usmintquarters.com

Issued by R3

About this certificate

This digital certificate with serial number 04:57:9b:4d:cf:a4:31:6b:4d:9a:2d:9e:87:2e:d0:49:4f:4b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=usmintquarters.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:9b:4d:cf:a4:31:6b:4d:9a:2d:9e:87:2e:d0:49:4f:4b
Serial Number (int): 378260144006834903145082054577093830332235
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d8:6a:e1:58:5e:d5:6a:a0:5d:35:47:33:64:4a:b0:12:a1:d4:16:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:26:51:09:25:8a:4c:cc:97:62:bd:69:26:d1:df:cd:0a:f5:a4:e3
Fingerprint (sha256): 7d:7d:ed:d8:4c:28:fd:25:9c:dd:d2:6d:44:fc:0b:98:e0:72:14:5b:fa:3c:4e:f9:d6:0b:60:ef:e9:7f:5f:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate usmintquarters.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usmintquarters.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.andalia.com
*.arbeitsagentur-frankfurt.de
*.babycakesshop.com
*.babyzwemmen.com
*.calcadosonline.com
*.ceprincipat.com
*.cncmachineplans.com
*.cobaltcable.com
*.colombitube.com
*.coranweb.com
*.danceoutloud.com
*.earnesthealth.com
*.echosec.com
*.ellevacanze.com
*.filesdump.com
*.finananzen.net
*.findmylostphone.com
*.french.com
*.guitarcase.com.au
*.japaneseyoutuberinterviewsfamouswhitepornstar.in
*.kangarookids.com
*.lapolicegear.co
*.livesat.com
*.macdona.com
*.madeinmygarage.com
*.mayvids.com
*.midalia.com
*.mitee.com
*.musicforamerica.com
*.mutualprotective.com
*.oyuncehennemi.com
*.petcopals.com
*.pwnoutube.com
*.queensbeautysupply.com
*.realcountryonline.com
*.santeriaspells.com
*.stoneagepavers.com
*.thehealthresource.com
*.torlai.com
*.torrentqq159.com
*.torrentz3.eu
*.truehomevalue.com
*.umma.net
*.usmintquarters.com
*.weddingmine.com
*.whichsteelfabrication.com.au
*.wwwchangehealthcare.com
*.ynghiacuocsong.online
*.yoselyn.es
*.zenithbankplc.com
andalia.com
arbeitsagentur-frankfurt.de
babycakesshop.com
babyzwemmen.com
calcadosonline.com
ceprincipat.com
cncmachineplans.com
cobaltcable.com
colombitube.com
coranweb.com
danceoutloud.com
earnesthealth.com
echosec.com
ellevacanze.com
filesdump.com
finananzen.net
findmylostphone.com
french.com
guitarcase.com.au
japaneseyoutuberinterviewsfamouswhitepornstar.in
kangarookids.com
lapolicegear.co
livesat.com
macdona.com
madeinmygarage.com
mayvids.com
midalia.com
mitee.com
musicforamerica.com
mutualprotective.com
oyuncehennemi.com
petcopals.com
pwnoutube.com
queensbeautysupply.com
realcountryonline.com
santeriaspells.com
stoneagepavers.com
thehealthresource.com
torlai.com
torrentqq159.com
torrentz3.eu
truehomevalue.com
umma.net
usmintquarters.com
weddingmine.com
whichsteelfabrication.com.au
wwwchangehealthcare.com
ynghiacuocsong.online
yoselyn.es
zenithbankplc.com

Other certificates including the domain name usmintquarters.com

(limited to 100 certificates)
calamvale.com.au
usmintquarters.com
usmintquarters.com
shophome.site
usmintquarters.com
ilaody.com
staplles.ca
mplab.com
becubanking.com

Certificate

The complete raw certificate details for usmintquarters.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378260144006834903145082054577093830332235
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-18 22:12:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-18 22:12:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usmintquarters.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766016063345539492322973516593128611241673178793049560017763864234661965502899306859119934671646687406442776201398804890662128680249330851920626812778915856609709681194685559660304089021854654843762202655651270225985925355718998323948369006906918243389181811916100759610101490477407522347228494221089329836620537336514076299824422211276644945209291222384944120198944452590008453508114321766253560662277375769266496887081709235687215551231543990668653210612491400624994577717776545490616973188900224509840250430795059726348375175721120816547225395731154143900962345238250651504986272050554594813071285896950620630312472029406279740407696266967915733707155254719339088824510500883405619160396950907150495427149520364484038310323726931718159757527308564392672709621742731556891020715416332008970553530504883412751426216637797885029322170918815040604010739296062602933349979138543289205506164278165366580328635234431991910627380464771851495398242398815519479018502171331856128603723170446495303736999655535259717987302889966444414509576190753225850593665216556262764634390914686440534030217019842710440405100450538130475694151626148862626588926158292450861021977163298572300371149081614561578517804043403082417178968722156064337864162681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d86ae1585ed56aa05d354733644ab012a1d416c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1950 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbeitsagentur-frankfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babycakesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babyzwemmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calcadosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceprincipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cncmachineplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cobaltcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colombitube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coranweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danceoutloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earnesthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echosec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellevacanze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filesdump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finananzen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findmylostphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.french.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitarcase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japaneseyoutuberinterviewsfamouswhitepornstar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kangarookids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapolicegear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macdona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madeinmygarage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayvids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicforamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutualprotective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oyuncehennemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petcopals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pwnoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queensbeautysupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realcountryonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santeriaspells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoneagepavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehealthresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torlai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentqq159.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentz3.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truehomevalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usmintquarters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weddingmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichsteelfabrication.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwchangehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ynghiacuocsong.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoselyn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zenithbankplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbeitsagentur-frankfurt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babycakesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babyzwemmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcadosonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceprincipat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cncmachineplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobaltcable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colombitube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coranweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danceoutloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earnesthealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echosec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellevacanze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filesdump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finananzen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmylostphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'french.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitarcase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japaneseyoutuberinterviewsfamouswhitepornstar.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangarookids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapolicegear.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macdona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madeinmygarage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayvids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicforamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutualprotective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyuncehennemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petcopals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwnoutube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queensbeautysupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realcountryonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santeriaspells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneagepavers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehealthresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torlai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentqq159.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentz3.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truehomevalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umma.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usmintquarters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichsteelfabrication.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwchangehealthcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ynghiacuocsong.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoselyn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenithbankplc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185c727ec1c0000040300463044022050484cd41ebafd22dd4fa826df4837fbdac64948396dca41880adb6c9b6f55f202203b2a83179c2969e6da9bdcca579b5ddeeb05a762d336d18e3967871818e6b20b007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185c727ec330000040300473045022078285d0135b22d2543a13ce240c19cd4a19e1a7d0e6c5c0a0c129a8a75b06378022100d7822955fb86ce30369553f722963cb5cfb11a2b2edd7402e71dcd3b00971281
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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