138111.co

Issued by R3

About this certificate

This digital certificate with serial number 04:26:c7:cc:ef:1f:a5:a3:12:d5:a9:b2:a2:a7:34:54:15:df was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=138111.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:c7:cc:ef:1f:a5:a3:12:d5:a9:b2:a2:a7:34:54:15:df
Serial Number (int): 361645454119760218042812437022603809658335
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:a7:d5:4c:7b:97:fb:20:ce:ea:7b:61:23:61:1b:4b:dd:38:ec:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:16:eb:08:91:4f:77:08:01:dc:80:85:b9:d4:c7:bd:7c:b0:48:ea
Fingerprint (sha256): 95:10:06:92:49:3f:7f:43:39:55:31:70:ba:f9:b5:5b:3c:bd:1a:32:07:20:f0:37:a1:04:99:4d:ec:86:b5:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 138111.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 138111.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.138111.co
*.animedao.tv
*.barbeque.net.au
*.baseballnewzealand.org
*.berwickwargamesassociation.org
*.boatbuilding.com.au
*.capitoloone.com
*.coadvantage.co
*.cuidem.ai
*.editordetexto.com
*.feeed.co
*.findyourteachers.org
*.freebiblecomentary.org
*.healqual.co
*.iiask.ai
*.instafa.me
*.jbhunt.co
*.kinsbournelab.org
*.leakio.me
*.level-23.cc
*.lkt.com.au
*.loginspectrum.com
*.londonrreal.tv
*.lonetravel.com
*.lookingmovies.com
*.maizonsystem.com
*.melbournemyotherapy.com.au
*.mpvids.org
*.myhjdesign.com
*.mymohealthportal.co
*.oethofeet.com
*.osmo.com.au
*.philorconf.org
*.romtekcel.com
*.saverom.net
*.simplifit.me
*.skintag.com.au
*.southtrans.com
*.supportactivision.com
*.tayes.ru
*.thecloudshop.com.au
*.totowa.org
*.tri-county.cc
*.ujanaafrika.org
*.vietnamfamilysearch.org
*.webmls.com
*.world-genetics.co
*.wwwustvgo.tv
*.yarig.net
*.zkeceniestoploss.co
138111.co
animedao.tv
barbeque.net.au
baseballnewzealand.org
berwickwargamesassociation.org
boatbuilding.com.au
capitoloone.com
coadvantage.co
cuidem.ai
editordetexto.com
feeed.co
findyourteachers.org
freebiblecomentary.org
healqual.co
iiask.ai
instafa.me
jbhunt.co
kinsbournelab.org
leakio.me
level-23.cc
lkt.com.au
loginspectrum.com
londonrreal.tv
lonetravel.com
lookingmovies.com
maizonsystem.com
melbournemyotherapy.com.au
mpvids.org
myhjdesign.com
mymohealthportal.co
oethofeet.com
osmo.com.au
philorconf.org
romtekcel.com
saverom.net
simplifit.me
skintag.com.au
southtrans.com
supportactivision.com
tayes.ru
thecloudshop.com.au
totowa.org
tri-county.cc
ujanaafrika.org
vietnamfamilysearch.org
webmls.com
world-genetics.co
wwwustvgo.tv
yarig.net
zkeceniestoploss.co

Other certificates including the domain name 138111.co

(limited to 100 certificates)
sni.cloudflaressl.com
sni.cloudflaressl.com
feedtoss.com
sni.cloudflaressl.com
138111.co
138111.co
138111.co
feedtoss.com
sni.cloudflaressl.com
*.138111.co
138111.co

Certificate

The complete raw certificate details for 138111.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361645454119760218042812437022603809658335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 11:40:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 11:40:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '138111.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731624830094333071876529012179100963620503127445742856848051081867609292999268216986225181626984078372427328397936021917307609933089334331854331585468673733240429359963044604979231547371445985491240797352025318030275179609251318913351594783898404678613254656053814689994823232107831667887050837871858712403071349655378050938890861986772040270345651488349548045088207903143015373315614646386830625469839285414189981880658970078169288933378927688260109034548352203840864813983520405658220606033192253467696133429762770499329051870689375921457844105048028840256369884393895735029624254709873616103734755322032857632055729860235402986197963452753240180331219598804806175643365443279265699688947570964537610001640411482510707252439511154905907179610709618087276467461330420176828505776925652406477334942150966101584889762769847408954340227093480032409975988392038362709175536770935045439075815630467808060559892484026317419313781428483576204407806785031098907030677731796683406921718259183553431440363917114289000566516428449891228307817751646906706296463864346700410562506401194464315117297700475077654407213946548285086648946314273786542152147748325267828136006041151425319266355474962629049686132159976665236457790802099094945739091829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfa7d54c7b97fb20ceea7b6123611b4bdd38ecca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.138111.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animedao.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbeque.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berwickwargamesassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatbuilding.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitoloone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coadvantage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuidem.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.editordetexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feeed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findyourteachers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freebiblecomentary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healqual.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iiask.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instafa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbhunt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinsbournelab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leakio.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.level-23.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loginspectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londonrreal.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lookingmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maizonsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melbournemyotherapy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpvids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhjdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymohealthportal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oethofeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osmo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philorconf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romtekcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saverom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplifit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skintag.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southtrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supportactivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tayes.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecloudshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tri-county.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ujanaafrika.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietnamfamilysearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webmls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.world-genetics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwustvgo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yarig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zkeceniestoploss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '138111.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animedao.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbeque.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwickwargamesassociation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatbuilding.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitoloone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coadvantage.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuidem.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editordetexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeed.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findyourteachers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freebiblecomentary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healqual.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iiask.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instafa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbhunt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinsbournelab.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leakio.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'level-23.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginspectrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londonrreal.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookingmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maizonsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbournemyotherapy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpvids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhjdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymohealthportal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oethofeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osmo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philorconf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romtekcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saverom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplifit.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skintag.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southtrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportactivision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tayes.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecloudshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tri-county.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujanaafrika.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamfamilysearch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world-genetics.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwustvgo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zkeceniestoploss.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9e01de820000040300473045022077d9f22c924602eedb2d961edee3f13743b2c1cbbd69d9d4ab4da4f0d29e6b45022100cdd352526e898b8fcfa66a980aaf17ce67e23d971f5fb786743ad043f4498be8007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9e01df350000040300463044022042c6505ae20e50e8d7bf9f8d6184e2e303ae81f16e89fc10686a5e3730426f5e022040e849432e134fb59653439e666198ac62c9a068cbd9cc7635a51d6b558630e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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