aitegroupblog.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:ec:44:1a:ad:2d:ef:65:f2:ec:e5:51:8f:b5:60:13:6d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aitegroupblog.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6a:ec:44:1a:ad:2d:ef:65:f2:ec:e5:51:8f:b5:60:13:6d
Serial Number (int): 297720840113155175631337652261431132820333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:a8:76:90:af:16:ad:9f:ab:d7:b7:91:66:d4:76:35:61:dc:a5:8a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9c:4e:a8:e5:3c:bf:b8:fe:50:8c:32:ee:d0:9e:4c:20:2e:d1:28:1f
Fingerprint (sha256): a3:1b:a2:ea:96:ff:53:a0:f2:0f:f2:fe:05:54:60:5e:55:20:52:a6:8b:e8:93:09:60:88:6f:a5:23:a2:e6:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aitegroupblog.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aitegroupblog.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.0lb.de
*.4390.in
*.999esport.com
*.airportparkingaustralia.com.au
*.airpump.com.au
*.aitegroupblog.com
*.americanshoponline.com
*.aupi.me
*.bdsmvideopost.com
*.californiastatebank.com
*.chosencommuniquetospottoday.info
*.cliponbangs.com
*.dayalon.com
*.dipper.com.au
*.eightmileplains.com.au
*.eleccionesenchile.com
*.estateplanninggroup.co.uk
*.gasburner.com.au
*.houseland.eu
*.hywayautosalesholland.com
*.iowatrasurers.org
*.jetrental.com.au
*.jrcomics.com
*.kebbel-kunsthandel-auktionen.de
*.kinder-spass-park.de
*.learnopengl.org
*.lenstogo.com
*.lktravelthai.com
*.mapper.me
*.modernsales.com.au
*.myhealthreocrd.com
*.mynatgnpolicy.com
*.negotiableprices.com
*.noscrub.com
*.ockley.com
*.ojogos.info
*.paypoal.de
*.philsoriginalbbq.com
*.placemysearclaim.com
*.portalsinergyrh.com
*.recruitment-asianagri.com
*.rollawaybed.com.au
*.sozinha.ai
*.sprtsmans.com
*.squarmouth.com
*.theatlanic.com
*.vallleyvet.com
*.waterfrontgetaways.com
*.xbet360.net
*.youngs-chocolate-stout.com
0lb.de
4390.in
999esport.com
airportparkingaustralia.com.au
airpump.com.au
aitegroupblog.com
americanshoponline.com
aupi.me
bdsmvideopost.com
californiastatebank.com
chosencommuniquetospottoday.info
cliponbangs.com
dayalon.com
dipper.com.au
eightmileplains.com.au
eleccionesenchile.com
estateplanninggroup.co.uk
gasburner.com.au
houseland.eu
hywayautosalesholland.com
iowatrasurers.org
jetrental.com.au
jrcomics.com
kebbel-kunsthandel-auktionen.de
kinder-spass-park.de
learnopengl.org
lenstogo.com
lktravelthai.com
mapper.me
modernsales.com.au
myhealthreocrd.com
mynatgnpolicy.com
negotiableprices.com
noscrub.com
ockley.com
ojogos.info
paypoal.de
philsoriginalbbq.com
placemysearclaim.com
portalsinergyrh.com
recruitment-asianagri.com
rollawaybed.com.au
sozinha.ai
sprtsmans.com
squarmouth.com
theatlanic.com
vallleyvet.com
waterfrontgetaways.com
xbet360.net
youngs-chocolate-stout.com

Other certificates including the domain name aitegroupblog.com

(limited to 100 certificates)
qetna.com
aitegroupblog.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
aitegroupblog.com
sni.cloudflaressl.com
exxafrica.com
qetna.com

Certificate

The complete raw certificate details for aitegroupblog.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoRo9o+DIi2DOfTBDvZdt
zOrixNoMM/Vb1/neV5MQI9arYp6BXbiKfpqYeTBycgZi4aZR3+MHgvHjhJKI0cd3
GXohmVJ8e9JhesmpFX+ZC4vWCyDZHWXmHmo3+mwhpWjPukLIfJkHw2xybnrdud12
aw+gzblck7GSb0Fqk9sPVhPDrfrn6bFcxIvn0JFB9yDqQsM1wBuqqovdnnw2YJik
ivw+ew2Wyeaohp8Tt27idBDljjq7Q8xHr/fyE2qpPS9azzjD52+PKlJGWSREJSK3
vJQaXMJN825qGljTHQM0l4zftOFhG6qb621AMrmdr6aRG9smsw9auOpsYvI8Ky37
sRb3J3XzVarYa6rP7mIqyQohdjydIIX+6BdmnvWbSQ2dVks2qO8RKJB8K9zIioK8
Vsv+hrME1PDl90O5f/T8+AZJHG4EVCPUx8uPS5cGMlKVLIt7/QP4I5uAsmOVqxCI
HR1F8j3+nZyIWscfoW8//Rv2nw0AMVHyG2I49J3hb/JUzEbVU+9rLk6Jp9ZYkvoj
HB61C9/JJilg4kxvs3S6xuYtcrxYZ8iiS40FYQ5USU0CGWxaozzLd75I2hBzMdpP
N+XEbOi/yr2tNz3Efz6Dhnbz6hgUjKxF2ym5cxktAZXG+AzjApWWfzY+C6PP14gt
yTVGXqszjpVMN03ACHH554MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297720840113155175631337652261431132820333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 20:27:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 20:27:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aitegroupblog.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657240870927553067271695349029941119208768270660413339912986542803908570157816292034607081202662184189545130794116316563723604234262016556345123835017471162120849929261275264451573096029941207344556841980841929306605514315184107873566680732534650114057720477326174370066940637871544155674019277380446053996126717005078695883754150704314606513161889532798771634604518327955319542346254496136474062862711569492976833316810831697137140071805114895761504442046169089907563593176742828317759018339985017834419527583974066808244158338944400501316194287688014139016074072704158615716518178655862340720655016423165262299159911614426220681493691797791241165916033279722965176323909837054413414841008111406887926934545759911653982373286921545691043917505214997046523990428947172700557311462666391279463457325238776667861018516319983440844846684156781448137195022934805928774651450708859084306087404758057248584426804095635224740482402382843119371520997051925962857553116743702938377956439510664762264440723629867617522277632270393144224024610102764240476095455686855299907774064277638899113629941058586409929563953013030522647751191306258197386856592387733520688347440180692627642142550417958140477358100047714383718676374028600181295402313603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12a87690af16ad9fabd7b79166d4763561dca58a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1978 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.0lb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4390.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.999esport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airportparkingaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airpump.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aitegroupblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aupi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdsmvideopost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiastatebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chosencommuniquetospottoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cliponbangs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dayalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dipper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eightmileplains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eleccionesenchile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estateplanninggroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gasburner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houseland.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hywayautosalesholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iowatrasurers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetrental.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrcomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kebbel-kunsthandel-auktionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinder-spass-park.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.learnopengl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lenstogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lktravelthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapper.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernsales.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhealthreocrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynatgnpolicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negotiableprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noscrub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ockley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ojogos.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paypoal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philsoriginalbbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.placemysearclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalsinergyrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recruitment-asianagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollawaybed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sozinha.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprtsmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squarmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theatlanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vallleyvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfrontgetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xbet360.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youngs-chocolate-stout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0lb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4390.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '999esport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportparkingaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpump.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitegroupblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanshoponline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aupi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdsmvideopost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiastatebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chosencommuniquetospottoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliponbangs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dipper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eightmileplains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleccionesenchile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estateplanninggroup.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasburner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseland.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hywayautosalesholland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowatrasurers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetrental.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrcomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kebbel-kunsthandel-auktionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinder-spass-park.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnopengl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenstogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lktravelthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapper.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernsales.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthreocrd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynatgnpolicy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negotiableprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noscrub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ockley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojogos.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paypoal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philsoriginalbbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placemysearclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalsinergyrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment-asianagri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollawaybed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sozinha.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprtsmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squarmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theatlanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vallleyvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontgetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbet360.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngs-chocolate-stout.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9abde2e10000040300473045022100b708d46833c656b077e1e0f9d0ea3f67136222d4f84f309e4f3a562fefdc607702203e42de6d6b2297821364525ceb80364316e151825846e9c8f21cca0b8f33c355007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9abde3410000040300483046022100bf159b133275fd6355eb5dfdd2e517fdad9695be7932e93aaa64c3671538231d022100b3543b146b6f5e42b108e586197746a6513aecd4328c49e41dc3daf80925cf84
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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