affac.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:31:06:a4:9b:19:cf:ec:f1:42:78:ad:2a:9f:55:1a:a6 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=affac.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c7:31:06:a4:9b:19:cf:ec:f1:42:78:ad:2a:9f:55:1a:a6
Serial Number (int): 416230501408485881582849263374892596009638
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:d4:78:ec:6b:db:f9:d5:b3:22:01:5d:44:6d:8c:0f:9e:db:8c:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 01:04:3c:73:2d:8d:b4:3f:6f:fa:36:d8:75:b7:5e:22:42:d7:c6:14
Fingerprint (sha256): 8a:ce:23:5a:0d:eb:2a:8c:51:c9:99:16:90:ec:ca:9b:38:9e:56:45:27:ee:73:3a:cc:f7:57:50:cd:68:8a:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate affac.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for affac.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achemais.com
*.affac.com
*.albahhar.com
*.alioune.com
*.bottox.com
*.brisman.com
*.cantilena.com
*.celentano.com
*.classicbronco.com
*.controldecuentas.com
*.crosselectric.com
*.cyrena.com
*.darake.com
*.deadloan.com
*.deerfieldbeachhighschool.com
*.dirknowitzki.com
*.efesios.com
*.eutimio.com
*.fiberdrinks.com
*.firsthandexperience.com
*.folhacar.com
*.gokpinar.com
*.gongde.com
*.hebbar.com
*.hoebeke.com
*.hyiper.co
*.jiangye.com
*.jvhs.com
*.keyani.com
*.knipping.com
*.kundvagn.com
*.liuma.com
*.luxtron.de
*.mazyar.com
*.onlinelogs.com
*.osone.com
*.palabras.com
*.paracolorear.com
*.professionalplaza.com
*.qianzi.com
*.qingtu.com
*.rollapp.co
*.slovinsko.com
*.slowianie.com
*.snuffelmarkt.com
*.thelifediet.com
*.tolento.com
*.vinarium.bar
*.watykanczyk.com
*.zarke.com
achemais.com
affac.com
albahhar.com
alioune.com
bottox.com
brisman.com
cantilena.com
celentano.com
classicbronco.com
controldecuentas.com
crosselectric.com
cyrena.com
darake.com
deadloan.com
deerfieldbeachhighschool.com
dirknowitzki.com
efesios.com
eutimio.com
fiberdrinks.com
firsthandexperience.com
folhacar.com
gokpinar.com
gongde.com
hebbar.com
hoebeke.com
hyiper.co
jiangye.com
jvhs.com
keyani.com
knipping.com
kundvagn.com
liuma.com
luxtron.de
mazyar.com
onlinelogs.com
osone.com
palabras.com
paracolorear.com
professionalplaza.com
qianzi.com
qingtu.com
rollapp.co
slovinsko.com
slowianie.com
snuffelmarkt.com
thelifediet.com
tolento.com
vinarium.bar
watykanczyk.com
zarke.com

Other certificates including the domain name affac.com

(limited to 100 certificates)
theinternetadvertising.com
sparkelectrician.uk
affac.com
affac.com
affac.com
affac.com
affac.com
rimsmith.com
www.suryodaya.com

Certificate

The complete raw certificate details for affac.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416230501408485881582849263374892596009638
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 22:01:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 22:01:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'affac.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 882865286157017564234984183097420758355845629859675893390818653908539317384965352076090953033821751056401887781103244344143512847389600093869060355065802764151347415333478115700693506391412112169674455794069742138723041661297665580566389056016084829798857114859793448620178613160111056379073645523725869564579142125134393675882747719276552471744860961428144644149089668786925611584319143711998532747171641865937893488886444387355575483820092090945235839180637024430205986186978631730985969288067094984154009707949951098849025435711342312120902586676123937002613916634849485941232626547250655091122327145258958001080392291561974604272249532097479894619458313732647475904334422183430596803192180948935352934233895383591067628183257917592084654362866980790412794376879566629839246698395610860368479017431949756969784534376515050625512412761900723974206300713181780764412856567002215996796629240472854647778382173970186215155402994266248219376556727060304444833035802642414271933844421615011364933504953688736719108997551053756941644879475946264040635813980801275808249747382162027291487829973432254093801536138124262625457196530352035820699779140414622607228457168626392533086076652976824643183587117499645159989006536093416106499764367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffd478ec6bdbf9d5b322015d446d8c0f9edb8c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achemais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albahhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alioune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bottox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cantilena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celentano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classicbronco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controldecuentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crosselectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyrena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deerfieldbeachhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirknowitzki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.efesios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eutimio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiberdrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firsthandexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.folhacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokpinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gongde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hebbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoebeke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyiper.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiangye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jvhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keyani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kundvagn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxtron.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mazyar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinelogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paracolorear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.professionalplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qianzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qingtu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slovinsko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slowianie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snuffelmarkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelifediet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tolento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinarium.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watykanczyk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zarke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achemais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albahhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alioune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bottox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cantilena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celentano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicbronco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controldecuentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosselectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyrena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deerfieldbeachhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirknowitzki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efesios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eutimio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiberdrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsthandexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folhacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokpinar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gongde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoebeke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyiper.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiangye.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundvagn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxtron.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mazyar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinelogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paracolorear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qianzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qingtu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slovinsko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slowianie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snuffelmarkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelifediet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tolento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinarium.bar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watykanczyk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zarke.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001897063244a000004030046304402206ffba78ab5b9d0a7ce7bda2b4d6b9ccdb8189f1659503d2376c8dd50e5cbb7f0022027263d8b78dd1d908e02290f72401d06451690cedc1bd33cbb9510ae72565e76007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018970632488000004030046304402202c8494842abf7ad15d0c66ea23f4fc92eb1c98d0a65ceeeab3ababadd2ca0eea02203f8dd5243f6e780ce99d5dc09a86d7ab6b9de1ed9aa9f12928cf6489229d687d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b9b6d294e6156e35015f353f0fd87eee8689172cb02d6b1843e417246cb9662bad2202d914b1c3f3a634eb51ceaf5a57f4e578c2892d9fbcb7dd5c667dd593f376bbf4699a671821661dd00a56d4986f0916899b4a27e1d0de55522caad9f54b7a8df6826e8c87e5951557da6374508f1fe0e32773e2b21685c992b4be9c18e050ec7d754a1be99869f6371da90b249fd25187b836e29a690ba99e29d6aa1117786afc6935ac117493528e237d8c1755238f2c05762380c4d04437a9abe5a94dc8be1ae8d20db851be77b17000b9e4469c46bbffff2eb016023fb83e36b174a582f96d469816e131493fc2b3f16d2929d7d2fb2a922303283d2dedb1f627e828