punkgeneration.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a2:8a:dd:94:f6:8a:a2:b2:3b:41:c7:a3:1f:4a:be:cb:6c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=punkgeneration.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:8a:dd:94:f6:8a:a2:b2:3b:41:c7:a3:1f:4a:be:cb:6c
Serial Number (int): 403759471150586727192897619797333203929964
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:22:94:54:c1:80:5d:2f:1d:aa:1b:a0:33:73:cb:d9:ec:dd:23:eb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:1e:c8:26:ee:73:ee:3f:2f:af:36:fe:f2:ff:70:c5:c5:0a:ef:b1
Fingerprint (sha256): a2:41:a3:52:40:f7:93:58:71:4a:bc:99:04:1b:7a:49:f6:61:21:12:b2:93:c1:70:71:03:e3:04:39:35:a8:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate punkgeneration.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for punkgeneration.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

antifaviolence.org
astheearthturns.org
bajafishingtours.com
bbcspor.com
both.id
carbright.com
cardiagnostictest.com
cmaace.com
codydentist.com
cupond.com
dependent.id
digitalmediainvestment.com
directly.id
faculta.com
francismaddenshephard.com
freight-ware.com
gx.id
indirelim.com
kansasflinthills.com
kidsfoodgrowingkit.com
lc.id
manteldirect.com
mclogos.com
mcvco.com
meddeal.com
most.id
musavir.com
nastyghost.com
nebraskacaraccidentattorneys.com
okdelicious.com
omaha-autoglass.com
oo.id
paintgreenville.com
punkgeneration.com
refiningsolution.com
religious.id
road2eu.com
saltlakestemcelltreatment.com
specialonetimedeals.com
sportsmedicinesantafe.com
spotonbet.com
st.id
sticker-it.com
thetanner.com
thetrustedyellowpages.com
tl-tc.com
tracyglover.com
uc.id
wg.id
withdraw.id
www.antifaviolence.org
www.astheearthturns.org
www.bajafishingtours.com
www.bbcspor.com
www.both.id
www.carbright.com
www.cardiagnostictest.com
www.cmaace.com
www.codydentist.com
www.cupond.com
www.dependent.id
www.digitalmediainvestment.com
www.directly.id
www.faculta.com
www.francismaddenshephard.com
www.freight-ware.com
www.gx.id
www.indirelim.com
www.kansasflinthills.com
www.kidsfoodgrowingkit.com
www.lc.id
www.manteldirect.com
www.mclogos.com
www.mcvco.com
www.meddeal.com
www.most.id
www.musavir.com
www.nastyghost.com
www.nebraskacaraccidentattorneys.com
www.okdelicious.com
www.omaha-autoglass.com
www.oo.id
www.paintgreenville.com
www.punkgeneration.com
www.refiningsolution.com
www.religious.id
www.road2eu.com
www.saltlakestemcelltreatment.com
www.specialonetimedeals.com
www.sportsmedicinesantafe.com
www.spotonbet.com
www.st.id
www.sticker-it.com
www.thetanner.com
www.thetrustedyellowpages.com
www.tl-tc.com
www.tracyglover.com
www.uc.id
www.wg.id
www.withdraw.id

Other certificates including the domain name punkgeneration.com

(limited to 100 certificates)
toylr.com
nybudstore.com
www.modern-villa-spain.com
coppiamista.com
thetrustedyellowpages.com
cannadistillates.com
yzsdl.com
loadmaster-tote.com
punkgeneration.com
fakemal.com
punkgeneration.com
www.newyorkjointpain.com
punkgeneration.com
punkgeneration.com
www.proxybeam.com
jakeriding.com
www.myresearch.net
www.proxybeam.com
topbusinesstravel.com
onlinebusinessdegree.site

Certificate

The complete raw certificate details for punkgeneration.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPnnhKiOyMm6qxwT1LVP
sQyMUeJNUaq/nW5eHOZ2hGb62ea+eEYEuLhtAEMBV2I9oBZT56fhOZtl1dn9x6Fm
Tsvt5jnCRo73eE+C7WUQ8l3xpHBIRLbjZhFhEo2BCGZHf11+DpfhBjP4S/OLMu3M
d1CdJ5Zza8e2sM2ZzAyYF5XNi8hzWC46MJZTHL/O/ZoPLpzQtc1ZFk4JO5cWGnim
ClAqbskIC4QsR3SwmAoCA7poaNoIXqBbY2C0g066T2EOhv4YEIKpFRlka50Ayu0h
urEZDwvm9ZHN1hRunb3j6N+Kz5LrOX7voPhK8CWiZ54BqtdCSTw5CeFMlQ/eBJUj
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403759471150586727192897619797333203929964
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 17:51:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-16 17:51:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'punkgeneration.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22846127330665956357500468394882693342430198144031301354072407905592948924941415000397235931016368650370151756659330667854253249384684735545419018739754838813157762199964500124941729089511943147278861037177813650785963993440338874632993973391205403562599400409108641201195054310172832801215035966172329805175181263012628397405866011090462803934930301514025320319814604133197503696334404925733967243093129008608003848422305740150545997060723437954477241133871913637376898180613301282301397488276704758753862168561776745854443187748742074850971084230868098115752194136104540949491589002555829075356360365100510412612357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29229454c1805d2f1daa1ba03373cbd9ecdd23eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1868 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antifaviolence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astheearthturns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bajafishingtours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbcspor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'both.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiagnostictest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmaace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codydentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dependent.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalmediainvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directly.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faculta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francismaddenshephard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freight-ware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indirelim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kansasflinthills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidsfoodgrowingkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manteldirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcvco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meddeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'most.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musavir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nastyghost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebraskacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okdelicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omaha-autoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paintgreenville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punkgeneration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refiningsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religious.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'road2eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialonetimedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedicinesantafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotonbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sticker-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrustedyellowpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl-tc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracyglover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wg.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withdraw.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antifaviolence.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astheearthturns.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bajafishingtours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbcspor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.both.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardiagnostictest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmaace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codydentist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cupond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dependent.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitalmediainvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directly.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faculta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.francismaddenshephard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freight-ware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gx.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indirelim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kansasflinthills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsfoodgrowingkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manteldirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mclogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcvco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meddeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.most.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musavir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nastyghost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebraskacaraccidentattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okdelicious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omaha-autoglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oo.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paintgreenville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.punkgeneration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refiningsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.religious.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.road2eu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltlakestemcelltreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.specialonetimedeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsmedicinesantafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotonbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sticker-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetrustedyellowpages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tl-tc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tracyglover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uc.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wg.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.withdraw.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fb4d836630000040300483046022100954ff2b8e2bd3555c956bc1ff750d23e14cbf4275d2af62800a2fdca58f4c68c022100cfcf35cf27136a35084725a8ff67560377f14255027d7c1a1e13d13eda5d68f4007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fb4d836500000040300473045022042ab7762590d0731f04c8b2bb435db97c3384c28228b42e2eaf3b5ee8dd01ca40221008984f55b8a026ff51118d9c556513686b5545f54e54ed7f1ad0414b8099cda47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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