excursies.com

Issued by R3

About this certificate

This digital certificate with serial number 03:89:df:61:30:f1:9d:c4:d9:93:a6:1e:73:4a:04:06:48:b6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=excursies.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:df:61:30:f1:9d:c4:d9:93:a6:1e:73:4a:04:06:48:b6
Serial Number (int): 308252464552003098816989185804126514464950
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:40:a6:3e:63:38:05:29:41:1a:1f:83:80:a1:6f:19:70:99:d9:56
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:70:1b:57:0d:83:85:49:78:c4:4f:65:98:0a:69:87:d6:86:5c:90
Fingerprint (sha256): 84:66:61:32:60:48:92:74:37:14:14:c5:9c:72:dd:df:dc:49:35:15:65:bd:5a:d8:68:79:30:e4:ad:36:8b:93

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate excursies.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for excursies.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.avihay.com
*.bankchase.com
*.beersautosales.com
*.bestsolairs.com
*.blaber.com
*.buildtheborder.com
*.calcolamutuo.com
*.canoinhas.com
*.charlottebackpage.com
*.chincarini.com
*.concia.com
*.corleen.com
*.deadliestpickupline.com
*.evansbank.cm
*.excursies.com
*.gregoryfamily.com
*.gsasports.com
*.hajama.com
*.hazlorealidad.com
*.islamdesign.com
*.kobylin.com
*.kocman.com
*.mapzo.com
*.mauney.com
*.mesoo.com
*.methstreame.com
*.methstremas.com
*.metthstreams.com
*.meyhstreams.com
*.myanmarmodelsgirl.com
*.myball.com.au
*.nyathi.com
*.ohim.org
*.oirase.com
*.ottersoasismi.com
*.probc.tv
*.rafin.com
*.reshaders.com
*.rideons.com
*.sideros.com
*.streameastml.com
*.studioneon.com.au
*.telaplana.com
*.thicktv.com
*.tongha.com
*.tracjer.com
*.turfbattles.com
*.ujaama.com
*.whangaroa.com
*.xn--mgba3ax8ddadxzb.com
avihay.com
bankchase.com
beersautosales.com
bestsolairs.com
blaber.com
buildtheborder.com
calcolamutuo.com
canoinhas.com
charlottebackpage.com
chincarini.com
concia.com
corleen.com
deadliestpickupline.com
evansbank.cm
excursies.com
gregoryfamily.com
gsasports.com
hajama.com
hazlorealidad.com
islamdesign.com
kobylin.com
kocman.com
mapzo.com
mauney.com
mesoo.com
methstreame.com
methstremas.com
metthstreams.com
meyhstreams.com
myanmarmodelsgirl.com
myball.com.au
nyathi.com
ohim.org
oirase.com
ottersoasismi.com
probc.tv
rafin.com
reshaders.com
rideons.com
sideros.com
streameastml.com
studioneon.com.au
telaplana.com
thicktv.com
tongha.com
tracjer.com
turfbattles.com
ujaama.com
whangaroa.com
xn--mgba3ax8ddadxzb.com

Other certificates including the domain name excursies.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for excursies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3SLnFOLi9MOSbPwPfpnh
Th/F6YGfd48L28kMKGdltbESnkiayKRszx9jSGaHTQEnYjqypDRhPyMDZuGnDeJ0
UICRyu0BQapqbtwBw3G5wK0WwEanJtJWYHZjV5jWoOGnKnZWQKgyHlYJJv6G9Vbr
sW79Vy6o8Qqkqfp3zo7T3gi+Z6DDRtJmlVMeKufKGMwoRQ3fYPmCmOK+OY87JZhB
hlsgi6D+cZfD35rgLnJX8p4Yvig1V8FBMBJ2oUsF3/F+MbVBxUNoBhAanCkHs3nK
RqDvykAlWKuQl2/0ithwlGFjrUCVbnEBf77tbg3OE8Py7qQWZdFX6SPIMMBAvO4P
X8HkGjW7BFoVvJ5yKYqOFacxTFARs270fobdicki7xQI7TwjpsCqeZvptYE/5Gsi
PeZGerOrczZaN74iLpGKijumZ8+ep0BRBt53K3OF7abfaLTnTfxcSYPLJy4XEsM8
vt8W8Cc7hLKd1WATyggzlOF+zJKOECJgZAYW1VzjmKnL0fZiDIh4fPMTY5kUVP0p
QjrU/GGFWb5AwN1DGDuCqkirriXSOP56pN9qWF8D8y+b/njDS6eOduGHv/LxqStH
Ji5zXIXMKW5Z4qByP5F5daJTeP16Jtn2rwnaZOwYZJv7ymy9qQePg5TUarde9Bb7
eOVYY1HJ0x33qL54wIJdRmMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308252464552003098816989185804126514464950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 09:08:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 09:08:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'excursies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 902157551687992151010477349980582264781715776028201689172086854859995025500064756738866065882565110289799649966681678156137245547591981444003567933355307884038976705954613243813209193601705999298422261134270427479985767244059386680583061633728915727196517865898167995470954658202303540250814383765089781682318118136848325258101971340768178353483641960969778079474575764867887028315990561690639064822874586846505955389515222952985824177371600107314752771926632823156440501444597159058805776600806607499134836522424700408839037343654352046111369572817522961796686500652809852122928607912429297903480953733340188845045129827750321841753049782550834148736447613309603944074270372970028761919370330555124688068299058623747032268575956231734679069677573959353841962218479230565643123452983485366660274372545198546526767165084428294644554908275056958912416471704977851443463641857452981115068908665185293358000172965588560427601907655792676951613667839803119968679130417984711155819774886177715173327278556745010150991373752247948157097068030142622616223423201381465940246325003109995107155892671344852297712617298653599339605446887728210156028500385862039138736650093762595587339496311994761134093007294926449923194401466947962870756623971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f40a63e63380529411a1f8380a16f197099d956
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1642 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avihay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beersautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsolairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildtheborder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calcolamutuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canoinhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charlottebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chincarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corleen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadliestpickupline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evansbank.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excursies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gregoryfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hajama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hazlorealidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islamdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kobylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kocman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methstreame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methstremas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metthstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meyhstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myanmarmodelsgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myball.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oirase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ottersoasismi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.probc.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rafin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reshaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rideons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sideros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streameastml.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studioneon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telaplana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thicktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tongha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tracjer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turfbattles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ujaama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whangaroa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mgba3ax8ddadxzb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avihay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beersautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsolairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildtheborder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcolamutuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoinhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chincarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corleen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadliestpickupline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evansbank.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excursies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregoryfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hajama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazlorealidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islamdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kobylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kocman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methstreame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methstremas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metthstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyhstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanmarmodelsgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myball.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oirase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottersoasismi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'probc.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reshaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rideons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sideros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streameastml.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioneon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telaplana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thicktv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracjer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turfbattles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujaama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mgba3ax8ddadxzb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896352663c0000040300473045022100f21638d73920860b771df3f61f7f5d9a702f33a2abd17efbfa436499782bd3110220189b2d6940b68c750c6b392df960f7196a6580fc73f65c9b8e2868f297fc9f94007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001896352662f0000040300473045022100d0e62aa578a7019765d7e0610556f0c2f0585c6f590882090dedd800908d8e6e0220355a66bf902b612177c5d08d393f9087c86a5d8446c9708f003d637eb873cf22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0025941cce8030696a5c035b2afe1af69d4cae1c1d10ef5aca1ca20eae68555f15bf837e4f5af6d41a05ff9030ea1595d659bb1d8677b5da79ff3f6d6c92f5d28cbb84c1d4842da667d618f63aeb0cd1f21b1b28f8f2c1ea86c53283dabfcb0984a971bb00433c876eb554da3ebd8b6418112981158fb720d6c877c58294d7f3ec0c1097002dba8650b7c776f4ac613bf95106820f00a6d99be64959970ca174497bd80dd4c51ae2bd7960f87751bb478e0a60b36fd3ab54404f274143a3b3927667af774f1dce791fdb784e37988e3c65b8dcd17e58ce1d71363de64e5c1575db057913e67e2aa27052fbbb56339ab198a5156c85db8dc559ce4c39c005dcd227