paharigana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:af:7d:5d:69:6f:8a:56:d2:9a:1f:06:ee:c4:00:29:04 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=paharigana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:af:7d:5d:69:6f:8a:56:d2:9a:1f:06:ee:c4:00:29:04
Serial Number (int): 341196197485767587802977909575190178703620
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:99:bc:4f:a8:01:63:e4:58:3a:c5:11:b2:a5:94:85:a5:5f:48:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:8b:d9:eb:28:db:40:af:e3:a7:80:a8:6c:2b:15:20:e7:df:e3:c8
Fingerprint (sha256): 92:a6:30:71:16:74:dd:ca:0d:e0:44:bb:64:86:78:d0:20:76:f9:09:a1:bf:cd:7a:dd:3c:65:25:c6:04:42:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate paharigana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paharigana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1und1-ionos.com
*.4dglasses.com
*.accessory4kid.com
*.andoidapksfree.com
*.bachataheightz.com
*.bebose.com
*.bitreservations.com
*.bridgetonerewards.com
*.budgetmoblie.com
*.creditsecretes.com
*.desmoinesemploymentlaw.com
*.dicasdelivros.com
*.educamaibrasil.com
*.encejja.com
*.girlsname.com
*.goodatdating.com
*.groupedebournais.com
*.insightmacys.com
*.jetbleue.com
*.juegosx.com
*.juegue.com
*.jugarblackjack.com
*.junobeachcpa.com
*.junocpa.com
*.jupiterrowingclub.com
*.justboys.com
*.justping.com
*.kararlari.com
*.lotuscafemenu.com
*.metode-algoritma.com
*.myitsworks.com
*.mymilestoncard.com
*.njecourts.com
*.paharigana.com
*.pittsburghpropertymanagers.com
*.pridemov.com
*.progressivd.com
*.rbtmarketing.com
*.realgenitalherpescure.com
*.regionestecentral.com
*.retirarsealos40.com
*.sdcbank.com
*.spootify.com
*.stfrances.com
*.streamoviehq.com
*.thegrmmet.com
*.trulla.com
*.vanillagirft.com
*.visitkingpenis.com
*.xvide9s.com
1und1-ionos.com
4dglasses.com
accessory4kid.com
andoidapksfree.com
bachataheightz.com
bebose.com
bitreservations.com
bridgetonerewards.com
budgetmoblie.com
creditsecretes.com
desmoinesemploymentlaw.com
dicasdelivros.com
educamaibrasil.com
encejja.com
girlsname.com
goodatdating.com
groupedebournais.com
insightmacys.com
jetbleue.com
juegosx.com
juegue.com
jugarblackjack.com
junobeachcpa.com
junocpa.com
jupiterrowingclub.com
justboys.com
justping.com
kararlari.com
lotuscafemenu.com
metode-algoritma.com
myitsworks.com
mymilestoncard.com
njecourts.com
paharigana.com
pittsburghpropertymanagers.com
pridemov.com
progressivd.com
rbtmarketing.com
realgenitalherpescure.com
regionestecentral.com
retirarsealos40.com
sdcbank.com
spootify.com
stfrances.com
streamoviehq.com
thegrmmet.com
trulla.com
vanillagirft.com
visitkingpenis.com
xvide9s.com

Other certificates including the domain name paharigana.com

(limited to 100 certificates)
jojosiwa.com
ooxcomm.com
paharigana.com
skankazoid.com
justsellitautomotiveswapmeet.com

Certificate

The complete raw certificate details for paharigana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341196197485767587802977909575190178703620
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-03 11:02:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 11:02:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paharigana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759242450341295515597870523050004768388757837250812228795919212782653410240311030576998734491688551484117254132723976944144963679850963272122203672539447322002586503124072229558771314821949941485478341075385779358325554140099752242209993829021286238146733565823189922016950676802811186905892546082845504838469506969070057711644460471870781934186733566272939248876269330049415880391942225685602977457666948918557830897223477983790735373627049745777572170388594332632794572720072969423116079923055077392893990630142856921707725415012405715961837705877173089898334768126149090622807522091175780962704615240822292800613844958384520298689111641778569302525408213223695882777391862130310496851458895682717941023647212733657928662809588834204923991020279035423218098346763803585912424833495730699164929146154523325649809852005855962781793995280758040026295573372182974131651897758308855016747185567519283338450643480080109951203204685908722782089729485262275696392298364079943700960912615424090184526908842977640133659592312398321638766331122975637124330170599580580802063938227883216655728179840256667506481034755142327623736349552274469302287358858309722807491709212601833789256008921110532724610570863951233211452134518509492572051005353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2299bc4fa80163e4583ac511b2a59485a55f4892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1und1-ionos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4dglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accessory4kid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andoidapksfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bachataheightz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bebose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitreservations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridgetonerewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgetmoblie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditsecretes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desmoinesemploymentlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dicasdelivros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educamaibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encejja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlsname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodatdating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupedebournais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insightmacys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetbleue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juegosx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juegue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jugarblackjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junobeachcpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junocpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jupiterrowingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kararlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotuscafemenu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metode-algoritma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myitsworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymilestoncard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njecourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paharigana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pittsburghpropertymanagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pridemov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.progressivd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbtmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realgenitalherpescure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regionestecentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retirarsealos40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spootify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stfrances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamoviehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegrmmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trulla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanillagirft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitkingpenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvide9s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1und1-ionos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessory4kid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andoidapksfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachataheightz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bebose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitreservations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgetonerewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgetmoblie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditsecretes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmoinesemploymentlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicasdelivros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educamaibrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encejja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsname.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodatdating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupedebournais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insightmacys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetbleue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juegosx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juegue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jugarblackjack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junobeachcpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junocpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jupiterrowingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kararlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotuscafemenu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metode-algoritma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myitsworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymilestoncard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njecourts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paharigana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pittsburghpropertymanagers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pridemov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'progressivd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbtmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realgenitalherpescure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regionestecentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirarsealos40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spootify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stfrances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamoviehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegrmmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trulla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanillagirft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitkingpenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvide9s.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d917ff72f0000040300473045022021c81711e58307c9d4d93189ef05f299fddcc8e6806b7bedae40029a720b0afa022100d50b8d7cab2b2a5ca8878da9e943396e0943e8d4f892dee9de9fe99b396a9dc5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d917ff7510000040300473045022100bbc13a5c2204e0ff1c76fb59009b8ddc6ae6f08f2312c9fb42256238e618386a0220688d788200e577e39bb9eee38b35929f8fb6af86fc2aedb435a4a74d04c78f7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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