jcpenneygiftcard.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c1:3f:f3:dc:fe:3a:4c:6f:80:83:b4:1c:75:43:80:a6:5c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jcpenneygiftcard.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:3f:f3:dc:fe:3a:4c:6f:80:83:b4:1c:75:43:80:a6:5c
Serial Number (int): 327096362185165045668885587321863861741148
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:22:00:28:81:00:d4:2d:d9:43:94:0b:50:b0:4e:30:c3:6b:d5:88
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:e9:96:3e:b5:a9:f6:e7:53:1b:26:aa:79:3a:63:c3:b2:9b:a7:00
Fingerprint (sha256): 74:79:44:6e:05:72:3c:24:c2:e5:b9:90:81:bc:91:ff:33:b6:36:a8:a5:15:60:b0:d5:e8:1d:c5:a2:41:32:a9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jcpenneygiftcard.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jcpenneygiftcard.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advantageinttech.com
*.arcadezero.net
*.artificialaquarium.com
*.astroid.info
*.austinjounl.co
*.bkpakistan.com
*.brandbuilderuniversity.com
*.buraqads.com
*.calculem.us
*.cambiaelmenu.com
*.carriagecrossinghoa.com
*.controles-coupons.com
*.earnbylearn.xyz
*.ebubekirakcesme.com
*.edusuperior.co
*.hanasojapaneselanguage.com
*.hotelpuertonuevo.com
*.ijrpet.org
*.jabol.net
*.jcpenneygiftcard.com
*.jiali16.xyz
*.markokuoppasalmi.com
*.mikullik.com
*.mqh7t4.com
*.parsoneaultconsultingllc.com
*.proelectriciannewarknj.com
*.roiracket.com
*.ronisrestaurantfl.com
*.rosescross.com
*.roseyhill.com
*.route30beer.com
*.roxascityonlinemarket.com
*.rrmphilscorp.com
*.rubuxwin.com
*.ruhailqaisar.com
*.ruijingglass.com
*.runnersdenrace.com
*.russosestatesalesllc.com
*.ruthiegracecakeco.net
*.rutzalmacen.com
*.setlle.com
*.shrewsburystcolumbusparade.com
*.stafidutz.net
*.taylorandhenry.com
*.telepolsi.pl
*.thesecretjewel.com
*.toothbrushcoupons.net
*.unrul.me
*.vringenieriamercadeo.com
*.xn--mgba8bzcgh.com
advantageinttech.com
arcadezero.net
artificialaquarium.com
astroid.info
austinjounl.co
bkpakistan.com
brandbuilderuniversity.com
buraqads.com
calculem.us
cambiaelmenu.com
carriagecrossinghoa.com
controles-coupons.com
earnbylearn.xyz
ebubekirakcesme.com
edusuperior.co
hanasojapaneselanguage.com
hotelpuertonuevo.com
ijrpet.org
jabol.net
jcpenneygiftcard.com
jiali16.xyz
markokuoppasalmi.com
mikullik.com
mqh7t4.com
parsoneaultconsultingllc.com
proelectriciannewarknj.com
roiracket.com
ronisrestaurantfl.com
rosescross.com
roseyhill.com
route30beer.com
roxascityonlinemarket.com
rrmphilscorp.com
rubuxwin.com
ruhailqaisar.com
ruijingglass.com
runnersdenrace.com
russosestatesalesllc.com
ruthiegracecakeco.net
rutzalmacen.com
setlle.com
shrewsburystcolumbusparade.com
stafidutz.net
taylorandhenry.com
telepolsi.pl
thesecretjewel.com
toothbrushcoupons.net
unrul.me
vringenieriamercadeo.com
xn--mgba8bzcgh.com

Other certificates including the domain name jcpenneygiftcard.com

(limited to 100 certificates)
toothbrushcoupons.net
jcpenneygiftcard.com
roxascityonlinemarket.com
jcpenneygiftcard.com

Certificate

The complete raw certificate details for jcpenneygiftcard.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327096362185165045668885587321863861741148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 10:10:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 10:10:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jcpenneygiftcard.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 973788443717852566592108129383540480962284158140433634071141438440096184273810261334206029885714536807537016563573487836635281291501546247643045966830910224884779759357402947579256751428331042880821413299298405764591417122679197977584123439421562365763880281229233255769015496515501725556625877630912003999856248826245732758203494430464670443873313281188476646442138080252640939568908915887344263406803683305177683111504897879258264863761481638638020407297283234612020837048056435291515091060291547064148125340662517001443330952681642613390320297267398963170236632604613874051473915167722377619828313739885517697334330793548516144371668596477834362183171964488739244898879552587671861317673944728199894201751398158150439158652936942548264977107677125705511882940846114330340257195974635503475533243115983362694013722662714165923882948109878077865339701001435124497800457331475463464231805700089606190569422419688507859180024586346764364905878018456647056387582788170514884865412768383862675347594825111948299473693223810534035861837882720383132424739385629670859844332619091378111126988686923103645923546265239545744426904445995706577102677643888722034696313815638481805483991066040419729192292641720272656115273677817662667352118097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							222200288100d42dd943940b50b04e30c36bd588
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advantageinttech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arcadezero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artificialaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astroid.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinjounl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bkpakistan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandbuilderuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buraqads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calculem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambiaelmenu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carriagecrossinghoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controles-coupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earnbylearn.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebubekirakcesme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edusuperior.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanasojapaneselanguage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelpuertonuevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijrpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jabol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpenneygiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiali16.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markokuoppasalmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mikullik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mqh7t4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parsoneaultconsultingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proelectriciannewarknj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roiracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronisrestaurantfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosescross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roseyhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.route30beer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roxascityonlinemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrmphilscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubuxwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruhailqaisar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruijingglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnersdenrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russosestatesalesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruthiegracecakeco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rutzalmacen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.setlle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrewsburystcolumbusparade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stafidutz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylorandhenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telepolsi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesecretjewel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toothbrushcoupons.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unrul.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vringenieriamercadeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mgba8bzcgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageinttech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadezero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artificialaquarium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astroid.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinjounl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkpakistan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandbuilderuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buraqads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calculem.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambiaelmenu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carriagecrossinghoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controles-coupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earnbylearn.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebubekirakcesme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edusuperior.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanasojapaneselanguage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelpuertonuevo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijrpet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpenneygiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiali16.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markokuoppasalmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mikullik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqh7t4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parsoneaultconsultingllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proelectriciannewarknj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roiracket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronisrestaurantfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosescross.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseyhill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'route30beer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxascityonlinemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrmphilscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubuxwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruhailqaisar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruijingglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnersdenrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russosestatesalesllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruthiegracecakeco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutzalmacen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setlle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrewsburystcolumbusparade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stafidutz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylorandhenry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepolsi.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretjewel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toothbrushcoupons.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unrul.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vringenieriamercadeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mgba8bzcgh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aeaef2f65000004030047304502204b5759ea4a671e1b38150495a6da079144316590b1eae3bb65592ecbbccbdd33022100a552360d2b4a33186ee49b2bc09ebd9da9cd7b666c62478550de68114bcc7bd40076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aeaef2f7a000004030047304502201690e3b8ee8c6ab9320a8a72d032d12e8f7482020317286c58aee59e7941e250022100a454d58370d74293269ee532f2aa137d730d4ed00df21bb8a4c528d1e7dabd77
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007cf4237990e87aa97d3980d18252f6d6a3402c13d344fa924e2d0c9a5a512463c53464e0565db5c71984516b2cb33759e6d1369cada694e945b9809ae05fdb0db3ee04c1c93a02d313ed6c13b4b5af954cbec506d3542addfb94f0e116ca0b42d21fd3d21584cdeed2936654ef9c09d8e07f3303aaeb02d9a19815a975c2c4ecf5bf8c688f15fd90db60c2d803b676a97185e86adfd61a75895f8e70b10e3a274402d29ce4cc6d2e1e0a39d79690337c81accf172d13fbfb918107537cca38dc26946b5f51d864d81d8b54729321ed88a8b270f4bab8c255b0e760169c51233e055197be05762c81f0e6f040ea1b3e1d1804fda553362f2288192f79a5450209