dceufrgs.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:ef:e6:8b:1d:93:fb:c2:ab:b1:dc:14:b0:77:1c:f8:b4:b0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dceufrgs.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:e6:8b:1d:93:fb:c2:ab:b1:dc:14:b0:77:1c:f8:b4:b0
Serial Number (int): 430083074189353480821425434086177987146928
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:53:10:98:92:2e:ac:11:26:86:0f:8d:4a:8e:f1:59:d2:b2:71:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:06:73:de:5a:57:5d:04:bc:a0:a3:28:f2:b4:cc:3a:f1:f0:4a:fe
Fingerprint (sha256): a1:56:a3:61:7e:ea:0e:04:43:bc:ef:b8:9c:89:1f:3c:56:5e:91:70:49:ca:ae:b9:ce:6f:65:fe:83:c4:bd:ba

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dceufrgs.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dceufrgs.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.0857.in
*.abbottfarmshouma.com
*.aftfastners.com
*.birginmedia.com
*.businessassistant.co
*.caninekids.info
*.careerpilot.org
*.cwaconsultores.com.br
*.dceufrgs.com.br
*.dialognutrient.top
*.digiscrapdepot.com
*.essexclassiccarauctions.co.uk
*.fmoives.to
*.foamsharks.com
*.gewoonmarieke.com
*.harklinniken.com
*.hellporn.com
*.hflekbby.info
*.kidsgotstyleboutique.com.au
*.kurdistanakam.com
*.lenskert.com
*.lifeassurance.com.au
*.migshop.co.uk
*.moviezrule.com
*.myetizolam.com
*.nessnessphotography.com
*.porncomics.pro
*.ptyou.com.au
*.puslechain.com
*.relaxfriend.top
*.residiotechnologiessettlement.com
*.samedaycashloans.com.au
*.shababysribshack.com
*.slidepp.net
*.spinesurgeonnewyork.com
*.studynow.com.au
*.supermodelcompanion.com
*.tehcomservis.com
*.thriftstore.com.au
*.tm914.com
*.tuberouter.com
*.u5zhi.com
*.upconvert.com
*.valuestorefront.com
*.warwickshirefencing.co.uk
*.whcmedicaresolutions.com
*.windturbine.com.au
*.wlamat.com
*.wwwguidanceresources.com
*.xuy.tv
0857.in
abbottfarmshouma.com
aftfastners.com
birginmedia.com
businessassistant.co
caninekids.info
careerpilot.org
cwaconsultores.com.br
dceufrgs.com.br
dialognutrient.top
digiscrapdepot.com
essexclassiccarauctions.co.uk
fmoives.to
foamsharks.com
gewoonmarieke.com
harklinniken.com
hellporn.com
hflekbby.info
kidsgotstyleboutique.com.au
kurdistanakam.com
lenskert.com
lifeassurance.com.au
migshop.co.uk
moviezrule.com
myetizolam.com
nessnessphotography.com
porncomics.pro
ptyou.com.au
puslechain.com
relaxfriend.top
residiotechnologiessettlement.com
samedaycashloans.com.au
shababysribshack.com
slidepp.net
spinesurgeonnewyork.com
studynow.com.au
supermodelcompanion.com
tehcomservis.com
thriftstore.com.au
tm914.com
tuberouter.com
u5zhi.com
upconvert.com
valuestorefront.com
warwickshirefencing.co.uk
whcmedicaresolutions.com
windturbine.com.au
wlamat.com
wwwguidanceresources.com
xuy.tv

Other certificates including the domain name dceufrgs.com.br

(limited to 100 certificates)
grocerycoupons.com.au
bybys.com
freetrojanbotnet.com
dceufrgs.com.br
dceufrgs.com.br
ageonlife.com

Certificate

The complete raw certificate details for dceufrgs.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsndNrQQbZQrZB7WwHGxv
rUdOywx34ki7AZLptfNeF8SLVTQAgskzyPf403xWdu7Lu1nN/zjwj7jWRo+m9EWk
gX+6My1FrdIelg42PhqD8quyp0A47KYzLJqkc51HAinlD4FhjHmhtuedf7/CpxXh
lqQJ8H2H14D+pEdTUW7q418HuED7K6U3/65gVp9AiuKZVOktKn6CU3cwtXSE54g0
3QGYdDBfxLiKCpLUuzFJc4GEQcZ1JEwGXGCUYN3qfcV7YZc70Mp3KOO5O3xj+9uv
kt0ryMXHUMk/rJ6Ak5FV0S8UF/xoi88ez3JMlALMTJwTRS7RKglW6ioPEpILEnoZ
th65TM27gRojc9gKmatjwDbzPVUba1ya8fajLRdc7wqTXVdj8CH9+Y8GZekC7PER
CodpZW6vOAjY6aI+RGoq+vRfpEnHeASqW2czge5KVYJqqpDca0KimzvFTBudDJNL
FVVNqPPG/fje4c7o3NnNxi1qzn0fMBa5iWnYwtaG9RMsnLJ8mXlQwZ3VuvJghK1T
b7Z62Fu+Sjv8uzeznBnQ3WkLplfuQ4zQ3opyGkeELKHBza3FZtXdrXLD9kh7srZz
dgmaqWno3bqlwEdF5b/DL7lyBVolI4TwpKhh1mSXtTUlOo8SWlEdrSjOAAWS8w6f
Kjdyut36UB9YP7cZB5+6GVUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430083074189353480821425434086177987146928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 12:11:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 12:11:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dceufrgs.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728077876509377550193105070063095684121954247762629721545996882263683149785684772543033400783602081525733692296739792343948798788409565894239390367336187902088256878323002517542542738998923326181041684400614496048945854323439176482145838490747530358138045495712950270528175464304052005168491055239834161612563753658657746044156997958461478771831570803022270637022359471349578684290534675046871857076969158709154399035889694532788640851178383788482990862213920411568782877585606677243345240783290593538691869699304467914677671081634379900681140513955255305181239063552809557685110771240079481126912754640742884730172161938841568066176236630997885287062414687927778657921607906067027645185362260733735914267420931278730404029186610053808111708589219944122867061926395173484425446008636785692104469696213079951627705747906264708608057882927348738438548224278961095569099114928683302383079494520713309731710480546315715088536855074255995076655061963506811907172245041087896342947612517514597853445250601984602520145328640645560538023506194762639567448306833701318172072626397751702658945294762863741782606087183443780560273980744203560838175715607220446458671635223831327248775446886960145066070135994400458126147132761083565289328220501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17531098922eac1126860f8d4a8ef159d2b271ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1980 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.0857.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abbottfarmshouma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aftfastners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birginmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessassistant.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caninekids.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careerpilot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwaconsultores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dceufrgs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dialognutrient.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiscrapdepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essexclassiccarauctions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmoives.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foamsharks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewoonmarieke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harklinniken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hflekbby.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidsgotstyleboutique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurdistanakam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lenskert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeassurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviezrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myetizolam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nessnessphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porncomics.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptyou.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puslechain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaxfriend.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.residiotechnologiessettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samedaycashloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shababysribshack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slidepp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spinesurgeonnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studynow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supermodelcompanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tehcomservis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thriftstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tm914.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuberouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u5zhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upconvert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valuestorefront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warwickshirefencing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whcmedicaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windturbine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wlamat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwguidanceresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xuy.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0857.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbottfarmshouma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aftfastners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birginmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessassistant.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caninekids.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerpilot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwaconsultores.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dceufrgs.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialognutrient.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiscrapdepot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essexclassiccarauctions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmoives.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foamsharks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewoonmarieke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harklinniken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hflekbby.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsgotstyleboutique.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurdistanakam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenskert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeassurance.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviezrule.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myetizolam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nessnessphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porncomics.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptyou.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puslechain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaxfriend.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residiotechnologiessettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samedaycashloans.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shababysribshack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slidepp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spinesurgeonnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studynow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermodelcompanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehcomservis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thriftstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm914.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuberouter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u5zhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upconvert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuestorefront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwickshirefencing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whcmedicaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windturbine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlamat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwguidanceresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuy.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d02f3568b0000040300473045022100b73eeeaebece6b89e2f7228b3ea0ab827000c8b8dc3b281e40c87d6ea5bd9cf902203056b7c2c2e78ecea38b00dda747095c2648f3457f2d7d067762f8c9b224a9db007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d02f356940000040300473045022100dc7fbf11104ec9ae11a3fe6af92553aed54748bd1f5f355411280b339d972b9002206a5f349fe4dcb6f09128bdb968013b514b0f00b884ae7da7604253acacbf3ee7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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