kidzhealth.org

Issued by R3

About this certificate

This digital certificate with serial number 04:4e:65:b1:6f:c4:8f:9b:35:14:55:ac:90:6b:8e:ec:97:70 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kidzhealth.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4e:65:b1:6f:c4:8f:9b:35:14:55:ac:90:6b:8e:ec:97:70
Serial Number (int): 375126341677913053752990603581122625181552
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f3:25:a3:b7:34:a2:05:04:a4:ac:7b:94:a2:8b:e3:20:7a:7e:92:4a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:c5:dd:d1:76:e4:30:c0:d7:0f:e5:c7:9b:45:88:e6:06:a0:ce:ae
Fingerprint (sha256): 98:c8:ba:47:6e:4f:81:b3:f3:8b:c9:2f:d3:1e:e5:a9:a2:29:d7:70:52:98:77:78:71:3a:e0:7b:75:0c:c2:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kidzhealth.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kidzhealth.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.10xundergrad.com
*.668jq.com
*.ahhlok.com
*.angelofreda.com
*.anuragtyagi.com
*.applynowcredit.co
*.aweli.biz
*.balicentralvet.com
*.bed.cm
*.bracioroom.com
*.bsrclaysus.com
*.casa789.com
*.chemins-de-bretagne.com
*.chinlandcar.com
*.cineblog01.gratis
*.darshansales.co
*.drbackcrack.com
*.epubvip.com
*.famups.net
*.flashlightnyc.org
*.givegary.org
*.golchinbook.com
*.groupdiscussionsolutions.com
*.hanautabiyori24.com
*.happiness-conceptstore.com
*.jewelryluster.com
*.kidzhealth.org
*.libertad21.com
*.meridiancu.com
*.mi2mangav.com
*.naturallightz.com
*.njmulsqb.engineer
*.orgyahoo.com
*.orrcadillac.com
*.ovesrstock.com
*.ovoerstock.com
*.preciouscatshop.com
*.puntofabricamoda.com
*.scoopinfo.net
*.selfzeal.com
*.seniorbloggarna.com
*.shundinesfrybreadstand.com
*.slr4u.com
*.stationdentalpractice.com
*.stoltzman.com
*.tamilboxer.com
*.tecnicauchosgomas.com
*.ventabay.com
*.vigneshmeenueyeclinic.com
*.wffnproof.com
10xundergrad.com
668jq.com
ahhlok.com
angelofreda.com
anuragtyagi.com
applynowcredit.co
aweli.biz
balicentralvet.com
bed.cm
bracioroom.com
bsrclaysus.com
casa789.com
chemins-de-bretagne.com
chinlandcar.com
cineblog01.gratis
darshansales.co
drbackcrack.com
epubvip.com
famups.net
flashlightnyc.org
givegary.org
golchinbook.com
groupdiscussionsolutions.com
hanautabiyori24.com
happiness-conceptstore.com
jewelryluster.com
kidzhealth.org
libertad21.com
meridiancu.com
mi2mangav.com
naturallightz.com
njmulsqb.engineer
orgyahoo.com
orrcadillac.com
ovesrstock.com
ovoerstock.com
preciouscatshop.com
puntofabricamoda.com
scoopinfo.net
selfzeal.com
seniorbloggarna.com
shundinesfrybreadstand.com
slr4u.com
stationdentalpractice.com
stoltzman.com
tamilboxer.com
tecnicauchosgomas.com
ventabay.com
vigneshmeenueyeclinic.com
wffnproof.com

Other certificates including the domain name kidzhealth.org

(limited to 100 certificates)
kidzhealth.org
kidzhealth.hajidanumrohmalang.com
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org
kidzhealth.org

Certificate

The complete raw certificate details for kidzhealth.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375126341677913053752990603581122625181552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 18:59:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 18:59:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kidzhealth.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847097439021153630249386336128216831629659871806265153393728639851147059438152151191069249839475421402114271150722111753220550306452482676777569270155788529292285396823377336349404607592954098883170119473646265281571920799722445330579707804663882641072105734051122871698925846335244509643230176293379704293683275881922932463398623117760065188729871042739733371940261254123475049508997806286409528222389049853727608260330506443155941002771910226612873728602477254972474813906094915393739847693266179448044528636192663559923606786409065706088235430378489218737376407294124897798291341431141893505947273571722400578155032027216700533418311314463140694502700324964734648220093238045755624715665267988416983114832838431308926809144574181714644542749627309258543749950228650934179392999113979426935323368319344223888509641416232163138783622168065606787428446286197929308792346255266233428789489850642368055520797005300752888716650983623388591227825385295860786083815977640312138192794340418344368447485626031420875186939790334024033279306700559498572737060684047742055196531135439111667293907447359409934783235848748854227878310461297415403614780271283897035382845248551711081486916816883478396541619438624602469408454737351853566532100559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f325a3b734a20504a4ac7b94a28be3207a7e924a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10xundergrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.668jq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahhlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelofreda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anuragtyagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applynowcredit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aweli.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balicentralvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bracioroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casa789.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chemins-de-bretagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinlandcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cineblog01.gratis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darshansales.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drbackcrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epubvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.famups.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flashlightnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givegary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golchinbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupdiscussionsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanautabiyori24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happiness-conceptstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewelryluster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidzhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libertad21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mi2mangav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturallightz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njmulsqb.engineer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preciouscatshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puntofabricamoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoopinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selfzeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seniorbloggarna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shundinesfrybreadstand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slr4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stationdentalpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoltzman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamilboxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnicauchosgomas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vigneshmeenueyeclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wffnproof.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10xundergrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '668jq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahhlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelofreda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anuragtyagi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applynowcredit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aweli.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balicentralvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bed.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bracioroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsrclaysus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casa789.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemins-de-bretagne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinlandcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cineblog01.gratis'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darshansales.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drbackcrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epubvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'famups.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashlightnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givegary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golchinbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupdiscussionsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanautabiyori24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happiness-conceptstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewelryluster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidzhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertad21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meridiancu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi2mangav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturallightz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njmulsqb.engineer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orrcadillac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovesrstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovoerstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciouscatshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntofabricamoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scoopinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfzeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorbloggarna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shundinesfrybreadstand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slr4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stationdentalpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoltzman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamilboxer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnicauchosgomas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vigneshmeenueyeclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wffnproof.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae7acfb860000040300463044022000f4614f684446c783feabd8739f4480080a4c399f14d3c2f27e35c43a4e330002201e395a769705b10b43031d60f3fcb3b5d46b42b5b10a51e8d6181c49f2ff5c16007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae7acfb790000040300473045022100940a0070c6f8b91c58cb9de5727d05979107ab5efe38901655eadeec8838893b02200b40b6292bc07db9e188dbd7062a12b1a38a32101f358e86d65c933ad70867e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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