asociacionmusicalutrerana.com

Issued by R3

About this certificate

This digital certificate with serial number 04:43:86:08:90:28:fd:55:ae:ce:0e:15:55:80:d7:5a:97:26 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=asociacionmusicalutrerana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:43:86:08:90:28:fd:55:ae:ce:0e:15:55:80:d7:5a:97:26
Serial Number (int): 371426223324468423362215229305925815408422
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 52:4a:c7:fb:4c:a7:95:00:81:2f:92:8e:ba:ad:f4:95:ac:cd:4a:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:86:99:14:55:84:83:c5:66:f7:e5:77:00:c2:37:c0:74:c4:70:f5
Fingerprint (sha256): a0:b5:a4:f0:96:23:8e:d1:5f:49:a7:a6:ed:98:1d:92:99:75:e2:35:14:95:01:70:ee:ed:bf:1e:ae:57:23:b8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate asociacionmusicalutrerana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asociacionmusicalutrerana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.070829.com
*.9989up.co
*.agedcaresignage.com.au
*.allfreebrush.com
*.arepatogo.co
*.asociacionmusicalutrerana.com
*.astraldehoje.com.br
*.atomiccollectibles.com
*.bollyrulz.me
*.btccl.com
*.btclibya.com
*.btcliechtenstein.com
*.btnativenav.com
*.clb4.cc
*.cliffcashcomedy.com
*.clotureenligne.com
*.dasvivienda.com
*.dentallabreviews.com
*.detroitfanfare.com
*.fdrlogging.co
*.frankfrazettamuseum.com
*.garainger.com
*.greatlakesshipwreck.com
*.hgme.com.au
*.kingswoodagri.com
*.knightcagefight.com
*.lachanelphile.com
*.legacyvault.co.uk
*.livetheorgangelife.com
*.mahletics.com
*.mexicocitydenver.com
*.mypokies62.net
*.newcastlephysiotherapy.au
*.njefile.com
*.onlinepokie.nl
*.paydaybitcoins.com
*.pena.au
*.promocaopreviotododia.com.br
*.pronosfrance.fr
*.quayvintage.co.uk
*.saltocuanticodigital.com
*.soaringaustralia.com.au
*.swdab.com
*.texasstateveggiefair.com
*.thinkingms.com
*.velourmagazine.com
*.vgoodies.com
*.webtexseo.co.uk
*.whiskyweek.com.au
*.xtronoffice.com
070829.com
9989up.co
agedcaresignage.com.au
allfreebrush.com
arepatogo.co
asociacionmusicalutrerana.com
astraldehoje.com.br
atomiccollectibles.com
bollyrulz.me
btccl.com
btclibya.com
btcliechtenstein.com
btnativenav.com
clb4.cc
cliffcashcomedy.com
clotureenligne.com
dasvivienda.com
dentallabreviews.com
detroitfanfare.com
fdrlogging.co
frankfrazettamuseum.com
garainger.com
greatlakesshipwreck.com
hgme.com.au
kingswoodagri.com
knightcagefight.com
lachanelphile.com
legacyvault.co.uk
livetheorgangelife.com
mahletics.com
mexicocitydenver.com
mypokies62.net
newcastlephysiotherapy.au
njefile.com
onlinepokie.nl
paydaybitcoins.com
pena.au
promocaopreviotododia.com.br
pronosfrance.fr
quayvintage.co.uk
saltocuanticodigital.com
soaringaustralia.com.au
swdab.com
texasstateveggiefair.com
thinkingms.com
velourmagazine.com
vgoodies.com
webtexseo.co.uk
whiskyweek.com.au
xtronoffice.com

Other certificates including the domain name asociacionmusicalutrerana.com

(limited to 100 certificates)
paystoshare.net
faanatics.com
faanatics.com
asociacionmusicalutrerana.com
stickystroll.cn
asociacionmusicalutrerana.com

Certificate

The complete raw certificate details for asociacionmusicalutrerana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371426223324468423362215229305925815408422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 03:15:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 03:15:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asociacionmusicalutrerana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723058702099778610455307141437939651654774810609460495122980811056114278405697891226607566143170770533690263822434753998331610648928023961131732677278286533617155910471926373587487895233342189271570022670159136534730240614857863614808419133118893476373835406722903518203437508859136329202442476873187836356931478396042905646510639271165305019836110944611394484678714058340441370804052533853419502026326107331282677527222608813868616199593351949021979168476804350718262248407662242712837934720484715053082184290653962789188772092746059020480497656034026873757193215706353540879386252123943830927800561945180889505340710651272756611292060745487706222890498671014384314508199408851358238016057917028603423928049856481799654772823183359477204612167023480869506139041327751344602875822066290794585013080952874454426096615779421955091027786889733073597692060843883116255874029672699366234305877331760284111510611373534300481813372531002316368763139835371005574239093283998222837875010631238834953312101538642765986148308040967060174329741729547992431074131630905408839295261898621151069911206401770218452562535174637146611833959131044754958058379761979809198021018087878564656348862681453406579684783854697475267008783852019252165151965237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							524ac7fb4ca79500812f928ebaadf495accd4a72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1968 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.070829.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9989up.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agedcaresignage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allfreebrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arepatogo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asociacionmusicalutrerana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astraldehoje.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atomiccollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bollyrulz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btccl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btclibya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcliechtenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btnativenav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clb4.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliffcashcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clotureenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dasvivienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentallabreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.detroitfanfare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdrlogging.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankfrazettamuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garainger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatlakesshipwreck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hgme.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingswoodagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knightcagefight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lachanelphile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legacyvault.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livetheorgangelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mexicocitydenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypokies62.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newcastlephysiotherapy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njefile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinepokie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paydaybitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pena.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promocaopreviotododia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronosfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quayvintage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saltocuanticodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soaringaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swdab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texasstateveggiefair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinkingms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.velourmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vgoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webtexseo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whiskyweek.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xtronoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '070829.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9989up.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agedcaresignage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allfreebrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arepatogo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asociacionmusicalutrerana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astraldehoje.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atomiccollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bollyrulz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btccl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btclibya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcliechtenstein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btnativenav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clb4.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliffcashcomedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clotureenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasvivienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentallabreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'detroitfanfare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdrlogging.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfrazettamuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garainger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatlakesshipwreck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgme.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingswoodagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knightcagefight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lachanelphile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyvault.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetheorgangelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahletics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mexicocitydenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypokies62.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcastlephysiotherapy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njefile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinepokie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paydaybitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pena.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promocaopreviotododia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronosfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quayvintage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltocuanticodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soaringaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swdab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasstateveggiefair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkingms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velourmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vgoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtexseo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whiskyweek.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtronoffice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018daafa01a00000040300483046022100d75771d2c05ba4cb4ac507f20f4e89695ec7fa83f39ba1f30ef1784be4851b86022100f0a819d505c37f14dd8326e2b408cdb61a299ab5134265c3c072ea2d74ef631e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018daafa02480000040300473045022040c8dd18514c38d92647bfb7b0fc7e8144a4cdb705aab77933f91cd53107f0f3022100bae358011d58f8515e1c7ee3ba8346689abec48a60e55031e803b17937c951c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b02feaf106187531fa6bca20f61b54149b20161c1ec2622ac02e50c54415226f48ed463503bdefc61ff97d4fab2bc9d346899be8d75c6c4d0188ef612eaa93782a788e68795661ecda2f5aa8f63861be708730ace4ddf30311ed07a45f6089c93ea8cc9ec53819685e8cf00125b5896d593937cbc1e519e36f408d9d985774f16a092f3838a111774518c5f3260d2dd77d3d000ef77d3db07d087d33cd4f4d8c2cb1ac5f7f60a9f0235a67e717cce09935d72ff505e7b20cc16fed1864efe461d0c10b00b47067e3030c0e41fcc5ee1eae8d5e1747a2d753b12cac2d65a047a1189f8b6e29f275319c43ed51248555fa7b4245027a30d4ffe077e52dff67eb32