reikiteacher.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a8:10:a1:98:07:24:35:f7:ac:73:f4:47:b8:40:07:10:87 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reikiteacher.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:10:a1:98:07:24:35:f7:ac:73:f4:47:b8:40:07:10:87
Serial Number (int): 318526402129217248158614766311511654076551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 87:c9:fa:35:9d:01:d5:65:37:53:0c:80:be:8a:8d:d6:ce:44:1c:26
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:46:9b:17:88:ad:fc:59:e8:8f:7c:b0:7d:9c:61:df:f6:c5:da:e7
Fingerprint (sha256): 86:0e:aa:33:ff:21:d8:e3:77:f7:b3:88:71:51:16:37:d7:ea:ed:3a:37:b7:17:d9:0d:2e:fb:b9:14:1a:7c:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate reikiteacher.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reikiteacher.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.14ad33e4d69c.com
*.altamontespringsrealestatelistings.com
*.aquaticreserves.org
*.arthalogue.com
*.artintheanthropocene.com
*.b17oysterpub.com
*.babanobuo.com
*.beckoningcatproject.org
*.blockchain-dns.info
*.botanicafloreria.com
*.bowelcancer.tv
*.cannpass.org
*.cherryriver.net
*.coopalerts.com
*.dayplaza.com
*.ddywye.us
*.deepanshugiri.net
*.dom-pedro-garajau.com
*.emelbymelindalooi.com
*.energywork.co
*.fengandlee.com
*.filhatallard.com
*.fortytwoco.com
*.gymrewards.io
*.iyakorase.com
*.jpidols.tv
*.koreagay23.com
*.likesap.com
*.myeidonline.com
*.myzamana.net
*.physicsansmathstutor.com
*.podemoscyl.com
*.producic.org
*.redoneworld.com
*.reikiteacher.org
*.rosmedportal.com
*.ryanwebberagency.com
*.schmidtflourinc.com
*.scottmackay.net
*.seres.me
*.sherlockeffects.com
*.sholliessweets.com
*.siqizi8.com
*.sudanese4all.com
*.thefilmasylum.com
*.toten.com.au
*.trottercashion.com
*.usedrototillers.com
*.wittsdesign.com
*.youronlinemirror.com
14ad33e4d69c.com
altamontespringsrealestatelistings.com
aquaticreserves.org
arthalogue.com
artintheanthropocene.com
b17oysterpub.com
babanobuo.com
beckoningcatproject.org
blockchain-dns.info
botanicafloreria.com
bowelcancer.tv
cannpass.org
cherryriver.net
coopalerts.com
dayplaza.com
ddywye.us
deepanshugiri.net
dom-pedro-garajau.com
emelbymelindalooi.com
energywork.co
fengandlee.com
filhatallard.com
fortytwoco.com
gymrewards.io
iyakorase.com
jpidols.tv
koreagay23.com
likesap.com
myeidonline.com
myzamana.net
physicsansmathstutor.com
podemoscyl.com
producic.org
redoneworld.com
reikiteacher.org
rosmedportal.com
ryanwebberagency.com
schmidtflourinc.com
scottmackay.net
seres.me
sherlockeffects.com
sholliessweets.com
siqizi8.com
sudanese4all.com
thefilmasylum.com
toten.com.au
trottercashion.com
usedrototillers.com
wittsdesign.com
youronlinemirror.com

Other certificates including the domain name reikiteacher.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reikiteacher.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318526402129217248158614766311511654076551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 19:10:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 19:10:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reikiteacher.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821026976853699606936336458513077462922425953782598452873432756923949913009617884949781275921694160417019689769489341487071562604965438541855667528183028345951241948542000759202929291658295426632587953352274420308385189749453501501451063346498298995769762903750836651488727428489199836473149802351959074663329074343438467965345372699750279382279803977506758744241179285186944155392198691592401232147620569944302835033905206481246552376701150959648196109204739054759324644434482091771144265590762619327095769570332399317341744345493370024076795825202047396234106254163245974982163792203818538776413984364899505783046742177926576329949248714676421264699032354625298305191435750511137908295427249997130629289759884244260036935240885204906477264531807826036340513762495284344462804290092580438096359038409066412999963980664992067302625915907690451201228111536447898182122868017809754864004852902487075009640706362628210890959057019725444417632119950968453068222798316490505581824344980733126340745113132863354566706776813398119558762839970503615500253015377402476032173718656637813057899431553385077075444501728553695542516284641691895071404476159029565635072920205322809290236417289134379335980382993630281052880891166850902591997386567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87c9fa359d01d56537530c80be8a8dd6ce441c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1916 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.14ad33e4d69c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altamontespringsrealestatelistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquaticreserves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arthalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artintheanthropocene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b17oysterpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babanobuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beckoningcatproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockchain-dns.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanicafloreria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowelcancer.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannpass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cherryriver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coopalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dayplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddywye.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepanshugiri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dom-pedro-garajau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emelbymelindalooi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.energywork.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fengandlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filhatallard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortytwoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gymrewards.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iyakorase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpidols.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koreagay23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.likesap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myeidonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myzamana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.physicsansmathstutor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podemoscyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.producic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redoneworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reikiteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosmedportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryanwebberagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schmidtflourinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottmackay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seres.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sherlockeffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sholliessweets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siqizi8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sudanese4all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefilmasylum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toten.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trottercashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedrototillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wittsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youronlinemirror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '14ad33e4d69c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altamontespringsrealestatelistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquaticreserves.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arthalogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artintheanthropocene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b17oysterpub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babanobuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckoningcatproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchain-dns.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicafloreria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowelcancer.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannpass.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cherryriver.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopalerts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddywye.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepanshugiri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dom-pedro-garajau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emelbymelindalooi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energywork.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fengandlee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filhatallard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortytwoco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gymrewards.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyakorase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpidols.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreagay23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'likesap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myeidonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myzamana.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'physicsansmathstutor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podemoscyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'producic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redoneworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reikiteacher.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosmedportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanwebberagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmidtflourinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottmackay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seres.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sherlockeffects.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sholliessweets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siqizi8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudanese4all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefilmasylum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toten.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trottercashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedrototillers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wittsdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youronlinemirror.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc2fd72a9000004030048304602210084d95bf4dbf48f9cd9906f7b7a0b286b7e423d7269816ef1c796de735db7f388022100912423a958e6e48b1351f92dc63f21c96bbe2f94f11e67ae2a2c8bb998000a0c007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dc2fd73200000040300473045022056e711d57fb6482c1bc201cb468e921baf1c838e66d316ba5b526d2ea7eb1070022100b85e71871db5d2ced1e94b92222e1f3404b826e3e134ce7c49d2e8d82437f84f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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