arduiono.co

Issued by R3

About this certificate

This digital certificate with serial number 03:39:ba:71:31:2a:23:6f:0f:2c:ec:47:6c:7f:83:1e:6c:55 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arduiono.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:ba:71:31:2a:23:6f:0f:2c:ec:47:6c:7f:83:1e:6c:55
Serial Number (int): 280980776843711860787471040122593151446101
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:b3:45:e8:4c:a6:3a:be:66:6e:7e:ac:92:0b:88:da:6c:b4:f5:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 01:a6:fd:72:13:67:bd:4d:d4:fa:5e:e7:b6:55:71:b7:19:16:eb:ed
Fingerprint (sha256): 96:4c:a4:b7:8c:54:70:71:cf:64:ac:bd:13:ad:38:f5:fe:a2:bb:bf:0e:f1:3f:13:8f:cb:f6:f3:9c:d9:b2:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arduiono.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arduiono.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abcdlaw.com
*.ambula.com.au
*.arduiono.co
*.assranceamerica.com
*.atat.tv
*.atlantaexecutivehomes.com
*.augmentedlistening.com
*.azzuri.com.au
*.bettensured.com
*.cbseresults.in
*.centuyrlink.com
*.chpicehotels.com
*.cncheathplan.com
*.complexelephare.com
*.contactlenstracking.com
*.currencesdirect.com
*.dyson.cc
*.englishhaula.com
*.graciouslivinghc.com
*.halifaxmutalins.com
*.hostos.cc
*.invacareonline.com.au
*.jbcaudillknives.com
*.jmemi.com
*.litastudios.com.au
*.ltc4you.com
*.nba2k23.com
*.nicosiaturkishrestaurant.com.au
*.nuticx.com
*.qadohabank.com
*.rewindandunwind.net
*.roichina.com
*.sarahalmendarizcounseling.com
*.securitymutal.com
*.shineijyutaku.com
*.sietelunas.com
*.socialmedialister.com
*.soylavikkiugc.com
*.sportsmindjunior.com.au
*.starlocal.com.au
*.statestreetinsurance.com
*.stowebrussels.com
*.straighterpath.com
*.tasking.au
*.topmodel-porusski.ru
*.vallejotransit.com
*.wandaborges.com
*.wwwsecurityfirstflorida.com
*.wwwsecuritynationallife.com
*.youtzz.com
abcdlaw.com
ambula.com.au
arduiono.co
assranceamerica.com
atat.tv
atlantaexecutivehomes.com
augmentedlistening.com
azzuri.com.au
bettensured.com
cbseresults.in
centuyrlink.com
chpicehotels.com
cncheathplan.com
complexelephare.com
contactlenstracking.com
currencesdirect.com
dyson.cc
englishhaula.com
graciouslivinghc.com
halifaxmutalins.com
hostos.cc
invacareonline.com.au
jbcaudillknives.com
jmemi.com
litastudios.com.au
ltc4you.com
nba2k23.com
nicosiaturkishrestaurant.com.au
nuticx.com
qadohabank.com
rewindandunwind.net
roichina.com
sarahalmendarizcounseling.com
securitymutal.com
shineijyutaku.com
sietelunas.com
socialmedialister.com
soylavikkiugc.com
sportsmindjunior.com.au
starlocal.com.au
statestreetinsurance.com
stowebrussels.com
straighterpath.com
tasking.au
topmodel-porusski.ru
vallejotransit.com
wandaborges.com
wwwsecurityfirstflorida.com
wwwsecuritynationallife.com
youtzz.com

Other certificates including the domain name arduiono.co

(limited to 100 certificates)
scotbroker.com
cooolor.co
arduiono.co
cooolor.co
cooolor.co

Certificate

The complete raw certificate details for arduiono.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApv+jKR8Sp3+grdlq5fzd
AAZBpCs3AacXZc6quNioBJqK3QyrC3CYFLvJiIwF7eYkmK8IXZDJ01765CqlPpEZ
aAtH/ko6yJxF/Xl4LrL2+dnrgL06hmWHFfifkbWSkM1WXnucEx9YVfASEeCE2fcU
yZFMpa16pCNLDiusvRUTVZTErHqMsov3Dx1d6rGT9K/YjQVqkCL67llAcRRkC8KJ
xfVqhJqCNNGsB/PP3XkaBBYcHCBMlQbxHOLtJMMEGsO74mzQ7UzPliteOp6CUDuE
UkaqWo5AyPv/M8kBxLuYSvm5UcrNFuABNFS347m7VPhmeNFixgzbTWC6uybnjA9d
GHqNlgmE3dOhdW+rqRNPshQCy453Ha+CWYXP7FJFeCiG+P+chjpjqJTXb030P5SB
p/Fag/3k5mev0XaieiGsKix4psvTwydSB6hpmRdXUc2fmZlpoxdpqa334FnAI44N
g0+oSvPv3CM+wFthM0fcq6t01C3z+GvVD/uhNbeODjXWe9NPaOQe1oA5m5DeZ0DG
Ht9X+LFM7MjnA4PBMjnRRAh947i7GtrJnFCukYCrle7BgrhYpwEuQ1uNo9HDybxM
ksLXj47O7gDYdiI3OmfiSBwP3C+8D9OkK61ckroRZIDwitmml8LPNxdkfC1oIqQs
WI2CV7O8vgp96EsmHAqnTK0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280980776843711860787471040122593151446101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 10:00:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 10:00:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arduiono.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681294780068841014470934238859465873177380992759815073069748901314991647830674571094426918295354957225408644435607752048808378814282164902025680827137172038373350936665552177215827877749669058343994786082367552958317132290791714259522166922601665490460726691436510934155769334280370870524285336785322993375887421198889613799530435983211301804214996854239634970612132779504599517135326189544539868236224020434691742481272646568833616781045575508301364087777766972419764252403171638372756466278467838559514864279580652272851087300119279260641466644405624221531068977288666142553647275729137864373517275994493223455635482422568663171267765468552830178638883478655715516289836882508763638070997487413560418885704080403415077250443733213975305034951826113046103560408514983430862416966743090071047463173351415726408722017654097479786269033759425986596290872217723201874464674572627912537160259761961982539118051875674068906699074126959773399132024079812805770446103826302898476717515125323863996415870341082859622013545237479006548755538913033235762436461400021086323097415602337751435935863558082871379093788163741684408880849722454572449368639430122421372342293565246236913148691003905995727983049399678783143184456300438386179180022957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7b345e84ca63abe666e7eac920b88da6cb4f59b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1994 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcdlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambula.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arduiono.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assranceamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantaexecutivehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augmentedlistening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azzuri.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettensured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbseresults.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centuyrlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chpicehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cncheathplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.complexelephare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contactlenstracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currencesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.englishhaula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graciouslivinghc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halifaxmutalins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostos.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invacareonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbcaudillknives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.litastudios.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltc4you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba2k23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicosiaturkishrestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuticx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qadohabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewindandunwind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roichina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarahalmendarizcounseling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitymutal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shineijyutaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sietelunas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialmedialister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soylavikkiugc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsmindjunior.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statestreetinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stowebrussels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.straighterpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tasking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topmodel-porusski.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vallejotransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wandaborges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsecurityfirstflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwsecuritynationallife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcdlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambula.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arduiono.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assranceamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atat.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantaexecutivehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augmentedlistening.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azzuri.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettensured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbseresults.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centuyrlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chpicehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cncheathplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complexelephare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contactlenstracking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currencesdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyson.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'englishhaula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graciouslivinghc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifaxmutalins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostos.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invacareonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbcaudillknives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litastudios.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltc4you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba2k23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicosiaturkishrestaurant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuticx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qadohabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewindandunwind.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roichina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarahalmendarizcounseling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitymutal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shineijyutaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sietelunas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialmedialister.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soylavikkiugc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmindjunior.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starlocal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statestreetinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stowebrussels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straighterpath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasking.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmodel-porusski.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallejotransit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandaborges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecurityfirstflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecuritynationallife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtzz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3c9f0382000004030047304502204c5914934b2eaa23974e5a3ad044ee787fbb88108ce50f0bf2fc157fdbde2d390221009f09a3748dfde75280676b0bb03f53d5817934632d1fcafbb7aaf3c81e6e4e7000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e3c9f03c30000040300473045022016f610fb039cf86407ac0840c21d62686e151ebeeddaa1911741ea0914be0b8f022100d10c8a79d3d8c5193f4e55c5beaab389abb0fba4caa2a472f47f81113ec7b35d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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