alflen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:c5:97:ed:41:4d:80:3d:2d:4f:bb:ec:ee:4e:68:7f:c8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=alflen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:c5:97:ed:41:4d:80:3d:2d:4f:bb:ec:ee:4e:68:7f:c8
Serial Number (int): 344288119721168945753440117255866874888136
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:45:a7:7d:a3:c2:aa:6f:ec:98:c8:3c:87:e3:78:13:f2:d1:41:18
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:f2:52:fa:76:f1:53:05:56:23:a2:74:f9:4a:34:84:14:65:15:09
Fingerprint (sha256): 79:ab:fd:8a:b3:77:84:60:ec:59:f1:fe:f3:f3:84:67:6b:c6:eb:d5:af:6b:2a:ee:64:9d:e2:3c:2c:32:4b:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate alflen.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alflen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airindiaairline.com
*.albaweb.com
*.alflen.com
*.antwine.com
*.ashleel.com
*.astrowinner.com
*.ballandclaw.com
*.baneado.com
*.bhgmagazine.com
*.broomhall.com
*.buildabite.com
*.chocolatechipcake.com
*.costabonita.com
*.cursofoto.com
*.dacusville.com
*.diffglasses.com
*.escoladeteologia.com
*.ettorneys.com
*.fernandezgarcia.com
*.foodgrowing.com
*.fotografcisi.com
*.fukushima-is-still-news.com
*.gastronomes.com
*.geopanel.com
*.glaucia.com
*.hkdramanow.pro
*.inkwellplanner.com
*.jencomaskeck.com
*.lajagua.com
*.merbabe.com
*.mergold.com
*.misaj.com
*.motopema.com
*.moviesinfobsyok.org
*.mundocomercial.com
*.nauanngon.com
*.onlinebroadcasters.com
*.repossessors.com
*.rezas.com
*.sieminski.com
*.tanyakenapa.net
*.tautvydas.com
*.thinkism.com
*.twoinone.com
*.txhousing.com
*.villakalliopi.com
*.viralyser.com
*.wattguard.com
*.weiterdenken.com
*.yunin.com
airindiaairline.com
albaweb.com
alflen.com
antwine.com
ashleel.com
astrowinner.com
ballandclaw.com
baneado.com
bhgmagazine.com
broomhall.com
buildabite.com
chocolatechipcake.com
costabonita.com
cursofoto.com
dacusville.com
diffglasses.com
escoladeteologia.com
ettorneys.com
fernandezgarcia.com
foodgrowing.com
fotografcisi.com
fukushima-is-still-news.com
gastronomes.com
geopanel.com
glaucia.com
hkdramanow.pro
inkwellplanner.com
jencomaskeck.com
lajagua.com
merbabe.com
mergold.com
misaj.com
motopema.com
moviesinfobsyok.org
mundocomercial.com
nauanngon.com
onlinebroadcasters.com
repossessors.com
rezas.com
sieminski.com
tanyakenapa.net
tautvydas.com
thinkism.com
twoinone.com
txhousing.com
villakalliopi.com
viralyser.com
wattguard.com
weiterdenken.com
yunin.com

Other certificates including the domain name alflen.com

(limited to 100 certificates)
bicycles.co.za
bicycles.co.za
www.dominimarket.com
alflen.com
thehamptons.expert
alflen.com
infolaye.com
aitaikuji.co
bicycles.co.za
beethovens.com
bicycles.co.za
alflen.com
alflen.com

Certificate

The complete raw certificate details for alflen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344288119721168945753440117255866874888136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 02:56:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 02:56:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alflen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1000512512337483849245261701692479243101000263145323846225727262088126908171627530679897102497926975057504079071692367210187070081529840146735272524791071837886880645657007407867052335290394368438527094288417995761806726813809315399729827379895697936091082800035774160244246636465765656366232214057253843677006141155728131765051392102955601535437192035086668236316401697756201610792103580847776272991785172790546188856863578912094682848147996825459043222754653832507006777894018713341057689133100340746371927994667729398453244772525194643251521634431456630725116336852597119973783988844098396354295629924591976123558554604579373700034700392787250907781493311352902096032238758272398388688497172880651357949176866922213123004951175048054487458368336586186864794380700095457005671133543255463711761067537332102576056132053297333621689535075788484046069259622689183185099709282759360328129150381555428233991541668145408663048060241522894888858704572629172209157993480175041725688056461040020964767399634191692126067591495809462505457606834231407858645204779271821393471048555182283333025161279041985066431780346139471280896971599037119443382744729183096809057295515775067951976589404317257711515981201469388553351384786292342490561035743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9945a77da3c2aa6fec98c83c87e37813f2d14118
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airindiaairline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alflen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashleel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrowinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballandclaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baneado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhgmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broomhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildabite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocolatechipcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costabonita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursofoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dacusville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diffglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escoladeteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ettorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fernandezgarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodgrowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotografcisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fukushima-is-still-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gastronomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geopanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glaucia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkdramanow.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkwellplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jencomaskeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lajagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merbabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mergold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motopema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviesinfobsyok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundocomercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nauanngon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinebroadcasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repossessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rezas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sieminski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanyakenapa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tautvydas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinkism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twoinone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villakalliopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viralyser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wattguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weiterdenken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yunin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airindiaairline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alflen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrowinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballandclaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baneado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhgmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broomhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolatechipcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costabonita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursofoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacusville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diffglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escoladeteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ettorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fernandezgarcia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodgrowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotografcisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukushima-is-still-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastronomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geopanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaucia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkdramanow.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkwellplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jencomaskeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merbabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mergold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motopema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesinfobsyok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundocomercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nauanngon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinebroadcasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repossessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sieminski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanyakenapa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tautvydas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twoinone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txhousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villakalliopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viralyser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wattguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiterdenken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd7dc61ae0000040300473045022014869f14afb70a5be47dbbd4646e7c562694e9c21235f1f106a32e09659e049702210085bce02f45467c4b274f7b1c92b90cc2506d63584110fd5edfafa22d944b9b690076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd7dc65a9000004030047304502202366d71990e8d39d08f96c019833c1932369672ac160f5c1d2f8aeeb98020ec60221009aa259254ba0cc97dbc78cba6b1ed90ea1c6d47a0964ff1f86de6b14df25da00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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