roost.us

Issued by R3

About this certificate

This digital certificate with serial number 03:fc:27:13:44:95:19:27:0f:6e:fa:92:83:d0:e6:a6:3a:1b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roost.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:27:13:44:95:19:27:0f:6e:fa:92:83:d0:e6:a6:3a:1b
Serial Number (int): 347139954195849790222584458592233890134555
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:56:47:82:bf:01:8a:a6:d1:42:62:4f:21:3d:36:8f:74:7b:38:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:3d:e7:25:fe:40:99:31:a8:63:99:f9:a2:77:eb:59:88:9a:6b:a2
Fingerprint (sha256): 93:4f:fb:75:58:db:c4:fe:90:91:6b:70:63:4b:a2:29:fe:4a:ba:e6:d0:65:7f:6e:91:11:79:b5:02:d9:0e:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate roost.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roost.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.buildingsite.com.au
*.businessservice.info
*.cayleycakesaz.com
*.chanh.club
*.daddyissuescarrd.co
*.displaydeals.com.au
*.drurable.co
*.excel4marketing.com
*.firstpagerank.com.au
*.genxo.co
*.gsysconsulting.com
*.hdfcservices.com
*.headline-inc.com
*.hvacshoppers.co
*.infobd.com
*.ipz.com.au
*.jerseykings.co
*.laroofingmaterials.co
*.linkefin.co
*.manskin.com.au
*.marcrchristensen.co
*.medasnwering.com
*.minnesotabass.com
*.motaz.co
*.nanostore.info
*.ourstand.co
*.p2p4all.net
*.peakology.com.au
*.photocushions.com.au
*.pias-med.pl
*.r-e-w.co
*.retrobet.tv
*.roost.us
*.ruralinternet.com.au
*.ryt.com.au
*.spiritanimal.com.au
*.stashgrey.com
*.strengths.us
*.stringskills.co
*.sympathy.us
*.telbright.com
*.thecomedian.co
*.thegoodsmart.co
*.totalsportik.com
*.tradesing.net
*.unofficial.us
*.vafestivalofindia.co
*.vfm.us
*.wmpro.com
*.wwwinstarem.com
buildingsite.com.au
businessservice.info
cayleycakesaz.com
chanh.club
daddyissuescarrd.co
displaydeals.com.au
drurable.co
excel4marketing.com
firstpagerank.com.au
genxo.co
gsysconsulting.com
hdfcservices.com
headline-inc.com
hvacshoppers.co
infobd.com
ipz.com.au
jerseykings.co
laroofingmaterials.co
linkefin.co
manskin.com.au
marcrchristensen.co
medasnwering.com
minnesotabass.com
motaz.co
nanostore.info
ourstand.co
p2p4all.net
peakology.com.au
photocushions.com.au
pias-med.pl
r-e-w.co
retrobet.tv
roost.us
ruralinternet.com.au
ryt.com.au
spiritanimal.com.au
stashgrey.com
strengths.us
stringskills.co
sympathy.us
telbright.com
thecomedian.co
thegoodsmart.co
totalsportik.com
tradesing.net
unofficial.us
vafestivalofindia.co
vfm.us
wmpro.com
wwwinstarem.com

Other certificates including the domain name roost.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for roost.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347139954195849790222584458592233890134555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-13 00:41:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:41:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roost.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802469743986007555190352700284796043784712140427889809174143648693711743164149410269959138991973168698994725173585871991002626501582111344995515142387813838599841429238915366471450972022520725451635278791812761595080534824240655329231476014401448534859492082744721587555867838866495434534918113372203713246505262502958870378318178475652152946368345210686254545477111539131486676773987448228332133146002465776228745778560840897282914465550841304594128962575922627336191775117985947366005344542561814889055629723575132894068059878475779398206932431500446709034432923207282793340651022134527669547915371904842986879677174195293434240651265011860684203787553896957111407429054441932628259648220990205700493180988497188601711443381437930218739430726382575666148413726705615045755726926609202665052975028010116961015285167293988646059325338570185928106632889259776296340364504432540454125906645717717477530560100371786596888461967994055440170843994190324692524727976748164885576824987290717487300188699417100769115836156757264733679657109087097125014922337912449424492534374367508441339610921883924775759121770946348368695338385890242229964142948614990280565642384077861674495545021608906415652147975692828315285711588214018224742611608619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14564782bf018aa6d142624f213d368f747b386d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildingsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessservice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cayleycakesaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chanh.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daddyissuescarrd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.displaydeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drurable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excel4marketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstpagerank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genxo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsysconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdfcservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.headline-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacshoppers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infobd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerseykings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laroofingmaterials.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkefin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcrchristensen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medasnwering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minnesotabass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motaz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanostore.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourstand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p2p4all.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peakology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photocushions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pias-med.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r-e-w.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retrobet.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roost.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruralinternet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritanimal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stashgrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strengths.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stringskills.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sympathy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecomedian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegoodsmart.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalsportik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradesing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unofficial.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vafestivalofindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwinstarem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessservice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cayleycakesaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chanh.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daddyissuescarrd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'displaydeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drurable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excel4marketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstpagerank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genxo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsysconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdfcservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headline-inc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacshoppers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infobd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseykings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laroofingmaterials.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkefin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcrchristensen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medasnwering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotabass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motaz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanostore.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourstand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p2p4all.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocushions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pias-med.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r-e-w.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrobet.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roost.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruralinternet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritanimal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stashgrey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strengths.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stringskills.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sympathy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecomedian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoodsmart.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalsportik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradesing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unofficial.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vafestivalofindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwinstarem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a8c33bdc000000403004830460221008b397483c865f1f033d511d2c65bdf7374d1a6495862cabc29f6b5641a3f0feb022100d9ed7aa3fe0bf87376e335d2e7f5afc1a0105d43611f82f3c6552f984f7f91db007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a8c33bdc10000040300483046022100ec74cefd2e6f46f7a6ad5abd6d9661120967712f0af250dda1bd2eae3b67aca1022100a4bb274aabf5cc7e78025b75f297bcf532144d081f9fff9433ed4c57a017b659
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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