etfassetallocation.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:25:59:35:e5:5c:e2:2a:9c:fd:d9:10:d2:10:c0:2f:2c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=etfassetallocation.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:25:59:35:e5:5c:e2:2a:9c:fd:d9:10:d2:10:c0:2f:2c
Serial Number (int): 313789986944509419048867006584015751753516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:4c:7c:77:80:a1:a2:ea:6c:ce:a6:06:df:db:9e:d0:40:96:38:f1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:1e:4b:cf:52:cc:b1:ea:cd:8d:d2:b3:03:bf:71:bf:67:51:a8:a3
Fingerprint (sha256): 9d:a1:19:49:8a:30:01:65:fd:32:cc:c1:43:01:8e:b3:a4:6e:87:fd:55:2b:4c:e9:c4:0e:c8:f6:c7:3f:89:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate etfassetallocation.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etfassetallocation.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1sadkjsdfkjh.com
*.666hc.us
*.achivementseries.com
*.alsvalorsstudy.com
*.apartmentprojects.com.au
*.apindenurlaub.de
*.aplicativosipad.net
*.chicanocash.com
*.clckify.me
*.cookwithqaker.com
*.cookwithquker.com
*.copsbangsblacks.com
*.degeschenke.us
*.documentdna.co
*.edmendtum.com
*.etfassetallocation.com
*.fairyfight.com
*.fashionla.co.uk
*.getdownload.net
*.hertx.co.uk
*.hiyarjagot.com
*.idmbtv.com
*.imaginelearnings.com
*.indian-curry-mina.com
*.jinniucp.cc
*.lifeforvets.com
*.manganelo.club
*.mathsgenies.co.uk
*.myfnbo.com
*.networkengineer.com.au
*.nhatronghem.info
*.nnxn.co
*.pak-anang.com
*.pastorkeisha.com
*.paygpnline.com
*.powerofvitalitt.com
*.qkb.in
*.reovlut.com
*.rrvolut.com
*.satineddd.us
*.selective.cm
*.sexs-foto.info
*.startmytvchannel.com
*.steuer-erklaerun.de
*.sttudiesweekly.com
*.studiesweekyl.com
*.suncoastcreditunions.com
*.telego1.net
*.wwwamboss.com
*.xfriv.com
1sadkjsdfkjh.com
666hc.us
achivementseries.com
alsvalorsstudy.com
apartmentprojects.com.au
apindenurlaub.de
aplicativosipad.net
chicanocash.com
clckify.me
cookwithqaker.com
cookwithquker.com
copsbangsblacks.com
degeschenke.us
documentdna.co
edmendtum.com
etfassetallocation.com
fairyfight.com
fashionla.co.uk
getdownload.net
hertx.co.uk
hiyarjagot.com
idmbtv.com
imaginelearnings.com
indian-curry-mina.com
jinniucp.cc
lifeforvets.com
manganelo.club
mathsgenies.co.uk
myfnbo.com
networkengineer.com.au
nhatronghem.info
nnxn.co
pak-anang.com
pastorkeisha.com
paygpnline.com
powerofvitalitt.com
qkb.in
reovlut.com
rrvolut.com
satineddd.us
selective.cm
sexs-foto.info
startmytvchannel.com
steuer-erklaerun.de
sttudiesweekly.com
studiesweekyl.com
suncoastcreditunions.com
telego1.net
wwwamboss.com
xfriv.com

Other certificates including the domain name etfassetallocation.com

(limited to 100 certificates)
etfassetallocation.com
epav.net.au
aifamilyservices.co

Certificate

The complete raw certificate details for etfassetallocation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313789986944509419048867006584015751753516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 10:07:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 10:07:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'etfassetallocation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731216370444752860771438096668903547973616741935830544186636161056028829230872991956145264334120284189260228711196069746297384597502116653244888155782930521761255435473652706617979339731352180462544649118501084011263318132470365080959059582823546349973002727606001669737877543216304879963440762150191342533613262979142192002264023193777362333111845816527004873211293620883404218572154970325322103307545933010032191710245632190531592005759303681682435209421896136947864085835359721145274817170660694450917860059285747963135163312211658234037557506354973010674609795461162369542130126527714605065980359153015535934227831818885441897201777268856076502667831680843537917584119342423960847773441302306649912277850164276506380950587674771801010252029143960273777628623432202918716474443815818593647252511296230674638564974864137963192027220842764300596179734508660738915719298783379662958621426953650923619395627244192681881000096861625620784086314275931327753021582094434608297735604523587424851030163427125033052288027928079054380922085421779713903925107040331392611740344324550369415466503004010783451930161230554401668970341622058142174347474453296688801736116779884082865703783942366838008310907593794598646722171845985498622900559919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							264c7c7780a1a2ea6ccea606dfdb9ed0409638f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1810 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1sadkjsdfkjh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.666hc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achivementseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alsvalorsstudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apartmentprojects.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apindenurlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aplicativosipad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicanocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clckify.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookwithqaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookwithquker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copsbangsblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.degeschenke.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.documentdna.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmendtum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etfassetallocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairyfight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionla.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getdownload.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hertx.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiyarjagot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idmbtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imaginelearnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indian-curry-mina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jinniucp.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeforvets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manganelo.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mathsgenies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfnbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.networkengineer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nhatronghem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nnxn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pak-anang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pastorkeisha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paygpnline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerofvitalitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qkb.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reovlut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rrvolut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satineddd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selective.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexs-foto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startmytvchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuer-erklaerun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sttudiesweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studiesweekyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suncoastcreditunions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telego1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwamboss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfriv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1sadkjsdfkjh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '666hc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achivementseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsvalorsstudy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apartmentprojects.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apindenurlaub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplicativosipad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicanocash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clckify.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookwithqaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookwithquker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copsbangsblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'degeschenke.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentdna.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmendtum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etfassetallocation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairyfight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionla.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getdownload.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertx.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiyarjagot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idmbtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginelearnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indian-curry-mina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jinniucp.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeforvets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manganelo.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathsgenies.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfnbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'networkengineer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhatronghem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnxn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pak-anang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastorkeisha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paygpnline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerofvitalitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qkb.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reovlut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rrvolut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satineddd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selective.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexs-foto.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startmytvchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuer-erklaerun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttudiesweekly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiesweekyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suncoastcreditunions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telego1.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwamboss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfriv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dd44090ec00000403004630440220256b596a94b205c2e63a2e3a83c4062996201ce496ea7b54a8b698a93c530772022026e6dadd782a5b2a6224ab10f7b5856c192302d071503ef4cf86167da077b2b10075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dd44092c200000403004630440220154985b5e1f6bbbda2810f018793f7e5f3863946f63f9a3a22a556added1f4460220255145db81bd9cf24c8eaca1b97076a20d9743937d27891cb42429a6442cd519
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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