dubois.me

Issued by R3

About this certificate

This digital certificate with serial number 04:44:6f:96:e7:d7:b1:7a:c3:2c:18:86:b9:8f:a2:1e:89:7b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dubois.me

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:6f:96:e7:d7:b1:7a:c3:2c:18:86:b9:8f:a2:1e:89:7b
Serial Number (int): 371736672532051308629507633252736362776955
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:ab:99:56:24:0b:bb:7d:c1:f5:db:33:b1:a9:f2:50:84:32:a4:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:22:33:25:e0:07:5e:b2:3a:6c:63:ef:b0:14:63:d7:66:d0:86:29
Fingerprint (sha256): 92:1e:fa:70:a4:ef:1f:db:b1:a6:05:17:77:9c:97:1f:69:43:e6:f6:3e:f1:d9:b6:4a:8c:9e:fd:91:92:57:25

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dubois.me

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dubois.me

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.altgen.tk
*.antonellas.com
*.beatsong.com
*.bigbadaboom.com
*.billiardi.com
*.billstephens.com
*.brallier.com
*.bramell.com
*.byggmester.com
*.cliper.xyz
*.connectivitysearch.com.au
*.contadordebilletes.com
*.contrabaixo.com
*.copagua.com
*.cotway.com
*.crochetmaster.com
*.cycek.com
*.delovaya.com
*.dentureimplants.com.au
*.dubois.me
*.dunkinmytits.com
*.elbastardo.com
*.familiegeschiedenis.com
*.flipcast.com
*.higieneoral.com
*.hikipedia.com
*.kaljan.com
*.kinderfeestjes.com
*.lenguajecorporal.com
*.lewises.com
*.lichota.com
*.nelya.com
*.nrgradio.com
*.pearsonkia.com
*.preciosdecarros.com
*.psycatgame.com
*.ridings.com
*.rocketaccoumt.com
*.rodeffer.com
*.sacik.com
*.serdal.com
*.shivir.com
*.sonchou.com
*.stopandcompare.co.uk
*.sv-post-stendal.de
*.takwin.com
*.telhas.com
*.toalla.com
*.tropicaljewels.com
*.xegas.com
altgen.tk
antonellas.com
beatsong.com
bigbadaboom.com
billiardi.com
billstephens.com
brallier.com
bramell.com
byggmester.com
cliper.xyz
connectivitysearch.com.au
contadordebilletes.com
contrabaixo.com
copagua.com
cotway.com
crochetmaster.com
cycek.com
delovaya.com
dentureimplants.com.au
dubois.me
dunkinmytits.com
elbastardo.com
familiegeschiedenis.com
flipcast.com
higieneoral.com
hikipedia.com
kaljan.com
kinderfeestjes.com
lenguajecorporal.com
lewises.com
lichota.com
nelya.com
nrgradio.com
pearsonkia.com
preciosdecarros.com
psycatgame.com
ridings.com
rocketaccoumt.com
rodeffer.com
sacik.com
serdal.com
shivir.com
sonchou.com
stopandcompare.co.uk
sv-post-stendal.de
takwin.com
telhas.com
toalla.com
tropicaljewels.com
xegas.com

Other certificates including the domain name dubois.me

(limited to 100 certificates)
xcideoa.com
sexintechnoligies.eu
innocentpassage.com
dubois.me
xcideoa.com
studentmoveout.com
xcideoa.com

Certificate

The complete raw certificate details for dubois.me in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuj0yGqfxadrzAg5niQFz
TJbWsMxxCgc8DwrxbmiM56VBmbL8EBW76BexbuJIG6GjgePr5hJLreNcRnI9xJ6F
3wKGKDqAZvFBj9+WT8HbKDYqJxpFPadKSoyWPLmPAVB0NDHwo3SPCxCx87xXCh79
peaAqp+TTfU04+QpcQYEH360lIvgHQcX35NpHWVQqpITR75Pf7x+rzArcc8suM+/
BJCmCxF3UdSRV7dlqnNxAU87SCIN0PSZjmuWA5qd7vbkqSoAnvEVN5BCqicx72rb
+XNTKt9DDBzoXqE9p6eDBlPzPDucmN5oB0saM4THQEDPBX8Ngpc2uLiC9RNjjU3t
RO3l4uLeY+iaChFro1JfHQYcVKDKFDrX70soigu7t1g73nZBBrsSWE5C9zR0Ov7N
s/bpsMrOM6Z0/X8UQa9+72eQdeDZ9NCv4r0J7RYw/NdBDzIpIqagRGPJwa+sGDdd
QTR6ciDxkEI6EIwn+LqLl/I81bvzTB/mWok0slVNoDDg02WeTb8I0dD+EWnS2Si4
kt7HYoqdDrsc478jWlLHGgmy6fGOJEmRN3s/yijnMMT74vx7Two2jNV7zwXQAlPH
u9L9cR1g0oj7yeKjybpGdNSPER23fM6XNQmUpD96UCBg+K1FvqyMyn8Oh4oHGESF
YxSNpjUhzHVyDn7piuHx9DsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371736672532051308629507633252736362776955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-20 10:15:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-18 10:15:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dubois.me'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759789018343073253482116586620617087238956778220974353646001002959965930490323711409429979848379319358012192283293346829387120159224465838262787267742416940373490621561047400090475768568336263720157511930912444924801416120477636977170421720582530952481448415012306049380908332893637920023208457686147380131134872276848958770718534221090700841567197289838346856354021011875775263315920912252970874822756168761509179946430397778516065684416414364489350115155601051797464887477794605794277433634665236351922486286731974973617874213851721424388149122556715087498255231679570339247667761587603080033191730613681775105918344023167812909867838427917329884861103004511727739121136300720272649808230863071757588202900587939783630441570284973003568311698345287380872863606031359506964846256134285647764201361530195190805202076943638591311284708789664952399295987805938731578846339225996282230046404942911526199293853015714569582634644905018579284271468473236802518575025230070075257991255682526526536512603366635429973331825039634145785949526771963190481649151856449666198839354879232321791938019704829066030155657461117374175317879777228920209204629541498124795507840368364452660412592470244905115785414810444630060629199599618172691716109371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cab9956240bbb7dc1f5db33b1a9f2508432a410
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1672 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altgen.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antonellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beatsong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigbadaboom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billiardi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billstephens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brallier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bramell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byggmester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliper.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectivitysearch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contadordebilletes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contrabaixo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cotway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crochetmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cycek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delovaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentureimplants.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubois.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunkinmytits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elbastardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familiegeschiedenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flipcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.higieneoral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hikipedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaljan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinderfeestjes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lenguajecorporal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lichota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nelya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrgradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pearsonkia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preciosdecarros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psycatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketaccoumt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodeffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sacik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serdal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shivir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stopandcompare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sv-post-stendal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toalla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tropicaljewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altgen.tk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antonellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beatsong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbadaboom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billiardi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billstephens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brallier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bramell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byggmester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliper.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectivitysearch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contadordebilletes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrabaixo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copagua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crochetmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delovaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentureimplants.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubois.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunkinmytits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbastardo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familiegeschiedenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'higieneoral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hikipedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaljan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinderfeestjes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenguajecorporal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrgradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearsonkia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciosdecarros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psycatgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketaccoumt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodeffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serdal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shivir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonchou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopandcompare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv-post-stendal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toalla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropicaljewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xegas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000186febb10b800000403004730450221008e27acc341454fe08a32291094b3ca4fdcd8c497e81844320cb757befcf418590220467d17e2563541e93ad0e8ce6cfc9872c6aed9b18a442bbaa79cbfbe0b64668e007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186febb129e0000040300473045022054cbb595b075cd14a03d6fd8d97392882572c6d34df8e30c6a4cbbab486a3249022100d87143afb4ce6676a577311d21be66239dbd23320a2fd6491a965a7cd6288138
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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