kukwa.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:83:1a:9f:af:f8:42:bb:0d:64:0d:58:1a:ff:b6:52:24 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kukwa.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:83:1a:9f:af:f8:42:bb:0d:64:0d:58:1a:ff:b6:52:24
Serial Number (int): 295879643960306559010022468490093634408996
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:60:7b:47:4f:7f:af:8e:69:79:a9:02:f5:e6:16:79:9b:c1:26:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:d0:cf:f1:9b:1e:e1:52:c7:ca:8a:c8:06:be:dd:30:91:42:3e:5a
Fingerprint (sha256): a4:2a:0e:1f:01:1c:69:30:87:a0:bb:ad:3c:c5:2d:00:46:c1:0f:2f:2c:8c:9e:2d:9c:05:2b:07:b9:eb:95:f4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kukwa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kukwa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aprenderespanhol.com
*.arlingtonhome.com
*.aucun.com
*.bravmann.com
*.bulalo.com
*.cachon.com
*.carboxiterapia.net
*.conteudoglobal.com
*.daebak.com
*.dzxl.com
*.elrecord.com
*.francesinha.com
*.geologica.com
*.goofygifs.com
*.gravadoras.com
*.holdingler.com
*.homeyacht.com
*.jlinn.com
*.jordistudio.com
*.juewang.com
*.kukwa.com
*.lanae.com
*.ledret.com
*.lhen.com
*.longfoot.com
*.losmariachisrestaurant.com
*.majjj.com
*.masalah.com
*.mccormac.com
*.miklosko.com
*.monod.com
*.negozi.com
*.nestoras.com
*.onigashima.com
*.phuthai.com
*.povijest.com
*.rafia.com
*.rusk.org
*.rutgers.org
*.sazzad.com
*.shinichi.com
*.shopcel.com
*.sobremoda.com
*.sportlements.com
*.timewarnercble.com
*.tyrena.com
*.wanaku.com
*.wiitv.com
*.wsbb.com
*.xteriorsolutions.com
aprenderespanhol.com
arlingtonhome.com
aucun.com
bravmann.com
bulalo.com
cachon.com
carboxiterapia.net
conteudoglobal.com
daebak.com
dzxl.com
elrecord.com
francesinha.com
geologica.com
goofygifs.com
gravadoras.com
holdingler.com
homeyacht.com
jlinn.com
jordistudio.com
juewang.com
kukwa.com
lanae.com
ledret.com
lhen.com
longfoot.com
losmariachisrestaurant.com
majjj.com
masalah.com
mccormac.com
miklosko.com
monod.com
negozi.com
nestoras.com
onigashima.com
phuthai.com
povijest.com
rafia.com
rusk.org
rutgers.org
sazzad.com
shinichi.com
shopcel.com
sobremoda.com
sportlements.com
timewarnercble.com
tyrena.com
wanaku.com
wiitv.com
wsbb.com
xteriorsolutions.com

Other certificates including the domain name kukwa.com

(limited to 100 certificates)
backtoschoolsales.com
mutacion.com
a001.pro
kukwa.com
sexpillen-8000mg.de
sexpillen-8000mg.de
sexpillen-8000mg.de
idirvesafely.com
sexpillen-8000mg.de
kukwa.com
sexpillen-8000mg.de
sexpillen-8000mg.de
sexpillen-8000mg.de
kukwa.com

Certificate

The complete raw certificate details for kukwa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295879643960306559010022468490093634408996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 08:54:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 08:54:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kukwa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702331866296617565250830335767293648913356063106125726049422692734157272375341787565643560182382228901171505457511489975554911651762011209341771400296184785686309951305287895071307312353634990448147264637405295536854152860009258627354760329744091345966228056066771818831200139037721459040474118722728814296025271932212667658642233768940888406073875134544333361128743064959040032193080926377369663577308715869321433019619441368085021246640861047180408115715173169398442892005207219560528994820230876467256906464695732556750698587597173702687624411111069009960093584363916761024157297713328815248825990823446110277165233924878856308373902404056210601061866563507217972546353300971853058949858026366539033297489532848432115147132642099226722251768159181307558530281643175848381060296236574520042816437086717603049392066525441045617590705608422675942523721751174443052351425776801634328513702009851466316504781860232257411137850504163691118464260648889149474130893091597203429359906446463442399278638003549193963803732667161186424387412247308659824976178476828105992998503110007020518763586351849377499108008952146014268147294623919759567392529268227626625572365474587335763899846504387498247520046941674127271848070444703101564458903573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c607b474f7faf8e6979a902f5e616799bc12653
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1528 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprenderespanhol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arlingtonhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aucun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cachon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carboxiterapia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conteudoglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daebak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dzxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.francesinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geologica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goofygifs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gravadoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holdingler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeyacht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jlinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jordistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juewang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kukwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ledret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lhen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losmariachisrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.majjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masalah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccormac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miklosko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negozi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nestoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onigashima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phuthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.povijest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rafia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rusk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rutgers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sazzad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shinichi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sobremoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportlements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timewarnercble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyrena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wanaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsbb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xteriorsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprenderespanhol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arlingtonhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cachon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carboxiterapia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conteudoglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daebak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francesinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geologica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goofygifs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravadoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdingler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeyacht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jordistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juewang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kukwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losmariachisrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majjj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masalah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccormac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miklosko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negozi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nestoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onigashima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuthai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'povijest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rusk.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rutgers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sazzad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shinichi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sobremoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportlements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timewarnercble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanaku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsbb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xteriorsolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016daff15d2200000403004630440220124c07c6fca57f9051f77279bb8884f5e002b886a935dcfe403cf5ee16541fc4022047dde543c09c82408a8e2872366dbdd22190c75df77825c42b8fd868f21c75e2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016daff15d5c0000040300473045022069691d66d8a6ee1aae977852d743d44900b82423993244d0d5df334e18f17ffb022100a9723557494b85d0b28042f0cb8be1ecdd74a59ff59faecffd1fc884ab259f0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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