brainlu.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:cc:9c:5d:1c:2a:a7:07:4c:69:84:3c:23:a6:29:0e:24 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=brainlu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:cc:9c:5d:1c:2a:a7:07:4c:69:84:3c:23:a6:29:0e:24
Serial Number (int): 316734575634418507277616056522825362116132
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:1d:15:04:d3:18:0b:15:18:f3:68:8a:0f:69:06:ea:e4:c2:d6:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:55:db:a0:ec:a6:f2:36:b7:2c:06:dd:2f:4e:fb:e8:99:b3:52:da
Fingerprint (sha256): 95:27:7e:67:21:55:73:97:47:27:78:3a:b4:e4:d5:d8:a1:d1:92:11:c4:3a:02:c9:a8:d7:24:c3:2e:2d:0a:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brainlu.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brainlu.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abaqueinside.com
*.adoptd.com
*.agenciachapadadosveadeiros.com
*.aktivniustarosti.com
*.alltradehomeservices.com
*.almasd.us
*.belairbarberandbeauty.com
*.brainlu.com
*.clowerty.cc
*.dabenniu.cc
*.elegancehotel.in
*.ellendegeneres.tv
*.faithintowerhamlets.com
*.findingfreechecking.com
*.fineitemizationtogather-today.info
*.firstclasscams.com
*.forskill.co.uk
*.freecashapp.live
*.gamedownload.club
*.grasimbhiwanitextiles.com
*.h2oproofreader.com
*.ifliuncgype.com
*.isprisma2ready.com
*.jhphotographs.co.uk
*.keithcarson.org
*.klassenimages.com
*.lunchboxeswithlove.com
*.manjhimanch.com
*.mizho.net
*.motionlake.com
*.mpsdn.com
*.nmfire.info
*.ominagentsolutions.com
*.pumamoore.com
*.reading-for-all.com
*.samarthkrupafarm.com
*.seekingbargain.com
*.smmbig.net
*.stocksundervalue.com
*.thaiwitchcraft.com
*.titsarewhattheyare.company
*.tucsonresidentialcleaning.com
*.turtlebeachess.com
*.tusabogados.info
*.watfinger.com
*.worldwidestereo.co
*.wwbrecruitment.com
*.wyshen.xyz
*.xpi386.com
*.xpoder.com
abaqueinside.com
adoptd.com
agenciachapadadosveadeiros.com
aktivniustarosti.com
alltradehomeservices.com
almasd.us
belairbarberandbeauty.com
brainlu.com
clowerty.cc
dabenniu.cc
elegancehotel.in
ellendegeneres.tv
faithintowerhamlets.com
findingfreechecking.com
fineitemizationtogather-today.info
firstclasscams.com
forskill.co.uk
freecashapp.live
gamedownload.club
grasimbhiwanitextiles.com
h2oproofreader.com
ifliuncgype.com
isprisma2ready.com
jhphotographs.co.uk
keithcarson.org
klassenimages.com
lunchboxeswithlove.com
manjhimanch.com
mizho.net
motionlake.com
mpsdn.com
nmfire.info
ominagentsolutions.com
pumamoore.com
reading-for-all.com
samarthkrupafarm.com
seekingbargain.com
smmbig.net
stocksundervalue.com
thaiwitchcraft.com
titsarewhattheyare.company
tucsonresidentialcleaning.com
turtlebeachess.com
tusabogados.info
watfinger.com
worldwidestereo.co
wwbrecruitment.com
wyshen.xyz
xpi386.com
xpoder.com

Other certificates including the domain name brainlu.com

(limited to 100 certificates)
terebon.info
brainlu.com
oppoand.com
stacxs.com
brainlu.com
freerangevets.com
scrappy-yard.net
ootpwiki.info
brainlu.com
*.agenciachapadadosveadeiros.com

Certificate

The complete raw certificate details for brainlu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316734575634418507277616056522825362116132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 19:57:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 19:57:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brainlu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833735183050281195274314668680044217484179100100598877053236112250993535737859507215857765901858771272667804971460275865632497375905774617398875295658322080338907483585379976824026577868977526961533669101981457943915025255344878632911064032452397152693205997554707174746617066726811558325238321339904434255431292912311484384216148276806740041873747428881118536334738907466633007907843872083140196960189147029344401111082411267436833749689716909102152176466696613061356934965618036890861179217014639783360744071332158001318306139220264642064382119168112859211311376570531460417288171986457981699581974253117651683510988180893986205128756537958512081020086675181945691181905796097026317058692639958353990077776184062852833268544776074402380715968926798875377940664902176851828695280255021866302834294875588806443216218849792431432204806278211444214793376058927799387553466828708446764174985217263007293318158745596244108667680877506746086853815114274748109134469518050837933054469547988170910761101532417360425056280758324568320788672589602290045288812222397792290957798973943011240505732695598615749572054145119042872828743199441754219967601887946551024495891738703665289701559369397811686027452769569352506252553096862653063008383379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							031d1504d3180b1518f3688a0f6906eae4c2d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2024 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abaqueinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adoptd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agenciachapadadosveadeiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aktivniustarosti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alltradehomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almasd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belairbarberandbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brainlu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clowerty.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dabenniu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elegancehotel.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ellendegeneres.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faithintowerhamlets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findingfreechecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fineitemizationtogather-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstclasscams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forskill.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freecashapp.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamedownload.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grasimbhiwanitextiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h2oproofreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifliuncgype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isprisma2ready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jhphotographs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keithcarson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klassenimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunchboxeswithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manjhimanch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mizho.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motionlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpsdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmfire.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ominagentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pumamoore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reading-for-all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samarthkrupafarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seekingbargain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smmbig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocksundervalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thaiwitchcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titsarewhattheyare.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tucsonresidentialcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turtlebeachess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tusabogados.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldwidestereo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwbrecruitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyshen.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xpi386.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xpoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abaqueinside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adoptd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agenciachapadadosveadeiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aktivniustarosti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltradehomeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almasd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belairbarberandbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainlu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clowerty.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dabenniu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elegancehotel.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellendegeneres.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithintowerhamlets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findingfreechecking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fineitemizationtogather-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstclasscams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forskill.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecashapp.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamedownload.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grasimbhiwanitextiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h2oproofreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifliuncgype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isprisma2ready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhphotographs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keithcarson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klassenimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunchboxeswithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manjhimanch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mizho.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motionlake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpsdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmfire.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ominagentsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumamoore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reading-for-all.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samarthkrupafarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seekingbargain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smmbig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocksundervalue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaiwitchcraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titsarewhattheyare.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonresidentialcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turtlebeachess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusabogados.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwidestereo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwbrecruitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyshen.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpi386.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpoder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d28a9b989000004030046304402201dbefc8037affb8d0333e865694b6ae59a96309cbdf76628ccdfb639d7598c7f022037e0cab422a7af2bb78e4b15a4fa99dcda995966d5acf44f2abef09cce05b1680075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d28a9b98d000004030046304402205a5da8edce5cb32fd59b4b2b3519e194314bf2a0ab006bb773831486e2bdea1b02207ca6b07f487504d80c91fd462c72ef6c52a8e21f780806bc9cf6e09b9da1b091
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0062a0e40c4b09bd1693b6928691de3ea810103fb2b9518083b938fb9272e93b2704f86dcbb23a13ef1c1a0faf6ec2ad50654e9d98925f97b24b3497dd6e974efca5e79ff79dfc6c688ab21018c3c7f715796e1834ab2bfecf5eeb35581c6fabe79b01345ecbdf5352a17fc1e36121d280bee2b5a63eae6176cf73ac3612323f4c1f44c28f858a91c32eb69b9465a9d05b0eb055d43cd6e35d86f3d91edd831dac45ff697ac4ba290300ecf46d5505ed0b9b93209f77e20e9fdb18eb594a45e16f4c150aac427024e292be01a529e665158ec873281afa99ed042788ba9742fbe40ab59b77826dae153ae0e19030c9a9dc098c410167f9eeaf9459b92fdded3c6a