crisna.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5c:62:59:98:92:d0:7d:e6:67:8f:d8:25:df:54:94:72:fb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crisna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5c:62:59:98:92:d0:7d:e6:67:8f:d8:25:df:54:94:72:fb
Serial Number (int): 379885851036332753148291034307309306409723
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:cc:79:43:f5:c8:7a:48:70:b7:c8:de:4f:f3:6c:08:38:4d:a6:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:c3:c4:e6:76:c8:35:90:59:91:d0:75:10:88:a8:5a:92:ac:0b:1c
Fingerprint (sha256): a3:7c:11:26:82:78:79:68:82:e2:ab:10:c7:78:9b:07:0a:a8:f4:f7:9a:ee:e4:26:43:af:89:1c:87:7f:1a:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crisna.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crisna.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alergicos.com
*.allertonfloorcoveringny.com
*.amitan.com
*.apexpools.com
*.belflower.com
*.bundleware.com
*.buyofftheplan.com
*.celebmafia.co
*.chambleylaw.com
*.chiafullo.com
*.cockroach.com.au
*.comaro.com
*.crisna.com
*.dazzie.com
*.delonghicoffeemachines.com.au
*.desmonds.com
*.ducminh.com
*.facekora.com
*.faizul.com
*.fetayo.com
*.finalexpenselifeinsurance.com
*.frillys.com
*.gearin.com
*.giantesbooru.com
*.heatheresilva.com
*.heuvelmans.com
*.jariel.com
*.johnfindleyphotography.com
*.kuyha-me.com
*.lamaestra.com
*.liburuak.com
*.madousp.me
*.maria-rodriguezrealestate.com
*.medsupport.com.au
*.minnesotawebdesign.com
*.modernlawyer.com.au
*.msteaz.com
*.onlineuniversities.com.au
*.peachtreeventures.co
*.pplrecruitment.com
*.remobil.com
*.rolandjee.com
*.ronwhitepresale.com
*.sariq.com
*.simulater.com
*.spearsbarnco.com
*.tinhangngay.com
*.vigoron.com
*.volatil.com
*.yonso.com
alergicos.com
allertonfloorcoveringny.com
amitan.com
apexpools.com
belflower.com
bundleware.com
buyofftheplan.com
celebmafia.co
chambleylaw.com
chiafullo.com
cockroach.com.au
comaro.com
crisna.com
dazzie.com
delonghicoffeemachines.com.au
desmonds.com
ducminh.com
facekora.com
faizul.com
fetayo.com
finalexpenselifeinsurance.com
frillys.com
gearin.com
giantesbooru.com
heatheresilva.com
heuvelmans.com
jariel.com
johnfindleyphotography.com
kuyha-me.com
lamaestra.com
liburuak.com
madousp.me
maria-rodriguezrealestate.com
medsupport.com.au
minnesotawebdesign.com
modernlawyer.com.au
msteaz.com
onlineuniversities.com.au
peachtreeventures.co
pplrecruitment.com
remobil.com
rolandjee.com
ronwhitepresale.com
sariq.com
simulater.com
spearsbarnco.com
tinhangngay.com
vigoron.com
volatil.com
yonso.com

Other certificates including the domain name crisna.com

(limited to 100 certificates)
crisna.com
crisna.com
crisna.com
rinnovamento.com
crisna.com
crisna.com
sangama.com
crisna.com
badessa.com
crisna.com
crisna.com
crisna.com
dasual.com
crisna.com
dejaynes.com

Certificate

The complete raw certificate details for crisna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379885851036332753148291034307309306409723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 09:06:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 09:06:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crisna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767489349838930153829752596551782993637371966542709579151704127095263222730323673076759170302572195613476740566285034585019119101565650646011774716754163542711397570992975263577524443082111660256924008289888164690104391380768156399583882806379959362744348701002570831171566364539343632030653378551328765732602460162084031758287427911910825246133000373156843169130362092245531511693836205667422312925972411851607868602497062162571203296374454076782137932938707619266424717086683039361623365396430313569953824524790081597914540096153540778870312780874349240467597572565049184046236175672184303232929147264790366822445641814047220168510817473209871283748795518744057445112963718269804497365134326050857265869460794501796746993635885426379082629878304728205797707243376761696056673561955109422685517094034762293830367916852316594392822235919411237856280765170956376881398585702433857363203202206624150023049905618271072999639939903311992199277054326517138202868576593741282126818585594200268872123031332748942965530061091384133647953380342304677291068483346765966494415675873899547779470323808603453620026616854757967829153857151801656706399650895220197161417313506146500201965376288310793022489854671097553224053220152303716424702723103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1cc7943f5c87a4870b7c8de4ff36c08384da692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alergicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allertonfloorcoveringny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apexpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bundleware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyofftheplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celebmafia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chambleylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiafullo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cockroach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crisna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dazzie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delonghicoffeemachines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desmonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ducminh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facekora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faizul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finalexpenselifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frillys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gearin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giantesbooru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heatheresilva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heuvelmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jariel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnfindleyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuyha-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamaestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liburuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madousp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maria-rodriguezrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medsupport.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minnesotawebdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernlawyer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msteaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineuniversities.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peachtreeventures.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pplrecruitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rolandjee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronwhitepresale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sariq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simulater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spearsbarnco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinhangngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vigoron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volatil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yonso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alergicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allertonfloorcoveringny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apexpools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundleware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyofftheplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebmafia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chambleylaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiafullo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cockroach.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dazzie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delonghicoffeemachines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desmonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ducminh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facekora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faizul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalexpenselifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frillys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gearin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giantesbooru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatheresilva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heuvelmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jariel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnfindleyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuyha-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamaestra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liburuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madousp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maria-rodriguezrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medsupport.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotawebdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernlawyer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msteaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineuniversities.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachtreeventures.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pplrecruitment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolandjee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronwhitepresale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sariq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spearsbarnco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinhangngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vigoron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volatil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yonso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0249d8f2000004030048304602210084ec364c4e9231472acc8eb9189cbf8313be5f68d8746ff890dab30a2d565ae8022100c2022968d9b3bd10fe42c6e18333a445a6ddc7ed5a3962573a354f40e954f07c00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d0249dd9100000403004830460221009063b274cf394c4d237d38d226aaef626b2d04aae6eb4a8b36e1a9e558129705022100d9625c7f5780030ff9af259c35f87f4b90c434484b9a3534db33ec7505e2c616
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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