canopyofhope.com

Issued by R3

About this certificate

This digital certificate with serial number 04:13:57:02:c2:99:5c:87:da:ba:44:83:5e:21:00:5f:3f:34 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canopyofhope.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:13:57:02:c2:99:5c:87:da:ba:44:83:5e:21:00:5f:3f:34
Serial Number (int): 355030165865703830974805246001816526602036
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1d:27:9f:26:99:5c:02:3d:52:9d:68:f2:6d:17:5b:1d:4a:c4:e2:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:d4:06:f8:76:ce:34:09:62:96:6b:a0:53:1e:f0:cd:4f:16:a6:ac
Fingerprint (sha256): 96:9a:a7:bc:2a:b2:35:63:b3:3e:0b:53:7a:b1:92:3f:34:8f:74:32:1e:6d:7c:01:df:ec:c6:a8:f8:bd:80:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canopyofhope.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canopyofhope.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aian5.com
*.alamancefarmer.com
*.annlabel.com
*.assistirfilmesantigos.net
*.behamnce.net
*.betconstruct.legal
*.canopyofhope.com
*.carcommerce.online
*.cfbinsurace.com
*.chiporle.com
*.compramos-seu-carro.co
*.connectingcolorad.com
*.criminallawyers.au
*.cryptoratecompare.io
*.dokmeh.co
*.fenmao3.cc
*.firehousemovingco.net
*.flootplanner.com
*.fusionnetworking.net
*.gotherenow.net
*.hjk02.com
*.hjk05.com
*.hjkb5.com
*.hjkce.com
*.hjkd1.com
*.hswu.net
*.i-modo.net
*.inspectorpro.net
*.itaf-international.org
*.jkanimen.net
*.kannabis.com.au
*.krunal.me
*.latre.es
*.lsuports.net
*.m2-kaplan.org
*.mashamalinovskaya.com
*.mb-da.de
*.mtoonx.net
*.mullerconsultingservices.com
*.mypaientvisit.com
*.myristica-sebifera.de
*.naura.asia
*.newistpark.com
*.prizepricks.com
*.revelappliance.com
*.sorimachi.net
*.teoapp.co
*.ultrasoniccleaner.com.au
*.yom.net
*.zermattgees.com
aian5.com
alamancefarmer.com
annlabel.com
assistirfilmesantigos.net
behamnce.net
betconstruct.legal
canopyofhope.com
carcommerce.online
cfbinsurace.com
chiporle.com
compramos-seu-carro.co
connectingcolorad.com
criminallawyers.au
cryptoratecompare.io
dokmeh.co
fenmao3.cc
firehousemovingco.net
flootplanner.com
fusionnetworking.net
gotherenow.net
hjk02.com
hjk05.com
hjkb5.com
hjkce.com
hjkd1.com
hswu.net
i-modo.net
inspectorpro.net
itaf-international.org
jkanimen.net
kannabis.com.au
krunal.me
latre.es
lsuports.net
m2-kaplan.org
mashamalinovskaya.com
mb-da.de
mtoonx.net
mullerconsultingservices.com
mypaientvisit.com
myristica-sebifera.de
naura.asia
newistpark.com
prizepricks.com
revelappliance.com
sorimachi.net
teoapp.co
ultrasoniccleaner.com.au
yom.net
zermattgees.com

Other certificates including the domain name canopyofhope.com

(limited to 100 certificates)
canopyofhope.com
demo.canopyofhope.com
canopyofhope.com
demo.canopyofhope.com
canopyofhope.com
canopyofhope.com
canopyofhope.com
demo.canopyofhope.com
hjk3b.com
canopyofhope.com
canopyofhope.com
demo.canopyofhope.com
canopyofhope.com
canopyofhope.com
canopyofhope.com
canopyofhope.com
canopyofhope.com
canopyofhope.com
demo.canopyofhope.com
demo.canopyofhope.com
demo.canopyofhope.com
canopyofhope.com
demo.canopyofhope.com
demo.canopyofhope.com
canopyofhope.com
canopyofhope.com
canopyofhope.com
canopyofhope.com

Certificate

The complete raw certificate details for canopyofhope.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355030165865703830974805246001816526602036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 17:34:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 17:34:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canopyofhope.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880696193394836816141995114389796033973952968032764901979213461013886503260485880306592965832463994980876321738644045426392907855684886078868017697980060850513685291766299588527101909912333080840298852413128323500631239989354715785865788760494759936095855505928231607368660840818737053444159555190669064172579883501593014960490452464063856733617278234905448014481477893077383489748118737613807505421531802885459669256971184200348081813729503151880048551695444826643882794332158957703718871242399985951369039316456478708677019876563535669857817751934806245230419633575271467582538322530320751966694234315555998587331855338725481460651215497649343679437260607218742964057115987455192803636752976848457771683888142734881007436415837626501431625022267787787166206109670972842232596681406858848098362995324245245413333461863897362257820820863148457387131817270194300438303911348750226534275412127087020717539197113369861946198779831533916490925852716312677082224420565318689089264174828438932193049899117955545380690456414509496332185872194881916584226661326180772835958531731993687760723519021564085686410030715595613097215715114810467720765582734765288567675625788513676182471550567868618468065185947043724239732667921980106546250139833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d279f26995c023d529d68f26d175b1d4ac4e20a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1756 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aian5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alamancefarmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annlabel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assistirfilmesantigos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.behamnce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betconstruct.legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canopyofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carcommerce.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cfbinsurace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiporle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compramos-seu-carro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectingcolorad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.criminallawyers.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptoratecompare.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dokmeh.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fenmao3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firehousemovingco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flootplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fusionnetworking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotherenow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjk02.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjk05.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjkb5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjkce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjkd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hswu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-modo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspectorpro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itaf-international.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkanimen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kannabis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krunal.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lsuports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m2-kaplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mashamalinovskaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mb-da.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtoonx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mullerconsultingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypaientvisit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myristica-sebifera.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naura.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newistpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prizepricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revelappliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sorimachi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teoapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultrasoniccleaner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zermattgees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aian5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamancefarmer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annlabel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistirfilmesantigos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behamnce.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betconstruct.legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canopyofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carcommerce.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfbinsurace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiporle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compramos-seu-carro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectingcolorad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'criminallawyers.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoratecompare.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokmeh.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenmao3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firehousemovingco.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flootplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionnetworking.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotherenow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjk02.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjk05.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjkb5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjkce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjkd1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hswu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-modo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspectorpro.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itaf-international.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkanimen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kannabis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krunal.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latre.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsuports.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2-kaplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashamalinovskaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb-da.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtoonx.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mullerconsultingservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypaientvisit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myristica-sebifera.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naura.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newistpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prizepricks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revelappliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sorimachi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teoapp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrasoniccleaner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zermattgees.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f7d88f9fc0000040300483046022100fea8baf360a0d1068a08b84b143830096a78fa6ad65bc6c6518760d1464fd40c022100ce4a155d2e2373a46c91944abb527c2ee349e747e0a834839716790c495792770075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f7d88fa8300000403004630440220048b0aace2221e64e2c6971d8276ab656803b0d34726c2efe779ee24e0b52d6602201f8d30e7f5f456855a4a3f34cd0daf5966a0c17412c909b63d217f7fb3be5deb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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