nutriendovida.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6e:55:20:0c:b8:49:13:fa:c6:d3:56:2a:56:55:b1:13:f7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nutriendovida.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:6e:55:20:0c:b8:49:13:fa:c6:d3:56:2a:56:55:b1:13:f7
Serial Number (int): 385993354879474922237159259925927934628855
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 54:dc:30:db:88:bc:3c:07:b5:8b:04:da:73:4a:78:63:50:00:c4:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:18:d0:ec:78:0c:37:3f:c3:b0:6b:49:27:09:47:ac:7e:5e:f6:39
Fingerprint (sha256): 84:42:36:56:78:24:40:04:24:10:e4:6d:c1:f3:05:4e:72:e7:87:ca:2e:5f:4d:fa:6f:f9:93:3f:72:4e:97:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nutriendovida.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nutriendovida.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123moovies.net
*.13xiaoshuo.net
*.amtmedicalstaffing.com
*.beautyheal.org
*.betheasda.net
*.bikaui.me
*.butyourefrench.com
*.cheapdressesonlinestores.com
*.colegiomadrelaura.com
*.dapomiroworks.com
*.devstopia.net
*.dialogus.org
*.discoball.com.au
*.divxtotal.online
*.good-direct.com
*.gurututorku.com
*.hippomoon.com
*.historiapojazdu.com
*.holiceyewear.com
*.juvehaircare.com
*.kurczakiodeliasza.pl
*.libchurch.com
*.mangatou.com
*.marincity2022.com
*.myphamstarlight.com
*.northwestdoorandsupply.com
*.nutriendovida.com
*.oukitel.co
*.outstandingadvicelettertonoticetoday.info
*.pensionmarion.com
*.play-slitherio.com
*.poststorytoview-today.info
*.proavaras.com
*.rareburg.com
*.restaurant-lembellie.com
*.rhonlinesolution.com
*.ryoshuu.com
*.searcherus.com
*.sse-cmm.org
*.teshimaaoi.com
*.thekushnyc.com
*.uncoiffeur.com
*.underarmou.de
*.univisionbd.net
*.usatoplawyer.com
*.video-candy.com
*.voz.com.au
*.wesdistribuidora.com.br
*.wikiatalanta.com
*.wvtheatreplayersnh.org
123moovies.net
13xiaoshuo.net
amtmedicalstaffing.com
beautyheal.org
betheasda.net
bikaui.me
butyourefrench.com
cheapdressesonlinestores.com
colegiomadrelaura.com
dapomiroworks.com
devstopia.net
dialogus.org
discoball.com.au
divxtotal.online
good-direct.com
gurututorku.com
hippomoon.com
historiapojazdu.com
holiceyewear.com
juvehaircare.com
kurczakiodeliasza.pl
libchurch.com
mangatou.com
marincity2022.com
myphamstarlight.com
northwestdoorandsupply.com
nutriendovida.com
oukitel.co
outstandingadvicelettertonoticetoday.info
pensionmarion.com
play-slitherio.com
poststorytoview-today.info
proavaras.com
rareburg.com
restaurant-lembellie.com
rhonlinesolution.com
ryoshuu.com
searcherus.com
sse-cmm.org
teshimaaoi.com
thekushnyc.com
uncoiffeur.com
underarmou.de
univisionbd.net
usatoplawyer.com
video-candy.com
voz.com.au
wesdistribuidora.com.br
wikiatalanta.com
wvtheatreplayersnh.org

Other certificates including the domain name nutriendovida.com

(limited to 100 certificates)
nutriendovida.com
nutriendovida.com
3242.au
nutriendovida.com
svkdttravels.in
nutriendovida.com
nutriendovida.com
nutriendovida.com
3242.au

Certificate

The complete raw certificate details for nutriendovida.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7aJY/47oO7tV+35Bwdpn
vn3vod3wXFSh3tm1RdxA7SseqsbDsOtTwOy3Kt4vlBElyt7vz3wkGSa0I0NWMqTf
f5OzPzL9ikmEL0/GqA3PknJqkDsX1W3HUGv5neP4lXvfQ4xDuXwmv5r2dvlUnMA3
6M9p9n+lQHJ2H0q06MxPfeiySbUGLr666jPrS44AMoRXdYDZJ/U2EOuhleBdtS1R
n5oJKPC0jJseJKUEWFFUEzkYmFIrBwx1O+BgXojoze/U/6sR+yYkkuYPB5z3YuQQ
UC1BeRIiktw6s+XZ3rBbHq8e3xiYcg/K0l5IWt9QVLLPqmoIPlNuP9r9DccNqVP8
wdROAr/sCDhcOwLH2o8C48OD4GN2GR0J9LI6T1JZ34JBpo48kEJHTnLty+LCrafL
MD0R74MxVsbqwmnZOsday0wwTe+w6QnglLmDJgZag3WtON79pOilsv/9q+f2JwhZ
TH8fnunYgALcRheuAczdccki++pNDwWCuFeaAj6BbOkpfO9WpQoPSGAN/vk++7op
cF4Bx6sayFN9cg58H/duL44VyVrEhhUotjNao2nRFqkFNuKUyPrU/3amIx6MY5vI
GOXct5x9VSUcinrirG7iq5eID5Jgj0MGSwsloGAsXPcxFkigyZRz0ATe/DSG2HLu
uLjMbzRj3v/I9Fvo77VERRcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385993354879474922237159259925927934628855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 20:15:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 20:15:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nutriendovida.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 969462834063258296918344664256797720268126449797449201999403814989078117849741489420007583891529778279248544131629808784918368072880570358282778348236049730944438929954310638437799508233072727234129294512914294610639398030989112168273216460431069015616842426118025219583184435925668951871687769487134593019238833516930295191022545367485500954411976897303821665835246349922570697467428787100541281594522466379245229642412790146520158427164737821185669894968961789574072578674394764863092087482454519269527313946075201373637885234800906273758525843904088919049162960528829509148702438436005886351612297452371846335815021480358302174982990984730147199354409058367279479565871647119270668713470735769858646844226244328328527956571238075920576513894779273441084419730294329271368189805061618932387222542803502119331907489737221997719847122065798088933536068399369765727086799883758990702453435784474151431245140548841140410428835100469430157805707781531891460867330620820190715753263763006131734191378525919134088037032858139497553726804164452434248002523398531875722293615472376853979400055672172174538143152537880013792771222378671984404185546849034604240564544108104285530074745245742106296785198130715861423106312628454561344825607447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54dc30db88bc3c07b58b04da734a78635000c44f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1972 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123moovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.13xiaoshuo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amtmedicalstaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyheal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betheasda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikaui.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butyourefrench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapdressesonlinestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colegiomadrelaura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dapomiroworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devstopia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dialogus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discoball.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divxtotal.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.good-direct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurututorku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hippomoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historiapojazdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holiceyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juvehaircare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurczakiodeliasza.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangatou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marincity2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myphamstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northwestdoorandsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutriendovida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oukitel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outstandingadvicelettertonoticetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pensionmarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.play-slitherio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poststorytoview-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proavaras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rareburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurant-lembellie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhonlinesolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryoshuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searcherus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sse-cmm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teshimaaoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekushnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uncoiffeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.underarmou.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.univisionbd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usatoplawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video-candy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wesdistribuidora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wikiatalanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wvtheatreplayersnh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123moovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '13xiaoshuo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amtmedicalstaffing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyheal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betheasda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikaui.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butyourefrench.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapdressesonlinestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiomadrelaura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapomiroworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devstopia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialogus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoball.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divxtotal.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'good-direct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurututorku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hippomoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historiapojazdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holiceyewear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juvehaircare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurczakiodeliasza.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marincity2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myphamstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northwestdoorandsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutriendovida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oukitel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outstandingadvicelettertonoticetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensionmarion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-slitherio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poststorytoview-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proavaras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rareburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurant-lembellie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhonlinesolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryoshuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searcherus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sse-cmm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teshimaaoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekushnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uncoiffeur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underarmou.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univisionbd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usatoplawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-candy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wesdistribuidora.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wikiatalanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvtheatreplayersnh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eedea65c90000040300473045022064535324bd026323c47f2cea65fdbfb92824255bb1b94954b00e386a7244ad82022100dd68ffc960e7d7c51ad11eea1d21e86332a6b62369cb979e6d7a93fca09225ac00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018eedea65e80000040300463044022016e26280c6c793e4ce2022c58fb19676e2260566b3ce683266b635a3bc66c13f02205f722c1473af27680c07890b6d62e8cb4591c609af501a5b7a29f21d2b8a16ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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