn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barossavalleyrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddirecttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doortechgaragedoors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duplika.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euro-accastillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gahoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invidou.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaeyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juggleballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kazumaparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kongslie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learonthefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legierung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loudliquid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marocemploi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nassartire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netpixiv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmoneyhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvwn-ucsn.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online2livestreams.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puebladelasierra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ranae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.resourcerus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roxburyprintshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rt66autobody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtxhealthyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shikou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjiek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sostenedor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stilskinamestaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stromauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temasea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themobileauthority.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tusinmuebles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukroko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--drabe-wib.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youhtube.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhongtang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affleunt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airfour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alqabasspp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amemura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquanorte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ati.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atkina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avelina.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barossavalleyrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddirecttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doortechgaragedoors.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duplika.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euro-accastillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gahoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invidou.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juggleballs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kazumaparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kongslie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learonthefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legierung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loudliquid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marocemploi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nassartire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpixiv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmoneyhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvwn-ucsn.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online2livestreams.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puebladelasierra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcerus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxburyprintshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt66autobody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtxhealthyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shikou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjiek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sostenedor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stilskinamestaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stromauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temasea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themobileauthority.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusinmuebles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukroko.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidotto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--drabe-wib.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youhtube.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhongtang.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a98aa648a0000040300483046022100badaab751b6bcd13a55dd6fbd9409b4a4e1b6a3372e282d5bb79edf0bd15f51102210087661f662ff51551fec45bf930d1f592384b387b9230f8b5b2927b24a0c3f57b007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a98aa652e0000040300483046022100ef1134ea97ea55b021ffe65da34f43fce23a4d774f8acdfa9e3cd85f52823b36022100fa76465fbb89f31435e6d0d58e71b2fd76a0455e7767a02aa15f191607e7adc6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0070aeafe5828a9d0999c8e6684b5a1d2f6761c280da1aa530c70d9e16140b681f4a2b0a0f0f8bd57a8577ffa43b5457626f93eb188c7ab6f69e91b38ba5c5222a48055e138805b305360b791a4dfc9d5298847555d0e46950de42c477681ba03cc9baa0eea54033eecf4917b3125011d8397a8475a84a1605e2be912d9818554423917b2bdc5d008dd58429fe145b0609e717e114e6c3f076fe49d1e4f2654d8e88e352e54ab6a14acc2bb465e4d87e71f035c1a0bc6cebd1b72860175cc98855ccad55e68d156f3d6e20ea647229d30d11ba68b90d6e2950803644833d32c3b2ba85b070add36c01b49ca32cdffaf11368e01a09af65b2ff22f2f70a58c50646