farruca.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:c1:57:82:fc:26:58:d9:93:07:b2:27:fc:1a:99:91:47 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=farruca.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:c1:57:82:fc:26:58:d9:93:07:b2:27:fc:1a:99:91:47
Serial Number (int): 329650326569172227197643595007677202796871
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:cd:1d:48:ed:d8:cf:52:72:5c:52:17:fc:68:e9:02:78:fb:cc:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 30:f9:a6:b6:02:10:c3:f2:59:c9:b2:3a:40:ef:1e:d6:27:5d:90:cc
Fingerprint (sha256): 87:72:2c:46:93:cd:f0:c7:b0:f4:9d:b5:62:94:20:f2:d6:d2:14:c2:ef:87:40:43:c3:c9:36:d4:4a:db:59:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate farruca.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for farruca.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.accentacademy.com
*.ahica.com
*.alberto.org
*.amanpreet.com
*.antipedia.com
*.arimura.com
*.asahikan.com
*.autoszamora.com
*.bedingham.com
*.bedoya.com
*.bengts.com
*.boardsling.com
*.bursada.com
*.caughtoffsides.com
*.chaveiroespiao.com
*.clabaut.com
*.correduriasdeseguros.com
*.farruca.com
*.freguesiadeportocovo.com
*.granvilleislandartists.com
*.hasanova.com
*.hosannachoir.com
*.ixed.com
*.koton.co
*.ladielynn.com
*.lightwise.com
*.mayeutika.com
*.maymaycongnghiep.com
*.meuguia.com
*.mimies.com
*.muzicmatters.com
*.mylacrosse.com
*.novamoda.com
*.pequenito.com
*.pitrelli.com
*.positivepromos.com
*.ristra.com
*.rotarystage.com
*.schlaps.com
*.shole.com
*.sigillo.com
*.stilskinamestaj.com
*.tecolotlan.com
*.tenfitness.com
*.ttmmy.com
*.tysall.com
*.uaumais.com
*.vayssieres.com
*.yotoup.com
*.yourtreeoflife.com
accentacademy.com
ahica.com
alberto.org
amanpreet.com
antipedia.com
arimura.com
asahikan.com
autoszamora.com
bedingham.com
bedoya.com
bengts.com
boardsling.com
bursada.com
caughtoffsides.com
chaveiroespiao.com
clabaut.com
correduriasdeseguros.com
farruca.com
freguesiadeportocovo.com
granvilleislandartists.com
hasanova.com
hosannachoir.com
ixed.com
koton.co
ladielynn.com
lightwise.com
mayeutika.com
maymaycongnghiep.com
meuguia.com
mimies.com
muzicmatters.com
mylacrosse.com
novamoda.com
pequenito.com
pitrelli.com
positivepromos.com
ristra.com
rotarystage.com
schlaps.com
shole.com
sigillo.com
stilskinamestaj.com
tecolotlan.com
tenfitness.com
ttmmy.com
tysall.com
uaumais.com
vayssieres.com
yotoup.com
yourtreeoflife.com

Other certificates including the domain name farruca.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for farruca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329650326569172227197643595007677202796871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 04:22:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 04:22:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'farruca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772466304755655082445018416715056889894260097715635060113842349674532559704683336023185638171036997898230278540444405431896814473353242223243827743979809984595888814537444227549730854333965750224994682561036811497258449297696073545612819577848642363162962826457835038366380784528323587622383406157722201128891928605451396211880718704250077712764359185701750359578780500578255672929444078913507442673207763433407140596139534817600330824042139037823432305559748507846834155664054980105186098021856302601834593221874658637442023334297165569663310367366539646865766788826685382431655745815601853159352846806388515339819473218819489498089106193257050475072845171192082579265769133052515383715048484396192523270741412633187500211602290548786003308063479759634929388328542243860356912669199324642533414129511295031224144454207749325878363086713266268501830504147523591867290336269053477810096717532687093447546622615244463155279918246451213781465644878309309034691968300688175424749221542588860031295602972129142362015618801709718823331489450477835763287328533940291539995986141911697243379849910156075955786964432071530655536639669065734165087143231615508628629319653323070198675813458045177726416556796092855519631819003978042588259454199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85cd1d48edd8cf52725c5217fc68e90278fbcc78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1654 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accentacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alberto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amanpreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antipedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arimura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asahikan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoszamora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bengts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardsling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bursada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caughtoffsides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaveiroespiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clabaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.correduriasdeseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farruca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freguesiadeportocovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granvilleislandartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hosannachoir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ixed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koton.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladielynn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayeutika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maymaycongnghiep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meuguia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mimies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muzicmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pequenito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pitrelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.positivepromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ristra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotarystage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schlaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stilskinamestaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecolotlan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttmmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tysall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uaumais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vayssieres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yotoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtreeoflife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accentacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alberto.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amanpreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antipedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arimura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asahikan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoszamora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedingham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedoya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bengts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardsling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bursada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caughtoffsides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaveiroespiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clabaut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correduriasdeseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farruca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freguesiadeportocovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granvilleislandartists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosannachoir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ixed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koton.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladielynn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightwise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayeutika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maymaycongnghiep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuguia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muzicmatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylacrosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pequenito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitrelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positivepromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ristra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotarystage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigillo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stilskinamestaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecolotlan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttmmy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tysall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uaumais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vayssieres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yotoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtreeoflife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016daef7da870000040300463044022041648bf3a6c9fc7676744cae1182ea1a67dde1e327cf34590ee5bc247d9234f202204ede307203ffed8ea23f14e62ca3589baa85a5e5246480dde42b8dafa0766a26007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016daef7da7f000004030046304402205c8aacf867596af146072b4d15baa33a6cda1f766c62a79044bbd5781c48d8b30220453b34793f1305ef92362766a1d1a0c94446c3f704650092d6bf6c835367965f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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