jensen-optical.us

Issued by R3

About this certificate

This digital certificate with serial number 03:53:77:03:c7:0d:f5:87:0f:7f:8f:51:35:2c:0f:94:e4:86 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jensen-optical.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:77:03:c7:0d:f5:87:0f:7f:8f:51:35:2c:0f:94:e4:86
Serial Number (int): 289738491995413077345638518661382015345798
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:a1:81:11:a5:5b:50:d3:ba:c2:e3:31:d3:35:8e:56:64:93:2a:a4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:a6:96:ec:64:a6:30:68:67:f3:b5:be:97:8f:cf:53:43:25:15:bf
Fingerprint (sha256): 8e:34:f4:39:20:2d:df:4e:c8:55:16:12:1c:d7:29:1b:2f:ea:79:01:1e:ab:4a:a0:39:63:d3:6f:71:cf:17:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jensen-optical.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jensen-optical.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alfa-tv.pro
*.alfred-adler.us
*.apricappartamenti.info
*.banker.guide
*.bathandodyworks.com
*.bbyy1.buzz
*.cecollectaobserv.xyz
*.cobblestone.properties
*.contravention-antai-gouvfr.info
*.davids.events
*.densionusa.com
*.downgit.io
*.dunstable.church
*.epidemia.online
*.festcup.net
*.globalpro.us
*.gmbh.cash
*.harolds.academy
*.jensen-optical.us
*.jeremy.repair
*.kurdmaxtv.live
*.liriovariedades.site
*.luanvan198.com
*.malaysian.digital
*.manhattansydney.com.au
*.megaloot.club
*.menotes.me
*.mindbodymastery.au
*.newhampshire.cash
*.newyorkcity.land
*.nymeriatv.net
*.oneills.farm
*.plantillasheets.com
*.sandra.academy
*.sarahbockmo.com
*.shannons.guru
*.shoptoday.asia
*.stafford.services
*.stopmypain.us
*.svkbb.sk
*.talkrom.io
*.tanzanian.life
*.towa.live
*.trapez.online
*.tusecretos.io
*.ultraarticletodiscovertoday.info
*.velmanpancakes.com
*.warwick.services
*.xiangjiaozy7.com
*.yujizz.info
alfa-tv.pro
alfred-adler.us
apricappartamenti.info
banker.guide
bathandodyworks.com
bbyy1.buzz
cecollectaobserv.xyz
cobblestone.properties
contravention-antai-gouvfr.info
davids.events
densionusa.com
downgit.io
dunstable.church
epidemia.online
festcup.net
globalpro.us
gmbh.cash
harolds.academy
jensen-optical.us
jeremy.repair
kurdmaxtv.live
liriovariedades.site
luanvan198.com
malaysian.digital
manhattansydney.com.au
megaloot.club
menotes.me
mindbodymastery.au
newhampshire.cash
newyorkcity.land
nymeriatv.net
oneills.farm
plantillasheets.com
sandra.academy
sarahbockmo.com
shannons.guru
shoptoday.asia
stafford.services
stopmypain.us
svkbb.sk
talkrom.io
tanzanian.life
towa.live
trapez.online
tusecretos.io
ultraarticletodiscovertoday.info
velmanpancakes.com
warwick.services
xiangjiaozy7.com
yujizz.info

Other certificates including the domain name jensen-optical.us

(limited to 100 certificates)
sni.cloudflaressl.com
sosialistiskung.net
sni.cloudflaressl.com
trachea.us
sosialistiskung.net
zaberkovitsa.eu
jensen-optical.us
sosialistiskung.net

Certificate

The complete raw certificate details for jensen-optical.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289738491995413077345638518661382015345798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 23:43:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 23:43:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jensen-optical.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879533660391294062501880214052296922311540568587033483711849877657703752241804189702178988458781453068654737883283900091901129478305465511850800714240368635157286598513309039504824439893095603035528673979257316725361707509527179283344897495272759152264081147441361726445426082878592969477294655845312026179597285224428045914683568305464794428763666724896458542615038671073226574812397296713451541766279490566748541756088865254794084619359979484159353504078474483417611091573603926441088858425999227109177027069325437065682141340745123312119462039683537678048680422584072948801380743934819255692574257300672637170197450819076859120787290073730433671778093441841523797502853488577679225539105990444582095603312425147674545457122598998520613519849959309512727237452053772575845643749214344313046727323567965896932842642549917809336731841997620466347424897521070843715700729920180938308799319679956593354366964086630031801880613010563262274206314112439839156781039489784906160432416604643922923548122848802113679788766546796079435070065156761375245743132851330596614850439455481197199689384651370957738823824933095846797618492401973335430555350749210596773559013486425341184698859675715795337023941300308857277418858610449720246433035691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3da18111a55b50d3bac2e331d3358e5664932aa4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alfa-tv.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alfred-adler.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apricappartamenti.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banker.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bathandodyworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbyy1.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cecollectaobserv.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cobblestone.properties'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contravention-antai-gouvfr.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davids.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.densionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downgit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunstable.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epidemia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.festcup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalpro.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmbh.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harolds.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jensen-optical.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeremy.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurdmaxtv.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liriovariedades.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luanvan198.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malaysian.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhattansydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaloot.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menotes.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindbodymastery.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newhampshire.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newyorkcity.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nymeriatv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneills.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plantillasheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandra.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarahbockmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shannons.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptoday.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stafford.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stopmypain.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svkbb.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talkrom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanzanian.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.towa.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trapez.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tusecretos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultraarticletodiscovertoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velmanpancakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warwick.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiangjiaozy7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yujizz.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfa-tv.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfred-adler.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apricappartamenti.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banker.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathandodyworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbyy1.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecollectaobserv.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobblestone.properties'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contravention-antai-gouvfr.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davids.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'densionusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downgit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunstable.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epidemia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festcup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpro.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmbh.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harolds.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jensen-optical.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeremy.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurdmaxtv.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liriovariedades.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luanvan198.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malaysian.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattansydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaloot.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menotes.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindbodymastery.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhampshire.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyorkcity.land'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymeriatv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneills.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantillasheets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandra.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarahbockmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shannons.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptoday.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stafford.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopmypain.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svkbb.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkrom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanzanian.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towa.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trapez.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusecretos.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultraarticletodiscovertoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velmanpancakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwick.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiangjiaozy7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yujizz.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e87a927f9000004030047304502210099d7ebc5154d681ccd3618e8b7a1b0812b6439e56654de4f2f51583f85f8741202206f0563c06fea96afb3e4521f4f939055b5b2098dd421d02b2f0019e27eb1ba8d007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e87a9280f000004030046304402206ba57f7d778c52110b34c33053846540befe903607a00d3de1918af6cff94c520220573eb357678a1e1ade14abbc14f0d982f62a9e64b95c06c63e3c5a89bafed8ec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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