planodeprevidencia.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a7:5b:34:e5:0a:27:52:3d:d2:38:8a:41:2b:81:2b:18:88 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=planodeprevidencia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:5b:34:e5:0a:27:52:3d:d2:38:8a:41:2b:81:2b:18:88
Serial Number (int): 318285247463606784694343845145121865275528
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:02:50:85:6a:d1:68:cd:6a:e3:d7:2e:79:e9:17:56:b8:4d:90:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d0:d3:65:38:e4:b1:24:37:43:2e:e6:46:f0:9a:ed:67:b7:a7:22:ab
Fingerprint (sha256): a4:09:cb:fb:83:d4:17:fb:16:23:49:97:12:ad:a3:32:b1:7a:64:8f:9e:e4:50:d5:bd:1b:91:38:4a:10:9b:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate planodeprevidencia.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for planodeprevidencia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.09nt.com
*.2bacalhaus.com
*.airnerdshvac1.com
*.annabelleblack.com
*.aprendefinale.com
*.atlantahosting.net
*.belajarfiberoptik.com
*.biovitamaroc.com
*.boudutoo.net
*.comcastarenaeverett.com
*.concept-gmbh.com
*.cyberlimbs.com
*.cyberorthosis.com
*.diexinc.com
*.dny001.com
*.donperro.es
*.enoughoccupation.org
*.etotope.net
*.fance.info
*.hkoffshore.com
*.homesteadfowl.com
*.hpedata.com
*.kinkbomb.net
*.labrotix.com
*.laczymaspilka.pl
*.lk21com.com
*.masks4schools.com
*.max-pix.com
*.miramarconnect.com
*.ngnxw.com
*.ostadkit.com
*.persiakart.com
*.planodeprevidencia.com
*.ptutchiz.com
*.qickbase.com
*.saleshyundaibogor.com
*.scarabocchiando.com
*.skillsforsuccess.co
*.studiogoldsmith.com
*.theskincooperative.co
*.tokokuliner.com
*.tovlibox.com
*.tripmandi.com
*.undostecgaming.com
*.uruguaynps22slan.org
*.vfstreamiz.com
*.vintechdevelopers.com
*.viptestersclub.com
*.wagnerwoodco.com
*.website360degree.com
09nt.com
2bacalhaus.com
airnerdshvac1.com
annabelleblack.com
aprendefinale.com
atlantahosting.net
belajarfiberoptik.com
biovitamaroc.com
boudutoo.net
comcastarenaeverett.com
concept-gmbh.com
cyberlimbs.com
cyberorthosis.com
diexinc.com
dny001.com
donperro.es
enoughoccupation.org
etotope.net
fance.info
hkoffshore.com
homesteadfowl.com
hpedata.com
kinkbomb.net
labrotix.com
laczymaspilka.pl
lk21com.com
masks4schools.com
max-pix.com
miramarconnect.com
ngnxw.com
ostadkit.com
persiakart.com
planodeprevidencia.com
ptutchiz.com
qickbase.com
saleshyundaibogor.com
scarabocchiando.com
skillsforsuccess.co
studiogoldsmith.com
theskincooperative.co
tokokuliner.com
tovlibox.com
tripmandi.com
undostecgaming.com
uruguaynps22slan.org
vfstreamiz.com
vintechdevelopers.com
viptestersclub.com
wagnerwoodco.com
website360degree.com

Other certificates including the domain name planodeprevidencia.com

(limited to 100 certificates)
planodeprevidencia.com
planodeprevidencia.com
pinterestshopping.com
danielwellinton.com
bloggingstation.com
planodeprevidencia.com
planodeprevidencia.com
planodeprevidencia.com
freepoenhdonline.com
ivideohomes.com
planodeprevidencia.com
planodeprevidencia.com
photobunner.com
templatecompare.com

Certificate

The complete raw certificate details for planodeprevidencia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy91nQnwkkeFxya07bZE+
9Lp1SCxPvQQgM+dARjsEHWv/7szAHsw3DmUqusmkGd5OTFbQy7GOQon/Tb/cn4OQ
h7lUJ1TU0G2Hw9QphSaA0fS4bXAuZI6xVlYGB0EVjf2IPYw67kRKAS6nH/Jz5o1Q
6jJ9Y7ilM2PiEAcnrOOII+2/cM9XqqcSfFKEsEzOxe7QhSO6M2Whw99CCJ6ZsMuv
Fh5ITPCWbUk68r1SamGAg11TLo1JwvNaB5CHp0hdA/LRcYS6bNUBJ4++v/m20ekY
2kFta4M8uNkf99NgcLkYMwIfo3is5dq1/58GFDtnQRmB6MzR0qfJDXJ+Xfe88sII
l5Zf93mkzU6UrnJn3+ILMQLOqA6KRU2HrwxYRbsFEPRJjkphZpnxMiQxuZQNt7Mp
ZxcEeRmUIE3WPGiw9fCgzLEM++7MdBAzb6ZMmM9Dvs42sd5w9uMBSyeKy3XnBIah
48EBkhOvSerBmB+6joOTkwoKyGqAZitP05iNoMfqriINNMTFZYrDM7V/jbOEXo+R
sX8AzU9TNLmvo9s9T+pL/6SIesX5TfVQs+PNTYq7wxqq/5v27lJRG+VYTWP09nVI
riRaFk2jjeRHh0zKqXywDoANHDyrV6EJshiQYnma8ZgjytbTFB79jnbcMn+HVSt9
yDayRgaKJo96ogLY/G0rdRsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318285247463606784694343845145121865275528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 18:51:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 18:51:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'planodeprevidencia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831696053999652163269529255586084924608709547124591708389365030411552933055109005700750208191455729238461259978106260270121209362570537007995974654870512169529543900638018039286289128086170702207998707893561086354099103102241719010496616901406394693283434454340886760175074756707953935914861290960608096174412251157331954332608090112771592079913531511723928208481340198328129683598775812735822169834123832288769802601192636240474990786160429056898094546443406108107377277943382967982829531831928917631211397751992149763790001485649518908450405330118165892267188001935852119699275388333219006850261124275467255313645474535903996762541097549648211963147013713551655013211083626951552294441024003765230540976772139642906981994990542200526957224387541267886078752543249846831411226373208339063940655602320399089394019804314741223232911214513056940662822781685534584440305019460075321735824210864207863679654599102601482930265664632810398686754883728495850447996475368978356261485902145085325920407688856556528591104360481389060460943021757940545998373750924297640842395437241216408642393022624814833236873454943922311015288528798196935128521155753265174160115661456101076002007247986613331427585014801754545212254857961874485314618881307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							660250856ad168cd6ae3d72e79e91756b84d9059
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.09nt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2bacalhaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airnerdshvac1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annabelleblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprendefinale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantahosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belajarfiberoptik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biovitamaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boudutoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comcastarenaeverett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concept-gmbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyberlimbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyberorthosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diexinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dny001.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donperro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enoughoccupation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etotope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homesteadfowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinkbomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labrotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laczymaspilka.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lk21com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masks4schools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.max-pix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miramarconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngnxw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostadkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.persiakart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planodeprevidencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptutchiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qickbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saleshyundaibogor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scarabocchiando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skillsforsuccess.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studiogoldsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theskincooperative.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tokokuliner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tovlibox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripmandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.undostecgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uruguaynps22slan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfstreamiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vintechdevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viptestersclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wagnerwoodco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.website360degree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '09nt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2bacalhaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airnerdshvac1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annabelleblack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprendefinale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantahosting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belajarfiberoptik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biovitamaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boudutoo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcastarenaeverett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concept-gmbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberlimbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyberorthosis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diexinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dny001.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donperro.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enoughoccupation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etotope.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkoffshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesteadfowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinkbomb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labrotix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laczymaspilka.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lk21com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masks4schools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'max-pix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miramarconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngnxw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostadkit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persiakart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planodeprevidencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptutchiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qickbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleshyundaibogor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scarabocchiando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillsforsuccess.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiogoldsmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theskincooperative.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokokuliner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tovlibox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripmandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undostecgaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uruguaynps22slan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfstreamiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintechdevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viptestersclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wagnerwoodco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website360degree.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c64bbed3c000004030047304502200955cf9aaf1bf781ed631e5b6a8aa87cbf6d3d3f49a84efd5ab46c1af331e982022100afa99214711530da1cde35b54e6d2ea0162f46e84c299e3180af07e779af8f8d00750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c64bbee23000004030046304402203ae2d18196b6cd071b248c9ba0f6d39d2a2fcdbbc831c90c5a2161a8b4306bd702203e802c0a44d4cc8691a1585a0048a277a5cf91f01e5da113967b84ac087af550
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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