soyuz-a.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f8:36:4a:d6:25:fe:42:1c:c0:09:39:34:db:e7:6d:58:49 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=soyuz-a.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:36:4a:d6:25:fe:42:1c:c0:09:39:34:db:e7:6d:58:49
Serial Number (int): 345799051676859182225022586420355929036873
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:d0:6e:df:1b:8f:0e:9a:3e:64:fa:84:f7:02:bd:42:78:28:50:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 43:d3:be:e7:e6:60:84:f0:0b:92:a1:d5:81:89:2b:c0:1f:dd:a8:b3
Fingerprint (sha256): 78:f6:8f:cf:46:2a:14:e6:9b:87:dc:3b:80:25:c8:5b:66:4f:79:1f:9b:d7:ce:7e:46:51:41:da:a2:f3:c1:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate soyuz-a.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for soyuz-a.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.40wholefoods.com
*.accountverificationback.com
*.actualites.business
*.acutabovetreeservicect.com
*.autorepairexpresshb.com
*.btcat.org
*.buscadordeparejas.net
*.cadiseno.org
*.classevirtuale.net
*.clubdeportivotorrevieja.com
*.cottagefloralbellaire.com
*.dadag6.com
*.drashishkubde.com
*.dronsta.net
*.ecuries-valdeloire.com
*.emergenciaselhierro.org
*.enney.com
*.eq46.xyz
*.faceaindia.org
*.facebookg.com
*.flintplumbingcontractor.net
*.friendssexcam4.com
*.hpdijual.com
*.jeremywillislawoffice.com
*.kupitkalyan.cc
*.lagoslawn.com
*.linnheidi.com
*.missionoakswine.com
*.namasteastu.com
*.opentint.com
*.polinsumos.com
*.prestatie.com
*.primetimecards.com
*.primevedieo.com
*.realitygfslut.com
*.risingstarprofessionals.com
*.roundhillhomestead.com.au
*.soyuz-a.com
*.succes360.com
*.tgmax.com
*.thewakeside.com
*.vandnconstruction.com
*.verminbuilds.com
*.vg30.com
*.wond.bio
*.yableaccess.us
*.youramericanfitness.com
*.yourlense.com
*.yu-kikai.com
*.zaimassagem.co
40wholefoods.com
accountverificationback.com
actualites.business
acutabovetreeservicect.com
autorepairexpresshb.com
btcat.org
buscadordeparejas.net
cadiseno.org
classevirtuale.net
clubdeportivotorrevieja.com
cottagefloralbellaire.com
dadag6.com
drashishkubde.com
dronsta.net
ecuries-valdeloire.com
emergenciaselhierro.org
enney.com
eq46.xyz
faceaindia.org
facebookg.com
flintplumbingcontractor.net
friendssexcam4.com
hpdijual.com
jeremywillislawoffice.com
kupitkalyan.cc
lagoslawn.com
linnheidi.com
missionoakswine.com
namasteastu.com
opentint.com
polinsumos.com
prestatie.com
primetimecards.com
primevedieo.com
realitygfslut.com
risingstarprofessionals.com
roundhillhomestead.com.au
soyuz-a.com
succes360.com
tgmax.com
thewakeside.com
vandnconstruction.com
verminbuilds.com
vg30.com
wond.bio
yableaccess.us
youramericanfitness.com
yourlense.com
yu-kikai.com
zaimassagem.co

Other certificates including the domain name soyuz-a.com

(limited to 100 certificates)
*.041478.com
academiaversal.com
primarycourses.com
soyuz-a.com
academiaversal.com
soyuz-a.com

Certificate

The complete raw certificate details for soyuz-a.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345799051676859182225022586420355929036873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 21:49:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 21:49:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'soyuz-a.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837767603919582671533747536353268405616762403477924623041990958665511603011925197968328868660306255962643468565141598969222004586555797792704683052987922451025028757941876463991880639086151602079430382926603307205979926608766222589251505369014870466589751680086510643786952947555734586728460912840895709298699701695855681510178948162898715685195442323765390620162772603287165583794999484360603068187420471695549348446454803056454876727426526986479581698835234975759452880297338013101504021163306814489034352802012397484170578316106749376500160062179676537458339036665316093809215462431146789894842869614659265414071773697713909382000503373364272672667076346114031185112002717722930730566834416233286474823249724066502470423768242419469356106883456785129159499979002691222781963802174596253877176411379439323563668331142517831373021089772477688550563098276436809453353734571220440019196822281278294769458916764448289158021421423062675759635166257915810010089148585424301059746238217996241167633375312739599101458889013850922413407036188804812500643579646978677894713407292414310154472818344819308401863389253852733707151889533749311455384983282986759436412446955343271069581097694268657384002546258679370814546535740206083681374029777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fed06edf1b8f0e9a3e64fa84f702bd4278285078
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.40wholefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountverificationback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actualites.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acutabovetreeservicect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autorepairexpresshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buscadordeparejas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cadiseno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classevirtuale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubdeportivotorrevieja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cottagefloralbellaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dadag6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drashishkubde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dronsta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecuries-valdeloire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emergenciaselhierro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eq46.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faceaindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facebookg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flintplumbingcontractor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendssexcam4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpdijual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeremywillislawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kupitkalyan.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagoslawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linnheidi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.missionoakswine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namasteastu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opentint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.polinsumos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prestatie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primevedieo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realitygfslut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risingstarprofessionals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roundhillhomestead.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soyuz-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.succes360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tgmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewakeside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vandnconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verminbuilds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vg30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wond.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yableaccess.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youramericanfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourlense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yu-kikai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaimassagem.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40wholefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountverificationback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actualites.business'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acutabovetreeservicect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autorepairexpresshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buscadordeparejas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadiseno.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classevirtuale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubdeportivotorrevieja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottagefloralbellaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadag6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drashishkubde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dronsta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecuries-valdeloire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergenciaselhierro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eq46.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceaindia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebookg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flintplumbingcontractor.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendssexcam4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpdijual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremywillislawoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kupitkalyan.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagoslawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linnheidi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'missionoakswine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namasteastu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opentint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polinsumos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestatie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primetimecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primevedieo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realitygfslut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risingstarprofessionals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roundhillhomestead.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soyuz-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succes360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewakeside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vandnconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verminbuilds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vg30.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wond.bio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yableaccess.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youramericanfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourlense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yu-kikai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaimassagem.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c181fdc3d0000040300473045022100fdd04057648b15b13f78ec42a2f3a1769e4e059bae40211e570d0e9aa8dfce5802201a79705b97c6c868a8a05381c20be230d2a24c0714c5ce892911d25372b411f70077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c181fdc440000040300483046022100803de1452bfac0b435cc3bf61772a67eab62b149b76bc6c1dc599bfc613535de022100ea0a9c4fbc2bbc370ad86c60ec87aeac6984bdf39062325c945d48fb32244059
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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