manik.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:89:0a:ed:72:51:c2:e4:ab:cc:56:a6:b1:93:f7:76:66:64 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=manik.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:0a:ed:72:51:c2:e4:ab:cc:56:a6:b1:93:f7:76:66:64
Serial Number (int): 307970067236435123865463120512759752975972
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:38:f0:5d:e4:33:92:93:08:bf:ad:96:4b:53:31:ca:ff:b0:4f:db
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:de:04:a0:b5:e9:e7:48:04:2a:e1:36:a6:3c:16:6f:7a:44:93:e6
Fingerprint (sha256): 81:54:da:30:74:a2:94:15:27:94:b6:99:38:3e:65:04:d6:50:0f:49:f1:46:fe:b9:7e:fc:31:b9:ab:4a:4a:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate manik.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manik.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.88321.com
*.alunni.com
*.andamos.com
*.becontent.com
*.bochai.com
*.burnets.com
*.cambruzzi.com
*.camponeschi.com
*.carpentersson.com
*.claibourn.com
*.consignas.com
*.diverticoli.com
*.drpez.net
*.ecookers.com
*.empreiteira.com
*.endstone.com
*.express4less.com
*.genny.org
*.grizzell.com
*.haznevi.com
*.laurences.com
*.longislandfitnessclub.com
*.mallampalli.com
*.manik.net
*.microemprestimo.com
*.moviclub.com
*.musiccards.net
*.myfia.com
*.namita.org
*.nanaca.com
*.perarda.com
*.plastics-united.de
*.premixedpaint.com
*.reconnexion.com
*.redlightfilms.com
*.reguetoneros.com
*.relogio.com
*.replicafirearm.com
*.retrust.com
*.sandalu.com
*.seniorski.com
*.strandgard.com
*.taylin.com
*.vidula.com
*.vilabojana.com
*.visionspecialist.com
*.xianxiang.com
*.xxpy.com
*.yvetta.com
*.zaori.com
88321.com
alunni.com
andamos.com
becontent.com
bochai.com
burnets.com
cambruzzi.com
camponeschi.com
carpentersson.com
claibourn.com
consignas.com
diverticoli.com
drpez.net
ecookers.com
empreiteira.com
endstone.com
express4less.com
genny.org
grizzell.com
haznevi.com
laurences.com
longislandfitnessclub.com
mallampalli.com
manik.net
microemprestimo.com
moviclub.com
musiccards.net
myfia.com
namita.org
nanaca.com
perarda.com
plastics-united.de
premixedpaint.com
reconnexion.com
redlightfilms.com
reguetoneros.com
relogio.com
replicafirearm.com
retrust.com
sandalu.com
seniorski.com
strandgard.com
taylin.com
vidula.com
vilabojana.com
visionspecialist.com
xianxiang.com
xxpy.com
yvetta.com
zaori.com

Other certificates including the domain name manik.net

(limited to 100 certificates)
manik.net
blackpearlhomewood.com
www.arizonastemcell.net
013xs.com
w-k.me
topsa.com.mx
alistairgriffin.com
manik.net
manik.net
blackpearlhomewood.com
myent.com
ubkino.us
ubkino.us

Certificate

The complete raw certificate details for manik.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307970067236435123865463120512759752975972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 19:52:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 19:52:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manik.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783457534240098069488775967935376661896731806385573925535532085719352057983988084586933681853831607362990029789056001323093599952433939222889386716468743495221701301465171920017385140683395469154989381335639336516832321746124382648478318732542900160817133525596541935606291772670791351591824335231343786271040010576583609893707810474168780225004491650911928934282371276169871282680516370950576273951830631609689666443408489382253071057282720179454555489838035037624919916114244636807060112676681688034439538148216151623690595097132840276508341859188227843578626638343809444752548149343401034515044633949440360536145222143943943982707156099517947502170382988150755013523969137317882316287354604307502806131856964790928001255467373536020200150688028975957392881673277324256562126208920821472436442250442303174378825470197650352064080576053930622154807903120539610501792864353698884955958462672830602426181825826611547289543894050955247683958522931132954620832521337227364819756522505890399424370599297979029132727600901814024235059786337326792701097727761830015791145052214838257169568706594673158570878099209359225452723535070748052580850993016502890857524452282361308657216691489941640965853032367908162204276464988305440734931969141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d238f05de433929308bfad964b5331caffb04fdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.88321.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alunni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andamos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bochai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambruzzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camponeschi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carpentersson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.claibourn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consignas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diverticoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drpez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecookers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empreiteira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.express4less.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grizzell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haznevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laurences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longislandfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mallampalli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manik.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microemprestimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musiccards.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perarda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plastics-united.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premixedpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reconnexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redlightfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reguetoneros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relogio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.replicafirearm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seniorski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strandgard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vilabojana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visionspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xianxiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxpy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yvetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaori.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '88321.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alunni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andamos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becontent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bochai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambruzzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camponeschi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpentersson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claibourn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consignas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diverticoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drpez.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecookers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empreiteira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endstone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'express4less.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grizzell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haznevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurences.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longislandfitnessclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mallampalli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manik.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microemprestimo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musiccards.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanaca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perarda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastics-united.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premixedpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reconnexion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redlightfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reguetoneros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relogio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'replicafirearm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strandgard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vilabojana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionspecialist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianxiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxpy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvetta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaori.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f4e48896a00000403004830460221008b30103fee351c75a8aa2487213e8244400a4d880d021010fda1aedb17781e24022100f943860371c1b9b57feeaf2407bdf085636e08f1e322a8b055bcb40b04bb8e7800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f4e48896f00000403004730450221009111948f44a3f6cd78f52d5e4d68f6879fc28b9fbf4f7fab8cba1ed1488fe062022076d00cc616e9a644ce2c5ec3ceaf14d0f94a48fd0c32e8b3b67d7b609a457d5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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