nabung.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:03:a9:61:5c:f1:c0:5e:2e:d6:e1:9a:27:13:fb:0a:27:cc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nabung.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:a9:61:5c:f1:c0:5e:2e:d6:e1:9a:27:13:fb:0a:27:cc
Serial Number (int): 262582849965261689675059377365302635014092
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:bd:46:37:4e:ba:44:72:ad:7c:d8:fd:04:b6:fa:c7:e1:a8:2e:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:3c:e9:c2:87:cf:50:cc:f4:8f:cf:81:f2:be:19:b8:dc:3f:5f:be
Fingerprint (sha256): 8e:6f:41:d3:8a:63:82:16:c7:6c:8f:bc:f8:20:78:79:f3:87:5f:27:79:72:29:74:79:c6:2c:55:3a:e7:23:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nabung.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nabung.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acbsnews.com
*.bistre.com
*.blisstrading.com
*.caramenjahit.com
*.crochedamimi.com
*.dzynerdolls.com
*.eskrimador.com
*.eyedolashes.com
*.fitsole.com
*.fyacebook.com
*.getzmann.com
*.hohma.com
*.humanismo.com
*.injecao.com
*.intensivecourse.com
*.klci.com
*.kolective.com
*.krazyphotography.com
*.lantinga.com
*.lexnaturalis.com
*.lotog.com
*.margini.com
*.mirtilo.com
*.musicabodas.com
*.myhummer.com
*.nabung.com
*.ninrendo.com
*.notcanada.com
*.panzik.com
*.pemfc.com
*.pnterest.com
*.propassiv.com
*.sadaj.com
*.softwaregestao.com
*.soveren.com
*.spaionic.com
*.sparzinsen.com
*.steepcurve.com
*.swaims.com
*.teleworkout.com
*.thetestcompany.com
*.thruit.com
*.tsuzumi.com
*.tutora.com
*.twitosfera.com
*.wenchou.com
*.wfky.com
*.willians-sonoma.com
*.wintner.com
*.wwwsilverscript.com
acbsnews.com
bistre.com
blisstrading.com
caramenjahit.com
crochedamimi.com
dzynerdolls.com
eskrimador.com
eyedolashes.com
fitsole.com
fyacebook.com
getzmann.com
hohma.com
humanismo.com
injecao.com
intensivecourse.com
klci.com
kolective.com
krazyphotography.com
lantinga.com
lexnaturalis.com
lotog.com
margini.com
mirtilo.com
musicabodas.com
myhummer.com
nabung.com
ninrendo.com
notcanada.com
panzik.com
pemfc.com
pnterest.com
propassiv.com
sadaj.com
softwaregestao.com
soveren.com
spaionic.com
sparzinsen.com
steepcurve.com
swaims.com
teleworkout.com
thetestcompany.com
thruit.com
tsuzumi.com
tutora.com
twitosfera.com
wenchou.com
wfky.com
willians-sonoma.com
wintner.com
wwwsilverscript.com

Other certificates including the domain name nabung.com

(limited to 100 certificates)
*.allianceonline.co
kuppelwieser.com
vidroduplo.com
blugreen.com
studna.com
blugreen.com
vidroduplo.com
blugreen.com
blugreen.com
nabung.com
blugreen.com
torcoletti.com
slingstick.com
iphoneline.com
blugreen.com

Certificate

The complete raw certificate details for nabung.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7UbAu0rwqSE5ZfU3PqT9
zFafM343vjCiXy0QP+Vy90wtP6dW+4Xw9/TC5QOy5I1sU/TGjJ7SU3TNbwfvS0w6
Mb+CkiM+f4Z1e0Jy85WG6u1DVeni5WMo6IvmMM49KBYKH++dV613L08fEld2SIJu
tHe19yzlyNssq0KPyF1kVVkOiLVRp4EcB8HmuF9iMHXCdP9PtpQ/0TjivU+dibjj
VbdNaSw9CcTQVqVL5uGuUYb7h0VObN+geDmxpVuMr2Hs/yq2YX4Ehgnn2G59lR+w
SqpQQJfBZ/YUbn0ZYeYL9JuECqUyKF+UeKOu35OTlFblwUnCX/Hku2R+1+XY22AT
6mYwiSZvVT/WDWU5Gz1LwzbjUDa4C9LvUWgy9PPFPPBJ6bNSdPwr9ZBmsIc6L/HI
eYR3moqunaMzWQW22t0nVrnNPYlQ+F8U37yWn2LwTELA2lw3jBr5xgoY5g9A5Sf+
q6Ia51VEKYyS/bwfNS5IxzDvzulvGeZClKdhAJi6WI4B8dC9MGZz32uo+vF3nXmx
WJfFCSJm4aY+qj3Xks9gfz9yxSk2csMPBDuEqwFe+ab3dvPRFHxCmnkqdk2VFFqC
3d5d8sNeZq61Fa5CprnxvDMmDTFzhpcvKW3WMwRIasedBmChodOa12Iu7d4ozpYx
wGV6xDGRi72lcDVIkeAHMd0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262582849965261689675059377365302635014092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 08:32:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 08:32:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nabung.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 968003169421025457116934199811939586111232300259027499036018118556311694352587209932461507573181408572413655849107155971187766676549197218199451521820059236032226133876878431318986276331804863127593651447988464899674171502724475672356362656893724191743121156146347468672101342323068133620365885727240727176263878409019393686094359880022339641392421730316138018389025689538046349811439499347449370659189153163608435763675801571932736989020136656200133080261527365166231105190922100885458981227407357877306755416534061792261056110348754748371477807534041398913876128158241170349705613261149486761365908656801508087946093345757028028289835963576031449837226035173969085295009166200068059644936639769744019670846271344781595260887999453912785298396700257566219250656393930480178328421625769920219553993308164389861067434620860091917705999422841170973311787659192359987157940597442588888777572103249529261795778873303329490305201815842462946530656148274649894762980232793840971494931696664740929747759418755360323527510589114334475725419967873309274988190033502892015418175951326279352640111797883913708594738339048497367252141467413864580029990953682068135319137499039949445946871383794996164595666978692747483578592394610564714432246237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4bd46374eba4472ad7cd8fd04b6fac7e1a82e40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1588 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bistre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blisstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caramenjahit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crochedamimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dzynerdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eskrimador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyedolashes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitsole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fyacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getzmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hohma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.humanismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.injecao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intensivecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krazyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lantinga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexnaturalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mirtilo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicabodas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nabung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ninrendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panzik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pemfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pnterest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propassiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sadaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.softwaregestao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soveren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spaionic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparzinsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steepcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swaims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teleworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetestcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsuzumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twitosfera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wenchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wfky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.willians-sonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wintner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsilverscript.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acbsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bistre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blisstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caramenjahit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crochedamimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzynerdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eskrimador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyedolashes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitsole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fyacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getzmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hohma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'injecao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intensivecourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krazyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantinga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexnaturalis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirtilo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicabodas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nabung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninrendo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panzik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pemfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnterest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propassiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwaregestao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soveren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaionic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparzinsen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steepcurve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swaims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleworkout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetestcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsuzumi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitosfera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willians-sonoma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wintner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsilverscript.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab5afbb000000040300483046022100c7f74eba91dfffaa2681c16663367ea7a8a9ec3d7235f6f5f9d6a056d4361703022100b3e3f49e3dcc5e35fd7efe692480da8f9077b4f25ec070c7cae465d134976a9a00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ab5afb90f000004030046304402207cc1a27cc13c0cf610cc7b2d1372c5a4a9280127c4836a362633a1555d2644a302206ee5c315b7c328f17cf128cf7c618a51d2cdc5351d415feb3fd30101e3663779
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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