mental-craft.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c5:d9:16:59:fe:c3:4e:8b:04:78:8c:0e:18:ca:16:66:8e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mental-craft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:d9:16:59:fe:c3:4e:8b:04:78:8c:0e:18:ca:16:66:8e
Serial Number (int): 328661042609640684286026766112655335122574
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:0d:42:a8:1f:aa:d0:6f:2e:17:01:b0:33:28:8e:bd:99:a9:1f:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 91:a9:97:15:76:86:8c:f9:6c:73:31:3e:42:c9:0d:5d:9a:ba:ac:25
Fingerprint (sha256): 8a:93:76:bc:5e:9a:75:bf:35:d1:e2:b9:9e:6e:e3:bd:cb:b5:fc:29:a8:2a:5a:38:17:06:cc:b9:41:33:c5:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mental-craft.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mental-craft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.8sluts.com
*.99markets.eu
*.alemu.com
*.ampong.com
*.anandkumar.com
*.anime-junkies.net
*.annapoorani.com
*.burquest.com
*.butterbaugh.com
*.cachimbos.com
*.chaunceys.com
*.citels.com
*.cursosdechino.com
*.divino.net
*.domainesdefontenille.com
*.eletrohouse.com
*.espiritos.com
*.fietsroutes.net
*.forwardmt.com
*.grebs.com
*.gulver.com
*.isenkram.com
*.kabaren.com
*.ksrv.com
*.kuburan.com
*.lapindo.com
*.mental-craft.com
*.mismaterias.com
*.muisti.com
*.partyinheaven.com
*.pixelect.com
*.plaquepsoriasismedus.com
*.pontoeverest.com
*.protraction.com
*.randoxhealth.uk
*.removalcosts.com
*.samisa.com
*.sectorexterno.com
*.suncorpinsurance.com
*.superfriendsuniverse.com
*.tagalog.info
*.thementallyill.com
*.vironviina.com
*.westsideoptometry.com
*.wheeless.com
*.www-philips.com
*.wyca.com
*.ymcaphilippines.org
*.yolene.com
*.yourbrainonpoker.com
8sluts.com
99markets.eu
alemu.com
ampong.com
anandkumar.com
anime-junkies.net
annapoorani.com
burquest.com
butterbaugh.com
cachimbos.com
chaunceys.com
citels.com
cursosdechino.com
divino.net
domainesdefontenille.com
eletrohouse.com
espiritos.com
fietsroutes.net
forwardmt.com
grebs.com
gulver.com
isenkram.com
kabaren.com
ksrv.com
kuburan.com
lapindo.com
mental-craft.com
mismaterias.com
muisti.com
partyinheaven.com
pixelect.com
plaquepsoriasismedus.com
pontoeverest.com
protraction.com
randoxhealth.uk
removalcosts.com
samisa.com
sectorexterno.com
suncorpinsurance.com
superfriendsuniverse.com
tagalog.info
thementallyill.com
vironviina.com
westsideoptometry.com
wheeless.com
www-philips.com
wyca.com
ymcaphilippines.org
yolene.com
yourbrainonpoker.com

Other certificates including the domain name mental-craft.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mental-craft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328661042609640684286026766112655335122574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 21:16:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 21:16:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mental-craft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707958917660991196115611606261216965007671249121779448902666125765030948123591645102983919860903079392890458434705990406234126337277717480678285312253104376737137916269584846346020472146813075819722290997109011912900262018881723095911096816772149675751544868593194992858309268309002328528461699869761473057407168578571618526559014155143396462278042058100943473140902450628856525418289844043843767023030144449818997664951537646854753590021646785934456611135933220166701453699335896089103687894355251017389814177606852499642269025912924174562790367934809555628961674199640315994884902442782303883460818312075213494125533847448289909969559621544932344180243220015200995506594715179136522712071984472176266889005221392144916328428995013635178488185828714923496664892479458884635216688443594443993857193327556118236887797664084882058482526451086822924901022320232288682984115191432289430714272712010727877169503834149839863368922353633569420722547096857591029281385710653827343611000719548780554945038179984640086167121020965948531914223094248011184290279332792559516188306822743416308300943717712820314192329809815282118308242738438601858408450944708224993550525835211912239458199618866994229200521581421623812086338271891270006142190631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c0d42a81faad06f2e1701b033288ebd99a91f1b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.8sluts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99markets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anandkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anime-junkies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annapoorani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butterbaugh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cachimbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaunceys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursosdechino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domainesdefontenille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eletrohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espiritos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forwardmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isenkram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ksrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuburan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapindo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mental-craft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mismaterias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muisti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plaquepsoriasismedus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pontoeverest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randoxhealth.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sectorexterno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suncorpinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superfriendsuniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagalog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thementallyill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vironviina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westsideoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymcaphilippines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yolene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourbrainonpoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8sluts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99markets.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anandkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anime-junkies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annapoorani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butterbaugh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachimbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaunceys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursosdechino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainesdefontenille.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eletrohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espiritos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forwardmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isenkram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksrv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuburan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapindo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mental-craft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mismaterias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muisti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plaquepsoriasismedus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pontoeverest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randoxhealth.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectorexterno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncorpinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superfriendsuniverse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagalog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thementallyill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vironviina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westsideoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheeless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymcaphilippines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yolene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourbrainonpoker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e443086270000040300483046022100dfb8b608f87b6da84af2951c2132b91656ae78eab8496c23d85ec8e7aa9e3f89022100e45eb1ba2c1bb73139889d2e8a8f4b226b37329780d513c1231122f7b434cf1600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e44308668000004030047304502210080ff6df3b03f3f6584f5060ff52117913610f66ee1323dfeefcbf0b30626cc270220177cd7a76cf733c01a5c08f0de46b8f85312c9551ea2fbab929cef88c20ac0b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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