arapahogov.com

Issued by R3

About this certificate

This digital certificate with serial number 04:97:75:b0:40:09:cd:5d:e0:c5:37:e4:f4:47:bb:2e:3c:05 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arapahogov.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:97:75:b0:40:09:cd:5d:e0:c5:37:e4:f4:47:bb:2e:3c:05
Serial Number (int): 399988215950707457871155544954179202989061
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:e8:bc:9a:77:76:16:78:8e:69:66:3e:04:51:d7:2b:46:a0:5c:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:3c:9b:92:5e:8c:c5:80:34:b3:b7:ad:43:d1:1b:91:68:a6:1d:57
Fingerprint (sha256): 8b:72:ce:bc:81:d4:de:4a:7d:3d:a2:a8:7b:ba:43:de:3a:6f:08:4f:da:0f:f3:5b:6f:2d:ce:ba:a8:76:3d:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arapahogov.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arapahogov.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4kpie.com
*.51avone.com
*.arapahogov.com
*.bedandbreakfastineurope.com
*.bnb.cm
*.boysfashion.com
*.californiashops.com
*.calispa.com.au
*.casinobonusboss.com
*.ce-airbus-plb.com
*.commonli.org
*.commonlt.org
*.cursosonlineeduca.com
*.duotao.com
*.equivalencia.info
*.fedelityrewards.com
*.fitbit2.com
*.ggreendot.com
*.gregorydiaz.com
*.invole.me
*.lixei.me
*.millionirematch.com
*.nearpodd.com
*.numercacu.com
*.officekaruizawa.co
*.one-vp.com
*.onedolarcol.com
*.planetadas.com
*.pomchis.com
*.portaloficce.com
*.priorityhalth.com
*.redtrube.com
*.renovationcalculator.com.au
*.robisoreservemortgage.com
*.scateroo.com
*.sdbulllion.com
*.seamakerspace.com
*.snoringhelp.com.au
*.sonjaspainting.com
*.sorenmall.com
*.spandexcostume.com
*.stocxk.com
*.stoppayingdebitcardfees.com
*.sulblimephoto.com.br
*.swtatefarm.com
*.twitpic.biz
*.wasatchfronthousing.com
*.weeklyvideos.com
*.wvrag.com
*.wwwttcu.com
4kpie.com
51avone.com
arapahogov.com
bedandbreakfastineurope.com
bnb.cm
boysfashion.com
californiashops.com
calispa.com.au
casinobonusboss.com
ce-airbus-plb.com
commonli.org
commonlt.org
cursosonlineeduca.com
duotao.com
equivalencia.info
fedelityrewards.com
fitbit2.com
ggreendot.com
gregorydiaz.com
invole.me
lixei.me
millionirematch.com
nearpodd.com
numercacu.com
officekaruizawa.co
one-vp.com
onedolarcol.com
planetadas.com
pomchis.com
portaloficce.com
priorityhalth.com
redtrube.com
renovationcalculator.com.au
robisoreservemortgage.com
scateroo.com
sdbulllion.com
seamakerspace.com
snoringhelp.com.au
sonjaspainting.com
sorenmall.com
spandexcostume.com
stocxk.com
stoppayingdebitcardfees.com
sulblimephoto.com.br
swtatefarm.com
twitpic.biz
wasatchfronthousing.com
weeklyvideos.com
wvrag.com
wwwttcu.com

Other certificates including the domain name arapahogov.com

(limited to 100 certificates)
pictureshadows.com
pictureshadows.com
planetadas.com
besttexstravel.com
arapahogov.com
arapahogov.com
freeacradegames.com
*.9kmovie.top
100portes.com
arapahogov.com
arapahogov.com
arapahogov.com
7893bthp8913.com
arapahogov.com
wasatchfronthousing.com
arapahogov.com

Certificate

The complete raw certificate details for arapahogov.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzjjpSBTv306FrdQbYo8c
cRISGU4Hl/4vU1jGCZmjG5zPAT8wZiaN7L/Ioil3o3amltvmSZ+59AiLzkavKlRp
QjMknMgrnw12VicDtyQnVQqOdsdwcsEhWg3WAO6PlWd97rFFkf8wn1Le9T3Fua1Y
byxbnb2b2i8i0u5rWmJYu59XZG9XD1uYcuaSjwUUetzw0V4I6a7QXgvFnsaN3zS4
CZYI8arBgXr1hCYdfkEE5qyRMo8Cl5+Elrn0twx0Bfiwec9cKO6tx9PXS1ccf8xZ
mkprlYdvl3t6du+fvzlK+NaN5ZxXLLZ6EenrIbiaKONVpCmUjwNfq0U3fDzpuKCW
CQh5JCVcOeWiif4WsdTEcSdQQB3szs2Ok0FH6yTfZ1QrHMy40olU26VYPERGMCbt
gepG53nmmkMteuGz2b28fPVVl2nf0rm7lighvpCP3v55JTdaEPoqz8fxTfiLEwEd
a6/j35LakN3/ERxSDEK3rHql/MoymB+3y5wQqVuZOaMQfK4sp42DCQ/phqkXHmm1
AnPq6UkH6JJiwJBds3m1azFpD25Nm/D4LS8aNOn5HOwtIC678FsugXJGcsrInop1
lo+kD3TztCTqpNzqqB9lfQUfYD5J3HeAW4MHTiKOQvHluvd6OP/F2vAghKQZ08DF
Os9i7F1uDR3CeMBbCjjSEn0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399988215950707457871155544954179202989061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 10:56:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 10:56:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arapahogov.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 841313622029636035789198023981319144113343001345318841019440995946514130668463330621444574261718468008964778382452374569824551816951728313368808686090720745993796101399415135499716666547222724130195218235084239548079921774280273374034028063640362077110803638275341873660076024605408856890490159657403066337095779468621199694791447111736603798255473056894761731534666425101647879762868330885301281541996608999136812645732267626123512914242307294980817836968189087478199366741300892990449709108019289926849009316357219023329915665485712152188239818422131683388354080010937433908221174714719513213372849685707982468425809922844169208815513365369821214403776314482135620374080173041435854486789887683682884245538192198417369040306013983157201377823689483833612073313679889823922146652340504219328573851398147730093923391972247483089081194045934508023319340802649489020923122602342787698444286927834458100898630752937833083262912235744842950446054032082870041307196329354902110873965146874600714582248907343945048963529149506304998715260996271092707986311930935228080849123880185926800177362484440292707559900617694021090638364022121478430010403258485151718161961263597461843363778973512555348680369385431201513051270994746692722731651709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28e8bc9a777616788e69663e0451d72b46a05c87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4kpie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.51avone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arapahogov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedandbreakfastineurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnb.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boysfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiashops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calispa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casinobonusboss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ce-airbus-plb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commonli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commonlt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursosonlineeduca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duotao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equivalencia.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedelityrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitbit2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggreendot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gregorydiaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invole.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lixei.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millionirematch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nearpodd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.numercacu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officekaruizawa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.one-vp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onedolarcol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planetadas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pomchis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portaloficce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.priorityhalth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redtrube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renovationcalculator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robisoreservemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scateroo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdbulllion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seamakerspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snoringhelp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonjaspainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sorenmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spandexcostume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocxk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoppayingdebitcardfees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sulblimephoto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swtatefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twitpic.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wasatchfronthousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weeklyvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wvrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwttcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4kpie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '51avone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arapahogov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedandbreakfastineurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnb.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boysfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiashops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calispa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinobonusboss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ce-airbus-plb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonli.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonlt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursosonlineeduca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duotao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equivalencia.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedelityrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitbit2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggreendot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregorydiaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invole.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lixei.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millionirematch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nearpodd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numercacu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officekaruizawa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-vp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onedolarcol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetadas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomchis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaloficce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priorityhalth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redtrube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovationcalculator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robisoreservemortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scateroo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdbulllion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seamakerspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snoringhelp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonjaspainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorenmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spandexcostume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocxk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoppayingdebitcardfees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sulblimephoto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swtatefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitpic.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasatchfronthousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weeklyvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvrag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwttcu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d407aa7ba0000040300483046022100f3ae265d4f4779365a4af394133f1f355700c79e229929072ebdd01ac71a60e5022100c6e9e79bbdc325f94ed60ef4b35f267a54790faf826bbe105e379114a1a971f60076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d407aa7b1000004030047304502207041f54859959563d3e148c5fda6360089ab6ca58f58c84c654e0f7c624599b1022100cc887469b057f311ca069c6db21beb6b5883e80bc7c01e14f4a62f4326b9ba5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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