samandstefanarchive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5a:7f:a4:b4:ef:9c:d3:44:30:0c:90:9f:dd:3e:b1:11:53 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=samandstefanarchive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:7f:a4:b4:ef:9c:d3:44:30:0c:90:9f:dd:3e:b1:11:53
Serial Number (int): 292131937980132480244262467137321508606291
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:87:ac:1a:10:22:27:aa:6c:3b:6c:c4:03:97:d5:8c:6a:d3:99:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2a:be:9f:43:a7:ac:c3:65:ea:37:ab:aa:6f:d0:69:0c:5a:e9:a8:55
Fingerprint (sha256): 8e:f3:a7:d4:ba:79:a0:38:f5:27:0f:bf:ae:b2:d2:d4:80:4b:48:ff:c5:0c:f1:9a:1b:1b:30:61:e8:36:a4:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate samandstefanarchive.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for samandstefanarchive.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.133062.com
*.alexisfagan.com
*.artechcondo.com
*.autoversicherungsangebote.de
*.bandcrea.com
*.bgm52.com
*.blookeyt.com
*.boschelectric.com
*.brfu.com
*.bulksalonsupplies.com.au
*.campjonesgulch.org
*.carinsurancebocaraton.com
*.cpc-invest.com
*.dandan.cc
*.dictgo.com
*.dminn.com
*.elusiveshadow.com
*.fingertps.de
*.flor.au
*.foodographer.net
*.freepropertyestimate.com.au
*.idoma.in
*.mkdeadlyalliance.com
*.oicontasb2.com.br
*.okho.com
*.onewark.org
*.packspormega.info
*.reurt.cc
*.rocketloans.cm
*.samandstefanarchive.com
*.sarees.com.au
*.somewest.com
*.standbrunnen.de
*.surreybccarpetcleaning.com
*.teambstreamingservice.com
*.tec-boom.com
*.thattechchick.com
*.thearrowclub.co
*.tiktoksho.com
*.tiktokshoop.com
*.tiktoksjop.com
*.tress.com.au
*.tvtpday.de
*.vegetariers.be
*.vip0078.com
*.wcanva.com
*.wolfpaqtrade.com
*.wwwantonellofrasconi.com
*.xn--blitzrhre-57a.de
*.xn--lindenbltter-ncb.de
133062.com
alexisfagan.com
artechcondo.com
autoversicherungsangebote.de
bandcrea.com
bgm52.com
blookeyt.com
boschelectric.com
brfu.com
bulksalonsupplies.com.au
campjonesgulch.org
carinsurancebocaraton.com
cpc-invest.com
dandan.cc
dictgo.com
dminn.com
elusiveshadow.com
fingertps.de
flor.au
foodographer.net
freepropertyestimate.com.au
idoma.in
mkdeadlyalliance.com
oicontasb2.com.br
okho.com
onewark.org
packspormega.info
reurt.cc
rocketloans.cm
samandstefanarchive.com
sarees.com.au
somewest.com
standbrunnen.de
surreybccarpetcleaning.com
teambstreamingservice.com
tec-boom.com
thattechchick.com
thearrowclub.co
tiktoksho.com
tiktokshoop.com
tiktoksjop.com
tress.com.au
tvtpday.de
vegetariers.be
vip0078.com
wcanva.com
wolfpaqtrade.com
wwwantonellofrasconi.com
xn--blitzrhre-57a.de
xn--lindenbltter-ncb.de

Other certificates including the domain name samandstefanarchive.com

(limited to 100 certificates)
samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com

Certificate

The complete raw certificate details for samandstefanarchive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292131937980132480244262467137321508606291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 20:34:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 20:34:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'samandstefanarchive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768616933790480454153029727810712610762718472252919618365065637313068008210961227797420072327895674386312878306022115576399509487029960155593484144960973449513255677764496456935188988079000728114610625698167140256358256071451501327003071494140815310948232650063284631216583521274430226846681349838526397300320259727158832138732314606294419528921610721829611528501865516577638855284629303605860104826151607506756929599852749267052295876445962500053745210202172806257854729733846611346999707409578266885408472235876013024367100248782274543224069723686493852562162447450813390397807408958255620193332038245668992850649698571545762520447764489291441457171019121103102669422091107224040329657035852086046750329431489810475877511740196698006600155297097818054801293778448704643054048826097407224998739178580817573886295109027524369167682885304725891655280674843152443577250483021944352982515249750405126777494553138023067299675364767344004338902012319138647258336780576158352878798277873849241245570673391940198146026656950756857552912721176451830415898323756344805726495485813618459978712122790490373627780017152326131738465904202877737598879535716524411431720734051171313615590478785487870725610703278828834191063276743342948797198130961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e887ac1a102227aa6c3b6cc40397d58c6ad399c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.133062.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexisfagan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artechcondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoversicherungsangebote.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bandcrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bgm52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blookeyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boschelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brfu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulksalonsupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campjonesgulch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carinsurancebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpc-invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dandan.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dictgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elusiveshadow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fingertps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodographer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freepropertyestimate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idoma.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkdeadlyalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oicontasb2.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onewark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.packspormega.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reurt.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketloans.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samandstefanarchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarees.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.standbrunnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surreybccarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teambstreamingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tec-boom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thattechchick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thearrowclub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiktoksho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiktokshoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiktoksjop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvtpday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vegetariers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vip0078.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcanva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfpaqtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwantonellofrasconi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--blitzrhre-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--lindenbltter-ncb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '133062.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexisfagan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artechcondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoversicherungsangebote.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bandcrea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgm52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blookeyt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boschelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brfu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulksalonsupplies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campjonesgulch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carinsurancebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpc-invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dandan.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dictgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elusiveshadow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fingertps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodographer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freepropertyestimate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idoma.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkdeadlyalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oicontasb2.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onewark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packspormega.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reurt.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketloans.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samandstefanarchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarees.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somewest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standbrunnen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surreybccarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teambstreamingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tec-boom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thattechchick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thearrowclub.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktoksho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktokshoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktoksjop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvtpday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegetariers.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip0078.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcanva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfpaqtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwantonellofrasconi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--blitzrhre-57a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lindenbltter-ncb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c5acd5ab10000040300473045022009194de39a96ab2d3790b72963783d6f3edd505d93762d36aef920de47b34175022100eb4a468565b8be9d2b2852198d6333ee3b875dc7e7abde54778cab4eb18c125c00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5acd5c9a0000040300463044022063fc1eb0a0cd843b75fc985edee190805e1f96c8df75c32680309b9c550d9c9a0220189d0c420767ddf32d0cc908895015c5f204a2f32450b06ff3b06bb7540d92b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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