thinklife.co

Issued by R3

About this certificate

This digital certificate with serial number 03:b4:68:79:ba:09:7d:82:4c:ad:44:89:03:21:eb:e3:9b:84 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thinklife.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:68:79:ba:09:7d:82:4c:ad:44:89:03:21:eb:e3:9b:84
Serial Number (int): 322726555593811260218723549802310603611012
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:8a:92:e0:dd:fe:bf:f4:2a:3c:c9:6d:2a:ef:c0:09:f9:32:fa:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:56:9b:8c:62:7d:4c:9b:4e:70:9c:f4:b8:3b:2e:9b:78:9b:6c:86
Fingerprint (sha256): 92:ad:92:1c:7f:5e:a9:3b:90:f9:16:db:bf:4c:02:2a:2f:b5:55:fd:a1:67:2a:6a:31:62:9e:db:66:31:c0:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thinklife.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thinklife.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.18livegirls.com
*.adulttv.uk
*.afghansportsfederation.org
*.ajanta.co
*.aosmith.uk
*.aricomagroup.co
*.autoptrader.co.uk
*.bocan.co
*.cafeluxhaiti.com
*.compu.es
*.csgohouse.org
*.designjournal.org
*.domesticabuse.de
*.drudi.com
*.europinocchio.it
*.exvideos.com
*.fps-1.com
*.fps-i.com
*.gaforit.eu
*.goodnewsus.org
*.ibmr.org
*.iglesiaecumenicasanfranciscodeasis.org
*.jejune.co
*.kangaros.de
*.lezzetdoner.com
*.maheaithconnector.org
*.mediafiredownloads.net
*.organizingrocks.org
*.padrinhos.com
*.prevpn.com
*.rockymountianpower.net
*.sepctrumbusiness.net
*.serums.uk
*.servicioscontables.com
*.skmodern.org
*.smm-panelusa.com
*.snowshoes.com.au
*.spectrrum.net
*.stbartholomewschool.org
*.steyningmotorcompany.co.uk
*.thinklife.co
*.trustworthycasinoreviews.com
*.vactionofalifetime.info
*.visitesvirtuelles2020.org
*.vyprodejpovleceni.eu
*.wheekoffortune.com
*.wildschweinbilder.de
*.xn--sterrich-m4a.de
*.yogau.org
*.zuber.com.au
18livegirls.com
adulttv.uk
afghansportsfederation.org
ajanta.co
aosmith.uk
aricomagroup.co
autoptrader.co.uk
bocan.co
cafeluxhaiti.com
compu.es
csgohouse.org
designjournal.org
domesticabuse.de
drudi.com
europinocchio.it
exvideos.com
fps-1.com
fps-i.com
gaforit.eu
goodnewsus.org
ibmr.org
iglesiaecumenicasanfranciscodeasis.org
jejune.co
kangaros.de
lezzetdoner.com
maheaithconnector.org
mediafiredownloads.net
organizingrocks.org
padrinhos.com
prevpn.com
rockymountianpower.net
sepctrumbusiness.net
serums.uk
servicioscontables.com
skmodern.org
smm-panelusa.com
snowshoes.com.au
spectrrum.net
stbartholomewschool.org
steyningmotorcompany.co.uk
thinklife.co
trustworthycasinoreviews.com
vactionofalifetime.info
visitesvirtuelles2020.org
vyprodejpovleceni.eu
wheekoffortune.com
wildschweinbilder.de
xn--sterrich-m4a.de
yogau.org
zuber.com.au

Other certificates including the domain name thinklife.co

(limited to 100 certificates)
thinklife.co
thinklife-co.helpfulhintsforliving.com
thinklife.co
thinklife.co
thinklife.co
thinklife.co
thinklife.co
thinklife.co
thinklife.co
thinklife.co

Certificate

The complete raw certificate details for thinklife.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322726555593811260218723549802310603611012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 14:43:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 14:43:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinklife.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 698978813851179438041906008766155107379457815258765847939014332036528821804913839987959554492052998326293691382330184839653443778945588440696514142158383344281554125346743592087387971573840429428740909787853774094343941888325984517498557393897344098394266253988941487814265138822854969891530994582573398080273573490824308034105690984298383174074000673479610788562998898737638399176158088910639620647768558350092070119981594211912915310786216792269826347762736253820252151920689719848913667121208654602367504542045375942469454129583581452772459231516413338872645994233088355631402885262078760122224932821042064267653399705806364024428798441142919711173225704197729374415049561718318760450501498220733461284410262573088985395870898082422301208097145706903077156519852138301991881939848100592084677661790409001490290872999977585485298278385923664402519209822725157486547538473919316550536782382752620778282001585567386677265448442288349651904008775649530891165332717989159281294178447623051350135643091045777350251967613008846711684524026170762243604781081409338781524383790534334476722676124833695501509318725527437409316629913380636589883792979999895702713273451312463690370651607328679349726321468233643906365494739133047647226880517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad8a92e0ddfebff42a3cc96d2aefc009f932faef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1884 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18livegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adulttv.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afghansportsfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajanta.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aosmith.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aricomagroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoptrader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bocan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafeluxhaiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csgohouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designjournal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domesticabuse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.europinocchio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fps-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fps-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaforit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodnewsus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibmr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iglesiaecumenicasanfranciscodeasis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jejune.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kangaros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lezzetdoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maheaithconnector.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediafiredownloads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organizingrocks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.padrinhos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prevpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockymountianpower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sepctrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serums.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicioscontables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skmodern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smm-panelusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stbartholomewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steyningmotorcompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinklife.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trustworthycasinoreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vactionofalifetime.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitesvirtuelles2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vyprodejpovleceni.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheekoffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wildschweinbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sterrich-m4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yogau.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zuber.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18livegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulttv.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afghansportsfederation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajanta.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aosmith.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aricomagroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoptrader.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeluxhaiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compu.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgohouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designjournal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticabuse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europinocchio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fps-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fps-i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaforit.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodnewsus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibmr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iglesiaecumenicasanfranciscodeasis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jejune.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kangaros.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lezzetdoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maheaithconnector.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediafiredownloads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organizingrocks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'padrinhos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockymountianpower.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepctrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serums.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicioscontables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skmodern.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smm-panelusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowshoes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrrum.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stbartholomewschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steyningmotorcompany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinklife.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustworthycasinoreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vactionofalifetime.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitesvirtuelles2020.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vyprodejpovleceni.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheekoffortune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildschweinbilder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sterrich-m4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogau.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zuber.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d9dfcde12000004030046304402201ce8ade1dc24e3fb47daccb2ad45dce6a97fbd54702c097118e4b821ee2fa082022077b8afcde64861baa7d708c3e1dbdaab8df5fc37630998c0a5c0d516d588143a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d9dfcde030000040300473045022100a45cf18546544810541bb6816659340095f929f233aa1b18ff69e77dc626e8a6022063ab3d90c20bdc4722d40c1f0cc2220adf98d3391baecb40e7e4a1a0193980e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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