waterfronttimeshares.com

Issued by R3

About this certificate

This digital certificate with serial number 04:19:d1:22:21:01:08:2a:a1:2e:96:59:59:08:a9:ca:65:b7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=waterfronttimeshares.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:19:d1:22:21:01:08:2a:a1:2e:96:59:59:08:a9:ca:65:b7
Serial Number (int): 357234188758677958273798999568902490056119
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 07:e6:06:60:9b:97:6d:cb:b0:19:49:7a:17:70:e7:2e:86:76:5d:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:37:c7:37:99:46:aa:80:a1:6b:62:09:24:40:70:85:c8:bd:28:fa
Fingerprint (sha256): 77:b5:f8:f3:8d:74:7e:ca:88:74:2d:a3:9b:bf:6c:1d:25:bb:26:f2:bc:e9:08:26:60:3a:d2:81:da:07:46:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate waterfronttimeshares.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waterfronttimeshares.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accentuategroup.com
*.advanceamerixa.net
*.advanceamrica.net
*.agentnote.com
*.aurora-fernsehdienst.de
*.bakerysupplies.com.au
*.bicycletent.com
*.careershollister.com
*.cccamcafard.com
*.closet.com.au
*.cou258258258.com
*.dialetica.com
*.domoteens.com
*.elanova.com
*.embroideredshirts.com.au
*.exploringcreativity.com
*.fahrradladen-lorenz.de
*.fdnvrdglv.com
*.gemmir.com
*.headboard.com.au
*.heeltotoe.com
*.huseyinyilmaz.com
*.kbfunds.com
*.kyoceradocumentsolutions.uk
*.lakefrontluxury.com
*.macaustem.org
*.noosafoodwinefestival.com.au
*.nordvnp.com
*.paulrivers.fr
*.politicalparty.com.au
*.rakkipanda.com
*.regina.com.au
*.renweb1.com
*.replacemennts.com
*.repllacements.com
*.seedly.com.au
*.shaderays.com
*.shoewarehouse.com
*.sk2102.com
*.spaknbang.com
*.squarespacce.com
*.tamilsexstories.net.in
*.tshirtsigns.com
*.vagos.com
*.vcbrowser.com
*.vonivia.de
*.waterfronttimeshares.com
*.westernfusion.com
*.xquyuan7.top
*.yemencvs.com
accentuategroup.com
advanceamerixa.net
advanceamrica.net
agentnote.com
aurora-fernsehdienst.de
bakerysupplies.com.au
bicycletent.com
careershollister.com
cccamcafard.com
closet.com.au
cou258258258.com
dialetica.com
domoteens.com
elanova.com
embroideredshirts.com.au
exploringcreativity.com
fahrradladen-lorenz.de
fdnvrdglv.com
gemmir.com
headboard.com.au
heeltotoe.com
huseyinyilmaz.com
kbfunds.com
kyoceradocumentsolutions.uk
lakefrontluxury.com
macaustem.org
noosafoodwinefestival.com.au
nordvnp.com
paulrivers.fr
politicalparty.com.au
rakkipanda.com
regina.com.au
renweb1.com
replacemennts.com
repllacements.com
seedly.com.au
shaderays.com
shoewarehouse.com
sk2102.com
spaknbang.com
squarespacce.com
tamilsexstories.net.in
tshirtsigns.com
vagos.com
vcbrowser.com
vonivia.de
waterfronttimeshares.com
westernfusion.com
xquyuan7.top
yemencvs.com

Other certificates including the domain name waterfronttimeshares.com

(limited to 100 certificates)
waterfronttimeshares.com
waterfronttimeshares.com
gbmood.com
ebooksale.info
gaoshao.com
waterfronttimeshares.com
ssppoisspirt.xyz
gaoshao.com
verifiedmatches.live
waterfronttimeshares.com
printatdubai.com

Certificate

The complete raw certificate details for waterfronttimeshares.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357234188758677958273798999568902490056119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 14:04:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 14:04:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waterfronttimeshares.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891431400706983052464781639772878608847975871702574042188009818772020226056120983501420895818459526239885941018457330073551448916305232353139978024210675852418499587354665127797250738065895122383685830978672521760582342285673891770945306789517326798846260613099311051104696885148685890974571374928033631349585805238108643213141846387655717395834191860700018766513202494236220343860810656994905285295289327282766473454060628292667208794221490142711853129737963469824706176422322512236156206812079302161457319833159193774233127535400607282699128573138666880654517765037296182552454249357239333303599157368152722552171514027936030434787947558963912595091763902682152273764746497868018435621858461700737201235900879221067255315133046954817838065419007501955975706292303732011217832002755407448759384222271147866207904201003271270382787919789823017761787433138758981794543285476962014420399278558488333719024904950844235947083273329968105579978993918812659435917449660828295265593852808818206329369293711258196288025570219205470807409435375673466517380739442801757899003630440677543808043532623592287678136924310992431524700812536535436836678784429258395841849352573519857697777700780520799404271532277588451525769549759490937799909291559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07e606609b976dcbb019497a1770e72e86765d2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1896 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accentuategroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanceamerixa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanceamrica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agentnote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurora-fernsehdienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakerysupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicycletent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careershollister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cccamcafard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.closet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cou258258258.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dialetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domoteens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embroideredshirts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exploringcreativity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fahrradladen-lorenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdnvrdglv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemmir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.headboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heeltotoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huseyinyilmaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyoceradocumentsolutions.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakefrontluxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macaustem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noosafoodwinefestival.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordvnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulrivers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.politicalparty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rakkipanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regina.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renweb1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.replacemennts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repllacements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seedly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaderays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoewarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sk2102.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaknbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squarespacce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamilsexstories.net.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tshirtsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vagos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vonivia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfronttimeshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernfusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xquyuan7.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yemencvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accentuategroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceamerixa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceamrica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentnote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora-fernsehdienst.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerysupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicycletent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careershollister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cccamcafard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'closet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cou258258258.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialetica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domoteens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embroideredshirts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exploringcreativity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fahrradladen-lorenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdnvrdglv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemmir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headboard.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heeltotoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huseyinyilmaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyoceradocumentsolutions.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakefrontluxury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macaustem.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noosafoodwinefestival.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordvnp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulrivers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politicalparty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rakkipanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regina.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renweb1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replacemennts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repllacements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seedly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaderays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoewarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sk2102.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaknbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squarespacce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilsexstories.net.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tshirtsigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vagos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcbrowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vonivia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfronttimeshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernfusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xquyuan7.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yemencvs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d035a74370000040300483046022100d894d4e251e5fe3f14f06ed42224651a97074f0682b16f2fd28b0b8a7a1cf2e3022100b63e3f14a9d60075d103baf0e3ce62b66985c65194b0693d12d462efc325eb530076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d035a7531000004030047304502210080c52215423c1c9005d43298fcf6b66bb69dab28c6ddf938cfb9dd414b02c95802203ec7671fd2d8d8abc46df66785116e8201a8e84ee4f75a89b99b53a56f6cfde1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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