patrimonium-europae.org

Issued by R3

About this certificate

This digital certificate with serial number 03:51:b5:d1:34:7a:76:ba:4e:40:c9:0a:d3:ec:40:25:4b:3d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=patrimonium-europae.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:b5:d1:34:7a:76:ba:4e:40:c9:0a:d3:ec:40:25:4b:3d
Serial Number (int): 289141406037545138709903135840732979743549
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:8a:73:0a:6b:b9:00:dd:d1:0a:c3:11:0d:56:1e:6e:13:f3:83:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:0e:ad:8f:6d:fa:4f:fc:6a:3b:43:c0:a2:4a:76:a0:2e:35:60:48
Fingerprint (sha256): 85:0f:03:6f:ca:ec:c0:41:18:35:bd:cc:5b:6d:3c:03:52:6f:0e:6e:82:99:30:4e:00:38:e8:2d:71:f2:2f:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate patrimonium-europae.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for patrimonium-europae.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2-fit.com
*.2chums.com
*.711wallets2.com
*.amat-3.com
*.bayaplay.com
*.betspread.com
*.canvateach.com
*.cashbackforex.co
*.centrafinance.com
*.colorunnel.info
*.deadtribe.com
*.fcavangard.com
*.getfreeshein.com
*.gsamadrid.net
*.holisticlifecenter.com
*.iifuxima.com
*.investboost.cc
*.kkr-hotel-sapporo.com
*.learnandstudywithus.com
*.lekinarecepte.org
*.lookings.com
*.lowesthoteldeals.com
*.makemodels.net
*.mflw.us
*.movinglines.com
*.muktangan.com
*.muttus.com
*.neongenesisoddity.com
*.nhacaiwin365.com
*.offeraat.net
*.ongrave.com
*.pandhcattleco.com
*.patrimonium-europae.org
*.prounhb.com
*.randytuggle.com
*.realendpodz.com
*.semitrike.net
*.shopwithshodney.com
*.soothes.com
*.ss1115.com
*.streamthisepisode.com
*.techmango.org
*.toproofingsandiego.com
*.touchfamily.com
*.trademarkname.com
*.willowapartments.com
*.xvedieo.com
*.yeezysuply.com
*.zenzapi.xyz
*.zhongcai818.com
2-fit.com
2chums.com
711wallets2.com
amat-3.com
bayaplay.com
betspread.com
canvateach.com
cashbackforex.co
centrafinance.com
colorunnel.info
deadtribe.com
fcavangard.com
getfreeshein.com
gsamadrid.net
holisticlifecenter.com
iifuxima.com
investboost.cc
kkr-hotel-sapporo.com
learnandstudywithus.com
lekinarecepte.org
lookings.com
lowesthoteldeals.com
makemodels.net
mflw.us
movinglines.com
muktangan.com
muttus.com
neongenesisoddity.com
nhacaiwin365.com
offeraat.net
ongrave.com
pandhcattleco.com
patrimonium-europae.org
prounhb.com
randytuggle.com
realendpodz.com
semitrike.net
shopwithshodney.com
soothes.com
ss1115.com
streamthisepisode.com
techmango.org
toproofingsandiego.com
touchfamily.com
trademarkname.com
willowapartments.com
xvedieo.com
yeezysuply.com
zenzapi.xyz
zhongcai818.com

Other certificates including the domain name patrimonium-europae.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for patrimonium-europae.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289141406037545138709903135840732979743549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-06 20:17:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 20:17:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'patrimonium-europae.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778562410267994658390153004178466752969780290877662608984855367545736036575653472952845842157033934011751563924789609819665901939000835158223255452344636810207383870072886911037079162486601528307716653796358851073181506306514410939155120058371810053589182644998371250794854010474428960462948894937338011296958083236696254079059082133496399798642951281479515998339399121711154702191133785373827879683622307947097597757374263511497240300828240319608093666831908272324725464358225072088573489575877433766615896291595455990066188270362696798228088894060727257249826046141568803364795147205434863262907131046418757007074973783179102601313697480906095844563539031795097455350442481235130897756292927850720814840756058710585029953109311541561870054291058526710946945303623943051963801144051339193459346590707740999491877839197888017968898788001743511556425969601003994709408838250251850973041126233857530422122108047350013580761954142515446183792141650171909613349103894926564896055184867524020993277083941522600892552892680990619825510107185090768542674356936722597567507512020490865830491082598181154391272510090729276127094327439852907204846638254700563268543507602737546364094040568511923589560262278204004259586574498152304857873298677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							858a730a6bb900ddd10ac3110d561e6e13f383fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1784 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2-fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2chums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.711wallets2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amat-3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayaplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betspread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canvateach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashbackforex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centrafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorunnel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadtribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcavangard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getfreeshein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsamadrid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holisticlifecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iifuxima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investboost.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkr-hotel-sapporo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learnandstudywithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lekinarecepte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lookings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowesthoteldeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemodels.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mflw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movinglines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muktangan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muttus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neongenesisoddity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhacaiwin365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offeraat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ongrave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandhcattleco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patrimonium-europae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prounhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randytuggle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realendpodz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semitrike.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopwithshodney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ss1115.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamthisepisode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techmango.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toproofingsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trademarkname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willowapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvedieo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeezysuply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zenzapi.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhongcai818.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-fit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2chums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '711wallets2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amat-3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayaplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betspread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvateach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashbackforex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrafinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorunnel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadtribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcavangard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getfreeshein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsamadrid.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holisticlifecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iifuxima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investboost.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkr-hotel-sapporo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnandstudywithus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lekinarecepte.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowesthoteldeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemodels.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mflw.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movinglines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muktangan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muttus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neongenesisoddity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhacaiwin365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offeraat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ongrave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandhcattleco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrimonium-europae.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prounhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randytuggle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realendpodz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semitrike.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopwithshodney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soothes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss1115.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamthisepisode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techmango.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toproofingsandiego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trademarkname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowapartments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvedieo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeezysuply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenzapi.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhongcai818.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e15a07abc000004030047304502202e596024353802e959c8e13053e59b92a0bdebe58caefd26570fc142d0596380022100c27f9ec3932a645ce43c07acec7826173eb866a338aa58ecbfc3ce3cba1b7723007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e15a07ad4000004030046304402203479150d69a54ca5d8cc026d54103f0ac09447e8ca1f84b0c2d52c4b8e7aa34002202f0da64762c5d2c2a2ca093a0e639c30fa84dee8fb8eabc3cb834843ac42f65e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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