tataaig.in

Issued by R3

About this certificate

This digital certificate with serial number 03:16:92:fc:cd:2a:9c:d6:f3:0a:54:61:b5:b6:8d:b0:5f:1a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tataaig.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:92:fc:cd:2a:9c:d6:f3:0a:54:61:b5:b6:8d:b0:5f:1a
Serial Number (int): 269018449775004425723646954955281068482330
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:02:7c:da:b7:c0:03:96:ec:0f:5f:1b:24:98:30:d9:37:e6:49:c9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:95:5e:90:68:b0:9d:6c:c8:d0:7c:84:85:e2:90:88:e6:ef:34:85
Fingerprint (sha256): 85:91:c9:19:12:a5:ad:29:88:c2:e3:ec:12:f3:a9:fc:f2:e4:b1:50:c5:00:08:7a:1b:52:a6:81:ab:68:97:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tataaig.in

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tataaig.in

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aphetic.com
*.ashiu.com
*.availity.co
*.banala.com
*.belltent.biz
*.bestdictionary.com
*.campinanda.com
*.cantinero.com
*.changehealhcare.com
*.chertow.com
*.cledepeaubeaute.co
*.cursodememorizacao.com.br
*.deadliest11.club
*.ebritish.com
*.encyklopedin.com
*.etogaragedoors.com
*.fergusom.com
*.foreverliving.cm
*.fusch-ani.com
*.getbitcoin.to
*.healthyself.com.au
*.hedalm.com
*.hodderededucation.co.uk
*.lacaravana.com
*.landingpage.com.au
*.lonjohnsilvers.com
*.malocation.com
*.metroduryfree.com
*.neurotherapy.com
*.opticsplaney.com
*.pahia.com
*.pokerassassins.com
*.prepaidgiftbalancee.com
*.quickboolsonline.com
*.realwashingtonpost.co
*.redbbble.com
*.rickertsen.com
*.rim2.com
*.roupinhasdebebe.com
*.scientivity.com
*.tataaig.in
*.theapplicantmanger.com
*.thingiverse.co
*.timesharesfree.com
*.timiko.com
*.tomybahama.com
*.turboparts.com.au
*.voorter.com
*.yerry.com
*.youtubeview.com
aphetic.com
ashiu.com
availity.co
banala.com
belltent.biz
bestdictionary.com
campinanda.com
cantinero.com
changehealhcare.com
chertow.com
cledepeaubeaute.co
cursodememorizacao.com.br
deadliest11.club
ebritish.com
encyklopedin.com
etogaragedoors.com
fergusom.com
foreverliving.cm
fusch-ani.com
getbitcoin.to
healthyself.com.au
hedalm.com
hodderededucation.co.uk
lacaravana.com
landingpage.com.au
lonjohnsilvers.com
malocation.com
metroduryfree.com
neurotherapy.com
opticsplaney.com
pahia.com
pokerassassins.com
prepaidgiftbalancee.com
quickboolsonline.com
realwashingtonpost.co
redbbble.com
rickertsen.com
rim2.com
roupinhasdebebe.com
scientivity.com
tataaig.in
theapplicantmanger.com
thingiverse.co
timesharesfree.com
timiko.com
tomybahama.com
turboparts.com.au
voorter.com
yerry.com
youtubeview.com

Other certificates including the domain name tataaig.in

(limited to 100 certificates)

Certificate

The complete raw certificate details for tataaig.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269018449775004425723646954955281068482330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 11:34:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 11:34:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tataaig.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738894438035787715775758168879070121224092565209840952165677407078997697554964020389114560596146397553458004187225598700459344171479030799540934422827219627590310317066937719186612995005188134493579751875283464796993081550582107046073798238768833806501689856029065245968097893348416945048066560358640849713951493875729772940209612911701116044754018891134669090803587272089019879553384316285368972965206110388939406099574815800267833855889317329791490317384557767513690741145776542907804124588744054842770774930377571232214658441665837491086360950815177420767288234563555607493679904621169276711521737198312103637113984703819210179098938878728546495394003435234874648301464577640968069425306567042786416140977560260146796753488491605422525228485386066424040149535636108528588252575264398243698492916345835349823152724629875635227561054073105600766748786539910553505782197755460908798607546544848691002999703092718145956904551298854413634789406128682759500163907145031744667082148459885500515658075634674758403381796863854026637882325034698213907606690312927510107707019885608895794832953157041616769738579788383944102134563201979703474593001388500220861733663184061583905220604738038584903128740474738378737226254674197682071523803769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce027cdab7c00396ec0f5f1b249830d937e649c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1804 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aphetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.availity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belltent.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestdictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campinanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cantinero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.changehealhcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chertow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cledepeaubeaute.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursodememorizacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadliest11.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebritish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encyklopedin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etogaragedoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fergusom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foreverliving.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fusch-ani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getbitcoin.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthyself.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hedalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hodderededucation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacaravana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landingpage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonjohnsilvers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metroduryfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurotherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opticsplaney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pahia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokerassassins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaidgiftbalancee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quickboolsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realwashingtonpost.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redbbble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rickertsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rim2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roupinhasdebebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scientivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tataaig.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theapplicantmanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thingiverse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timesharesfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tomybahama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turboparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yerry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtubeview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aphetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'availity.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belltent.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestdictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campinanda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantinero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changehealhcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chertow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledepeaubeaute.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursodememorizacao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadliest11.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebritish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encyklopedin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etogaragedoors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fergusom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreverliving.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusch-ani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getbitcoin.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyself.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hedalm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodderededucation.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacaravana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landingpage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonjohnsilvers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metroduryfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurotherapy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticsplaney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pahia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokerassassins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidgiftbalancee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quickboolsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realwashingtonpost.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redbbble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rickertsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rim2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roupinhasdebebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scientivity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tataaig.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplicantmanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thingiverse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesharesfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomybahama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turboparts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voorter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yerry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtubeview.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a98d5ba410000040300473045022100d642179736f570ef92a7e880d27fbaaf120e2d9bbcbd9f6d9670178c149dc8d40220320f362c37835bf2314fba30186f3c7676523f0ad58f1a41aa1319551cf44ab3007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a98d5ba3e0000040300473045022011f9c9574fb902f3db4e3b44c7dd6973375c757e95d90f26289459300ca52b1a022100f6232a0d17a7d33f8444ec9d0b81deaba3397dafc950dbde72238d88f97a7c04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000de445297a1575b362b1dc002a630de5e89c8202e67d6405f0bc3b76c5255f7fea5b93370e4eed57db9b2c27ea7598d09af82ffdf6d342d9d2caea49d9c9138c099d093fea071a7ff0f2cd6e08059fb2980265fb69280ba7cc71d62e210c5318d7a20974e01b9f22342d20543e720fd0b145b39f2ae07eb8078d13264944b45af390321c3ea04de6f8861fa76d8c36bc363929c65a05772c18a614f455896611832854f9505386dae015b11a5e9c288dcc06ac66216beda96d8d1531bc192f33fa74f60a08c897df5dabca460cd6b4ef54ce9c1d9746b5fc3efba3484b4da9b1ba6be783b039ad481259d4fcf1373e6a0939c27bf9a51e09db1e1928f03be43