umak.com

Issued by R3

About this certificate

This digital certificate with serial number 03:83:17:93:75:b1:ad:24:4e:0d:61:34:cf:ec:82:f8:b7:3b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=umak.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:17:93:75:b1:ad:24:4e:0d:61:34:cf:ec:82:f8:b7:3b
Serial Number (int): 305945185760583829527202177594657556969275
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 90:10:f1:2d:04:ee:31:e2:8f:38:33:1a:9e:1d:71:36:fa:1e:ed:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:84:bd:69:66:5c:06:ad:c2:eb:39:d0:7a:06:7a:1f:ec:07:63:30
Fingerprint (sha256): 8d:34:77:54:e6:f9:cc:e7:1e:20:db:5b:95:55:4a:4e:a8:7c:dc:97:0a:b3:58:b8:a9:5e:f8:7c:67:a0:f5:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate umak.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for umak.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.99pickup.com
*.airais.com
*.allaitement.com
*.alnails.com
*.alyst.com
*.arunella.com
*.baun.com
*.benditos.com
*.bkmart.com
*.bnkofthewest.com
*.bodo-berlin.com
*.brodyr.com
*.buygreenpan.com
*.callmacys.com
*.clapped.net
*.commcdvoice.com
*.egouts.com
*.estadolibre.com
*.excoins.pro
*.exzmedinfo.com
*.eyemedcisioncare.com
*.findparts.org
*.fitbodyanchorage.com
*.futurs.io
*.goroscop.online
*.itinerances.com
*.jmjy.com
*.lorier.com
*.magnapan.com
*.marcateo.com
*.moneycar.pro
*.msfl.online
*.nicechicknude.xyz
*.optometristwebsites.com.au
*.parecipio.com
*.press-vesti.online
*.promotingvoices.com
*.sodacat.club
*.starananda.com
*.tappedthemovie.com
*.teachaustralia.com
*.torrentigruha.pro
*.umak.com
*.unicorreios.com
*.united-states-presidents.com
*.unitedstatepostalservice.com
*.vipermoble.com
*.whichbattery.com.au
*.whichlimohire.com.au
*.yourbancard.com
99pickup.com
airais.com
allaitement.com
alnails.com
alyst.com
arunella.com
baun.com
benditos.com
bkmart.com
bnkofthewest.com
bodo-berlin.com
brodyr.com
buygreenpan.com
callmacys.com
clapped.net
commcdvoice.com
egouts.com
estadolibre.com
excoins.pro
exzmedinfo.com
eyemedcisioncare.com
findparts.org
fitbodyanchorage.com
futurs.io
goroscop.online
itinerances.com
jmjy.com
lorier.com
magnapan.com
marcateo.com
moneycar.pro
msfl.online
nicechicknude.xyz
optometristwebsites.com.au
parecipio.com
press-vesti.online
promotingvoices.com
sodacat.club
starananda.com
tappedthemovie.com
teachaustralia.com
torrentigruha.pro
umak.com
unicorreios.com
united-states-presidents.com
unitedstatepostalservice.com
vipermoble.com
whichbattery.com.au
whichlimohire.com.au
yourbancard.com

Other certificates including the domain name umak.com

(limited to 100 certificates)
whisperingspruce.com
umak.com
twscoviews.com
genetics-health.com
umak.com
stonwallkitchen.com
umak.com
umak.com
umak.com
twscoviews.com
*.airais.com
ecourtkokua.com
xpacc.com

Certificate

The complete raw certificate details for umak.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305945185760583829527202177594657556969275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-30 22:43:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-30 22:43:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'umak.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 953031025281225261333210309969711111508831526716476890711370851162182411002008215575621758389375823983131214783834143758000171526030507842982810351205895196451364558660560296291879014172697027460284332814474782179397095864491335305904346812432469423377145783165074173279756237637816419263298650034271754309483613850231373019607275273507350297190887560127913690858284540165093151522843640023216774191958754580304231807456614860539770946206046169196996483383293629154869317803072264919631005094866049203486130275176321698844797647975526124857747974642827349853604216317789981157451031931657388354575054088334851954624599914869191159466165262802670569175543715606020588735066739526408088885049854795950122184946323374532516145471369262265419753469538836022537428694630232956799166450199287577179016257522224405796228080536295199619363466217628221960766076190814475825628984709423402804076042627053473183168722750383876443786644608513273584468887603844367255764998218083263172084218268317562808484419776567223417320643803822794401660996877456604186064526681741700806909720926446824349476249511384498559873036534894563829233214421556272155768384819115030215904412417652268253475823580020067044645558118695797213801756466353945122302013347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9010f12d04ee31e28f38331a9e1d7136fa1eed02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1744 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99pickup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allaitement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alnails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arunella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benditos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bkmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnkofthewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodo-berlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brodyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buygreenpan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callmacys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clapped.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commcdvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estadolibre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excoins.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exzmedinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyemedcisioncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findparts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitbodyanchorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futurs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goroscop.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itinerances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcateo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneycar.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msfl.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicechicknude.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optometristwebsites.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parecipio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.press-vesti.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promotingvoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodacat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starananda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tappedthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teachaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentigruha.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unicorreios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.united-states-presidents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedstatepostalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipermoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichbattery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichlimohire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourbancard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99pickup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allaitement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alnails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arunella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benditos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnkofthewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodo-berlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brodyr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buygreenpan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callmacys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clapped.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commcdvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egouts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estadolibre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excoins.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exzmedinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyemedcisioncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findparts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitbodyanchorage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goroscop.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itinerances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnapan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcateo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneycar.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msfl.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicechicknude.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optometristwebsites.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parecipio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press-vesti.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promotingvoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodacat.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starananda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tappedthemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentigruha.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unicorreios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'united-states-presidents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedstatepostalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipermoble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichbattery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichlimohire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourbancard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186051094de000004030047304502200bb88d5120510b6dd5c239e93e6a38359fea03f1d5d527f4cc26f05699647d8c022100a42f72ef05e227b8b8ff5171628c138c59ec764e61a5d6d93ddb6d1a12922f9e007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000186051094f8000004030047304502202abcad5d963a9aca0f2494356a643c7cca6102648777d7f4bb9035678910812f022100834b7d4810e2d52896746555252707f2e2e26fd667145c94e35dfc2093885d1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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