downac3.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:5f:58:89:9f:e2:b7:d6:fa:76:74:44:dc:dc:38:04:51 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=downac3.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:5f:58:89:9f:e2:b7:d6:fa:76:74:44:dc:dc:38:04:51
Serial Number (int): 356062092172382310256345151824291455042641
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:e4:fd:e5:14:46:f9:2f:27:a2:5d:c2:dd:c6:bc:50:c1:02:4e:b3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:d5:fc:e0:bb:21:18:77:5a:dc:2f:a1:c4:63:ef:48:a7:47:e1:28
Fingerprint (sha256): 96:1f:68:bf:6e:b3:c4:97:f7:65:cd:99:e5:82:28:ba:e1:38:e5:a7:b7:48:1e:ba:0f:34:35:b1:c0:ee:2e:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate downac3.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for downac3.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aptis.us
*.arnoldcameraclub.com
*.bankruptcyloan.com.au
*.bensonlighting.com
*.blogingkingdom.com
*.cabluri.com
*.clipdj.com
*.commonpoll.com
*.coverse.de
*.downac3.com
*.finterest.de
*.greencar.au
*.grep.au
*.harrisbenefitsnow.com
*.herrleutner.at
*.investocentre.co.uk
*.kbhganes.com
*.kbjsex.com
*.khanacadimy.org
*.marcha.es
*.moviezen.me
*.nem-id.nu
*.ngiler.com
*.noairtires.com
*.nviromentdesign.com
*.outletdeviviendas.es
*.press.sg
*.psave.com
*.raytorres.com
*.ruigam.com
*.scriptureart.com
*.seeiptv.me
*.sepctrumbusiness.net
*.sharekhoahoc.net
*.sourcegig.com
*.sportwitnes.co.uk
*.stepwalkintub.website
*.tcnets.cn
*.tespapers.co.za
*.tilny.co.uk
*.trockenbeton.de
*.veg.net.au
*.viola.com.au
*.volts.com.au
*.vtlgbtcaucus.org
*.whiteflowerfarmhouse.com
*.wonderfulpiccollection.me
*.writerslab.com
*.xn--berzge-2yae.de
*.youthspeaks.com
aptis.us
arnoldcameraclub.com
bankruptcyloan.com.au
bensonlighting.com
blogingkingdom.com
cabluri.com
clipdj.com
commonpoll.com
coverse.de
downac3.com
finterest.de
greencar.au
grep.au
harrisbenefitsnow.com
herrleutner.at
investocentre.co.uk
kbhganes.com
kbjsex.com
khanacadimy.org
marcha.es
moviezen.me
nem-id.nu
ngiler.com
noairtires.com
nviromentdesign.com
outletdeviviendas.es
press.sg
psave.com
raytorres.com
ruigam.com
scriptureart.com
seeiptv.me
sepctrumbusiness.net
sharekhoahoc.net
sourcegig.com
sportwitnes.co.uk
stepwalkintub.website
tcnets.cn
tespapers.co.za
tilny.co.uk
trockenbeton.de
veg.net.au
viola.com.au
volts.com.au
vtlgbtcaucus.org
whiteflowerfarmhouse.com
wonderfulpiccollection.me
writerslab.com
xn--berzge-2yae.de
youthspeaks.com

Other certificates including the domain name downac3.com

(limited to 100 certificates)
downac3.com
downac3.com
downac3.com
downac3.com
downac3.com
downac3.com
downac3.com
downac3.com
downac3.com

Certificate

The complete raw certificate details for downac3.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356062092172382310256345151824291455042641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-17 15:46:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 15:46:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'downac3.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755765368600205522554747036729302686082971789028456584283042698748606711553856338961237356550588039977300144852755389431566562409029844330257635955760514513161777593347757656531311097558523772298105520903209421691402784684060317834025706244886971180402412693681094995405801335586646430237067968256825438851810242976271628295779431122661554516458441284219371939075779766052268360846914260849421976890971941714960719721393319141154328612871323948762330727655237807937215362715359583600986831460427132853327927477919618347210954124927580947299862965005768946334523473647241534304719944212542809622388354076493218414455103075291418055166382255818332607630513901606120579171044478065143328304959350046509893229590017153522767180859754040411724325525271664882921430012842269776958613387540224005941061296094844920028057178863636984727068649147945117302218413737110893422143363167361967347881893286697809445227130145345678717464174546483659338526576347770988181687561736029639894139056901747000680915684912972701856557418492990289394116030331719208755681194014225799212832314624140124986436250142442744082898025904744960747473095184113761266575898937173607416351065372032046085331484223488620215637876198702855760759685358501243452908715901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5e4fde51446f92f27a25dc2ddc6bc50c1024eb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1710 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aptis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arnoldcameraclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankruptcyloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bensonlighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogingkingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cabluri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clipdj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commonpoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downac3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greencar.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grep.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrisbenefitsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herrleutner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investocentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbhganes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbjsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khanacadimy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcha.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviezen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nem-id.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngiler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noairtires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nviromentdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outletdeviviendas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.press.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raytorres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruigam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scriptureart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seeiptv.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sepctrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharekhoahoc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sourcegig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportwitnes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stepwalkintub.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcnets.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tespapers.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tilny.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trockenbeton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veg.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viola.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtlgbtcaucus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whiteflowerfarmhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wonderfulpiccollection.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.writerslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--berzge-2yae.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youthspeaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aptis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnoldcameraclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankruptcyloan.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensonlighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogingkingdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabluri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clipdj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commonpoll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coverse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downac3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finterest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greencar.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grep.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisbenefitsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herrleutner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investocentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhganes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbjsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanacadimy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcha.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviezen.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nem-id.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngiler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noairtires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nviromentdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outletdeviviendas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raytorres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruigam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scriptureart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeiptv.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepctrumbusiness.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharekhoahoc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcegig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwitnes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepwalkintub.website'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcnets.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tespapers.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tilny.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trockenbeton.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veg.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viola.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtlgbtcaucus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiteflowerfarmhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wonderfulpiccollection.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writerslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--berzge-2yae.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youthspeaks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188ca4089a70000040300483046022100d253a042b3098d60c0b855563f9d4b2109b4a437aa2716d25d5d75927e9245770221008af5ed118038f11ffcfce83e5f1446f206229ec1e990c31e4d7fc177547afca1007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000188ca4089dc000004030046304402204e00b5eab5607f131a6ca74cb4f2e158e84c8fc21fab815268fac004b4e6562902202aacf53343b3e33048e3187391b04b1195ac9dbb15b42a2462303fdc7380e524
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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