envptucson.org

Issued by R3

About this certificate

This digital certificate with serial number 03:1d:58:91:36:dc:35:e0:e1:f2:ab:a5:df:ed:40:63:0e:83 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=envptucson.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:58:91:36:dc:35:e0:e1:f2:ab:a5:df:ed:40:63:0e:83
Serial Number (int): 271322772495358504449372655445370065849987
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:5b:0a:34:e6:b8:f0:f7:32:a7:0b:75:23:7b:fb:3c:6c:13:9b:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:8b:b8:68:59:35:cf:ec:84:c5:df:58:89:32:ba:ff:a4:eb:81:22
Fingerprint (sha256): 78:3d:28:05:85:3a:20:8c:67:2d:dd:8e:8e:5c:88:af:18:7b:f0:7d:8a:c2:07:32:35:8d:66:f1:4a:30:3c:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate envptucson.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for envptucson.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abimpianti-ch.com
*.adbove.com
*.appliance-repsir-manuals.org
*.assxxxhd.com
*.backstrrets.com
*.bestbuybuy.com
*.blushnova.com
*.bszoocam.org
*.camstem.com
*.chisonetto.com
*.clayedbyrasha.com
*.damotos.com
*.deletealo.com
*.desjardinslifeinsurence.com
*.devon.club
*.envptucson.org
*.fasokemoas.online
*.fourseasonsupperfreehold.com
*.fwyr.org
*.fynfkjanenwh.com
*.gotvislubov.com
*.hbbroofing.co
*.i1wp.com
*.instabuyers.com
*.jefe.in
*.journalspedu.com
*.kendra.club
*.keusccjw.com
*.lalocuralocura.net
*.leptospiroza.com
*.livinginmanalapan.com
*.lmd-montagne-randonnee.com
*.marco.club
*.mature-sexy.pro
*.mebongcon.com
*.minelithium.com
*.monmouthnewconstruction.com
*.mountainlodgehomes.com
*.movetime24.com
*.mqefgyes.com
*.newslimcare.com
*.propstwoodworking.com
*.rerootgaming.com
*.runcot.com
*.supersolidertalk.com
*.suvkings.com
*.taboobrew.com
*.velparibook.com
*.xdxdccdcsddddwsbss.com
*.ytvqmajja.com
abimpianti-ch.com
adbove.com
appliance-repsir-manuals.org
assxxxhd.com
backstrrets.com
bestbuybuy.com
blushnova.com
bszoocam.org
camstem.com
chisonetto.com
clayedbyrasha.com
damotos.com
deletealo.com
desjardinslifeinsurence.com
devon.club
envptucson.org
fasokemoas.online
fourseasonsupperfreehold.com
fwyr.org
fynfkjanenwh.com
gotvislubov.com
hbbroofing.co
i1wp.com
instabuyers.com
jefe.in
journalspedu.com
kendra.club
keusccjw.com
lalocuralocura.net
leptospiroza.com
livinginmanalapan.com
lmd-montagne-randonnee.com
marco.club
mature-sexy.pro
mebongcon.com
minelithium.com
monmouthnewconstruction.com
mountainlodgehomes.com
movetime24.com
mqefgyes.com
newslimcare.com
propstwoodworking.com
rerootgaming.com
runcot.com
supersolidertalk.com
suvkings.com
taboobrew.com
velparibook.com
xdxdccdcsddddwsbss.com
ytvqmajja.com

Other certificates including the domain name envptucson.org

(limited to 100 certificates)
envptucson.org
movetime24.com
envptucson.org
envptucson.org

Certificate

The complete raw certificate details for envptucson.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271322772495358504449372655445370065849987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 22:56:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 22:56:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'envptucson.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947635472467813601583231909012009934689935475115124991144045986614341701161806508343283902923683554657657491687806329667233118992096050150556967565523763510030005381775011395958663165526070668235724675237497593253974337727414333322431083592106351088916690313796595098599275366902420080760961792743822308821882137541607766955991172999082898386567129953585666825878088541949870904094632114160337408666142976945640054250247358152700941358774846902300221610429894588215154211187038282699897282754669232441478406145444074932617141497634090349301422353066417752500431194094351490017743712206296707230086971757626634567121901855265554861270702655231885422170257668719673095932944145570511388670834656692926668681244779979031489319502952592777499293761422151712457040002281102968756298532384575076127715878867060652455235026195087406226425220971771474519629170906576305219822057738801424698910981531602999122966005367180319929154378361840048714432404476874782144228076649813912954490962235798735494650813122841471760428363072816860336114716890160179517657098673819440454219358893147966871711203200161001096966046318945408294650313171732420287186173350076461919298701776327506356915895672959190968112275500051272769727988236488220860969605411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							025b0a34e6b8f0f732a70b75237bfb3c6c139bfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abimpianti-ch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adbove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appliance-repsir-manuals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assxxxhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backstrrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestbuybuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blushnova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bszoocam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camstem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chisonetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clayedbyrasha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deletealo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desjardinslifeinsurence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devon.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envptucson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fasokemoas.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fourseasonsupperfreehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fwyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fynfkjanenwh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotvislubov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hbbroofing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i1wp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instabuyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jefe.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.journalspedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kendra.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keusccjw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalocuralocura.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leptospiroza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livinginmanalapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lmd-montagne-randonnee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marco.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mature-sexy.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mebongcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minelithium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monmouthnewconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainlodgehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movetime24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mqefgyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newslimcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propstwoodworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rerootgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runcot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supersolidertalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suvkings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taboobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velparibook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xdxdccdcsddddwsbss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ytvqmajja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abimpianti-ch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adbove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliance-repsir-manuals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assxxxhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backstrrets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbuybuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blushnova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bszoocam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camstem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chisonetto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayedbyrasha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deletealo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desjardinslifeinsurence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devon.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envptucson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasokemoas.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fourseasonsupperfreehold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwyr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fynfkjanenwh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotvislubov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbroofing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i1wp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instabuyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefe.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journalspedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kendra.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keusccjw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalocuralocura.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leptospiroza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livinginmanalapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmd-montagne-randonnee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marco.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mature-sexy.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mebongcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minelithium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monmouthnewconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainlodgehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movetime24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqefgyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newslimcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propstwoodworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rerootgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runcot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersolidertalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suvkings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taboobrew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velparibook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xdxdccdcsddddwsbss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytvqmajja.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dd86674ae0000040300473045022048860b204b3a932ed34e6512f580001473853804e76c0613c61f6713794ad5a0022100f58f9394fc68199938b1db10f03d3a47935f807a40af1e32cf54e1ea0ef258e3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dd86674b50000040300473045022061209820c710e32e02489fcb9f5370a09d38e310fa786173da9f2856d86bf63f022100a4c4a85034de3e40ae06e2da0274d875b60fc0cf460fe63bf5c073be86c4a348
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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