geographyschool.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c4:da:00:de:34:50:fd:ee:2a:24:3b:12:94:de:21:ac:70 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geographyschool.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:da:00:de:34:50:fd:ee:2a:24:3b:12:94:de:21:ac:70
Serial Number (int): 328321977921705652684117398156109869591664
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:c4:3e:de:e2:b5:fd:9d:ae:4b:be:5d:95:1f:a9:39:8b:80:ce:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:2e:ee:d2:14:2a:e4:c2:ef:1d:38:19:18:63:25:c1:78:2c:22:1c
Fingerprint (sha256): 82:db:36:b0:f3:74:d7:2c:73:be:9e:5a:a0:04:ec:9f:bf:9d:ef:85:f2:db:91:af:3c:cc:13:fa:14:8a:b3:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geographyschool.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geographyschool.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4217.com
*.atartasmania.com
*.autobidarchives.com
*.bestialidades.com
*.bhave.net
*.bigdogsutodetailing.com
*.bloodclub.com
*.bluebirdchargers.com
*.cannabis-forum.be
*.chocolando.it
*.commercecards.com
*.cottage-house-26118.com
*.covercaractulas.com
*.cracknull24h.com
*.edilma.com
*.geographyschool.com
*.gitarklasik.com
*.grangestone.com
*.guineapighandbook.com
*.guing.com
*.hodad.com
*.ionsion.com
*.itler.com
*.kma.de
*.lungenkreb.de
*.lusir030.com
*.maison-ginkgo.com
*.mathbits.co
*.meanscam.com
*.mein-barmenia.de
*.nojm.com
*.northshoreweddings.com
*.nosrecette.com
*.nwetterzentrale.de
*.offersonlinie.com
*.pallie.com
*.pandoras.online
*.pogge.com
*.produksirombong.com
*.ptg800.com
*.socialstudysforkids.com
*.spatcontrol.net
*.stoptext.com
*.syner.eu
*.teppichflecken.de
*.thepassinglane.com
*.ulearing.com
*.valeriehoffenberg.com
*.waterships.com
*.whalerun.net
4217.com
atartasmania.com
autobidarchives.com
bestialidades.com
bhave.net
bigdogsutodetailing.com
bloodclub.com
bluebirdchargers.com
cannabis-forum.be
chocolando.it
commercecards.com
cottage-house-26118.com
covercaractulas.com
cracknull24h.com
edilma.com
geographyschool.com
gitarklasik.com
grangestone.com
guineapighandbook.com
guing.com
hodad.com
ionsion.com
itler.com
kma.de
lungenkreb.de
lusir030.com
maison-ginkgo.com
mathbits.co
meanscam.com
mein-barmenia.de
nojm.com
northshoreweddings.com
nosrecette.com
nwetterzentrale.de
offersonlinie.com
pallie.com
pandoras.online
pogge.com
produksirombong.com
ptg800.com
socialstudysforkids.com
spatcontrol.net
stoptext.com
syner.eu
teppichflecken.de
thepassinglane.com
ulearing.com
valeriehoffenberg.com
waterships.com
whalerun.net

Other certificates including the domain name geographyschool.com

(limited to 100 certificates)
geographyschool.com
www.southfloridaexterminator.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
ditos.com
irefrigerator.com
geographyschool.com
fayettecountyrealestate.com
geographyschool.com
geographyschool.com
geographyschool.com

Certificate

The complete raw certificate details for geographyschool.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328321977921705652684117398156109869591664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 07:09:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 07:09:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geographyschool.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802510328706760932410809609493170991215497810919698975414958512304875407849516016625288528286713442586424772238784272276922193659902988567557137700746832973820743474378633255279722786880917726077401640014159759111750323715037189163845965708625645849651359006131263101667204849707639531516449849099674818140465092994184860796783143575352976619780028465029746709141827411464512172560383305472682426510893165221197314427387298874507663897418360699866543087071199833552289188184938314773185164879237308338418912178284446452490494315671030451163841102390838487420722750902893970479971209900226312680496142776568606776086185317019945762323531597160044486920998940881530627505755954967425917618070561325782945998972766104966583644548247517706405598542334614964664184840956295150092105876407495632309536951148049403666531911923363994683891434880335693579222288541445306606413922778463288400566066920093789580468653161983836628066337142731916431770445627942222654904343487977204629296264244189019014411315757965974779118408355447808450021334797956245335587139955104373633167984698277030013283296805129150484527335549029791624628091106690369925580192867482069733301942363441723745739841308997847432065961823528130995634538263262905197065483569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07c43edee2b5fd9dae4bbe5d951fa9398b80ce74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1762 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4217.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atartasmania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autobidarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestialidades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigdogsutodetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloodclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluebirdchargers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabis-forum.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocolando.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cottage-house-26118.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covercaractulas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cracknull24h.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edilma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geographyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitarklasik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grangestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guineapighandbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hodad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ionsion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lungenkreb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lusir030.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maison-ginkgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mathbits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meanscam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mein-barmenia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nojm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northshoreweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nosrecette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwetterzentrale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offersonlinie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pallie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandoras.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.produksirombong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptg800.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialstudysforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spatcontrol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoptext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teppichflecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepassinglane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valeriehoffenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whalerun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4217.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atartasmania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autobidarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestialidades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigdogsutodetailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebirdchargers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabis-forum.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolando.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottage-house-26118.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covercaractulas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cracknull24h.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edilma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geographyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitarklasik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grangestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guineapighandbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionsion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lungenkreb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lusir030.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison-ginkgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathbits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meanscam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-barmenia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nojm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshoreweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosrecette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwetterzentrale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offersonlinie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pallie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandoras.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pogge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produksirombong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptg800.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialstudysforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spatcontrol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoptext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teppichflecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepassinglane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulearing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valeriehoffenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whalerun.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4c219f270000040300483046022100a247aaef5c709600b792b01fc7cd205346985cd5d0943d7ff454b82da73e8991022100bebb8712d603729773f7cf4826029523220467472d2d9b802142bb084955dabb0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b4c219f1f000004030046304402204940e8a900c7a0d2b571484317a540ae27703f18bf710faa7c729398eb48bcbd0220682516edf2bc656ff46029ba7ab62f6f09cf105cf25a26e3a4b3301becee3d73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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