lucanto.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c3:b0:96:e7:fe:de:07:14:3d:75:2b:b0:61:ec:00:8f:23 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lucanto.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:b0:96:e7:fe:de:07:14:3d:75:2b:b0:61:ec:00:8f:23
Serial Number (int): 327926647022079951685406206243838086909731
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:d2:27:ec:8f:8f:cb:c6:38:0e:dc:74:58:cf:8d:dd:73:9a:f1:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:d1:8d:63:6e:b7:09:fd:c8:b4:77:d1:1f:72:47:cf:29:73:c3:9c
Fingerprint (sha256): 7b:13:b9:8f:a8:94:9e:3f:d3:63:45:82:d3:ab:8a:21:4d:e0:9c:1d:ca:a8:5f:ac:3c:ea:e9:1f:84:3d:2b:39

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lucanto.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucanto.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.answerfetch.com
*.auntotrader.com
*.bestgunsafe.com
*.canconverter.com
*.cindimovies.com
*.cnschicago.com
*.cobbvantress.com
*.daillybeast.com
*.dailynmotion.com
*.elvove.com
*.emerirates.com
*.fediliscare.com
*.fifthking.com
*.flaytour.com
*.inlingua-lyon.com
*.jcpebby.com
*.jewol.com
*.kellerwillians.com
*.khayak.com
*.lucanto.com
*.mandarinahotel.com
*.menhir-informatica.com
*.metaploit.com
*.neflitx.com
*.nudevistsa.com
*.palmmedicalsupply.com
*.perscriptionplans.com
*.peterpenbus.com
*.phatfarma.com
*.playacolibri.com
*.pornotama.com
*.rfpulse.com
*.samabaporno.com
*.sauna-modelos.com
*.seierratradingpost.com
*.smartarcontacts.com
*.thebenifical.com
*.vipteenshop.com
*.wwwmindware.com
*.xwnical.com
*.zipyshare.com
answerfetch.com
auntotrader.com
bestgunsafe.com
canconverter.com
cindimovies.com
cnschicago.com
cobbvantress.com
daillybeast.com
dailynmotion.com
elvove.com
emerirates.com
fediliscare.com
fifthking.com
flaytour.com
inlingua-lyon.com
jcpebby.com
jewol.com
kellerwillians.com
khayak.com
lucanto.com
mandarinahotel.com
menhir-informatica.com
metaploit.com
neflitx.com
nudevistsa.com
palmmedicalsupply.com
perscriptionplans.com
peterpenbus.com
phatfarma.com
playacolibri.com
pornotama.com
rfpulse.com
samabaporno.com
sauna-modelos.com
seierratradingpost.com
smartarcontacts.com
thebenifical.com
vipteenshop.com
wwwmindware.com
xwnical.com
zipyshare.com

Other certificates including the domain name lucanto.com

(limited to 100 certificates)
comunation.net
lpand.com
buyandgetpaid.com
onecareerstop.org
wwwazerlotereya.com
sallyrewards.com
market4cast.net
onecareerstop.org
bcbsfl.cm
lucanto.com
supperrich.com
runova.com
domainresolving.com
onecareerstop.org
domainresolving.com

Certificate

The complete raw certificate details for lucanto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5gZunZ1Psuq577NKi15J
vJoV6nYDOU1rGr7fjVNKKIykALVUJnohHCpPONYnIPXNjqRuC3BpV8LAj9VFQJJt
ViBpWTQ0gXDGg02DrFWYEavNqVS4vbGpPsQLZ5l0qp5J71A4YqHrBiXqNk6OrEr7
UvFeJGzMcMP+eoCEoxEdddcdaL8WuDBC35iHY2HVHnCtzF2ZnFWpvcTHKGLvZrE3
EpyALbr/dIy/1un8np6arZG23YUfblXL2y+F4+8e3PrQV3p1wt53fgPgV6qBhFEA
z7avAeLEltDDwSV4VdzTAbzT8FH4gUY4U8HQuAYV0hRnfqHKolttg7Yq4rNpaqcG
W41CXhZsc3hYKTqU7O8jotn/EsOtUPXEHqjqd9MLH+EQdNanShyy2vK8QFFVfR+Q
y2lu8zbqELpPHCdyLldFxMgjEfNomBl/UPspJpj+otV5NJ5Yz3jWR/zdjugA39Lp
N+QaRT9n2JOCgc66eWXbfKmkuvPzbWlQtCzCww7KTdgn9ALWJuhLbtfNOglECbUa
59xpCwxA1u4UWJQ6vQm1VxmQpUrju9Kt+YNkXJI0LZpyl9rx+KosCfuxmS62cYgF
Gss+w+rYdiNmO98UPnN6wwE+bp6/t3fzWt0cWEtH2Ibm8tCcHN4OWQuc9GON64e9
GfEyUo4AGkhTDxgwhBNJt/sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327926647022079951685406206243838086909731
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 06:03:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 06:03:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucanto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 938420638176029840000689878681060307571149154729231491223174315164294149359509579977518172212156194993774329396168540150509381739800105369290405446274870343175314804799725290509747514529410176401456914304451086197715145059718122477222928787099041717426285113858791035196583870734783222553427372632270427137510065851993657576822717597362054163132639741864305526410682960315426865178458020958734270699903799891441061024043239184118052232520513365363274235998289691670183379097909843669300910739816093435670804901253037817248043459619158040751357180915532677371790851291715259078927027719435523661090651626205122155524380496365943397398245534992217415665032977047652686780138565893449663003106446568929218011879771487891001762666731072018665910318773604013134438671020607225122644132030609181396480552189517805294711269659066448921670087934572570048329107155685593185634188399468587975235147102458611960641037935038733507824740775555115240262074268730522882557649639350779614679858449956056126412263330400212773600440468699776438880315318936363508486292542860343235321285234172981552781786193505233148279775772550331163038617040628696934331824410976400465057526532810710404565759126918320710378286249178129221511173316724665655931549691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07d227ec8f8fcbc6380edc7458cf8ddd739af1dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.answerfetch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auntotrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestgunsafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canconverter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cindimovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnschicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cobbvantress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daillybeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailynmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elvove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emerirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fediliscare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fifthking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inlingua-lyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jcpebby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kellerwillians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khayak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucanto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mandarinahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menhir-informatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metaploit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neflitx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudevistsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmmedicalsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perscriptionplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peterpenbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phatfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playacolibri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornotama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rfpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samabaporno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sauna-modelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seierratradingpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartarcontacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebenifical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipteenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmindware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xwnical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zipyshare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'answerfetch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auntotrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestgunsafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canconverter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cindimovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnschicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobbvantress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daillybeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailynmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elvove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerirates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fediliscare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifthking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaytour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlingua-lyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcpebby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellerwillians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khayak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucanto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandarinahotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menhir-informatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metaploit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neflitx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudevistsa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmmedicalsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perscriptionplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peterpenbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phatfarma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playacolibri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornotama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samabaporno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauna-modelos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seierratradingpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartarcontacts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebenifical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipteenshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmindware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xwnical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipyshare.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167c546e5920000040300473045022100f9db48255b849281a2ec18dfd9ac9057b17df590c195d94549e941d6e37d28b3022024418f9f1c0c3c5877f2382511769929d71d38183fc3b3812af492c683ef5d3000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167c546e3a50000040300483046022100c64c6f3d63606ee5069c0709692b33965c5dd70787aafb050cc8aa1f9246fb1b022100f1f27082a137cf58af03c8e595ca4839c4680242aaacf8f6c8b812363ebe1c4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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