blu.fund

Issued by R3

About this certificate

This digital certificate with serial number 03:fd:cc:f7:f9:03:5a:4c:3a:a4:f9:e4:6b:43:e2:1b:67:92 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blu.fund

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fd:cc:f7:f9:03:5a:4c:3a:a4:f9:e4:6b:43:e2:1b:67:92
Serial Number (int): 347700746685327973739597566874051784959890
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:36:7a:9a:6f:ed:ce:1b:a9:0a:e8:3d:e1:36:e5:37:82:52:b4:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:9a:5c:36:61:bc:5c:9d:b5:bf:da:db:03:01:d0:34:60:31:d4:93
Fingerprint (sha256): a4:c8:c4:d1:d5:7b:a2:55:b0:25:b1:29:2e:f6:6a:3e:43:38:cd:b1:29:aa:50:14:6c:14:bf:91:4c:3c:fa:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blu.fund

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blu.fund

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3g16.com
*.ana-maria.consulting
*.arafathasan.com
*.arthitis.org
*.astrologypsychicaffiliation.org
*.bendigoskipbinhire.com.au
*.benny-drecher.com
*.berngov.com
*.betterfoodsonline.com
*.blackjackturnering.com
*.blu.fund
*.borisbet.com
*.bravofly.software
*.carapelliforart.com
*.catholicmatc.com
*.childandfamilyfoundationstore.com
*.colorscapeapp.com
*.congentco.com
*.countrylane.com.au
*.crankyyankee.com
*.donerschoose.org
*.fancyree.com
*.fdoe.org
*.federalmotorcarriers.com
*.getmyrobux.com
*.indianarmynic.in
*.iptvtrus.net
*.koukouwangming.com
*.lumarahealth.com
*.marumaru272.com
*.moigioiviet.net
*.nydumpster.com
*.optiumonline.net
*.otonaschool.com
*.realestategosford.com.au
*.reducesimage.com
*.renoldskitchens.com
*.rykashoes.com
*.seodarwin.com.au
*.smsinfo.com.au
*.surfboardcamera.com
*.synoyms.com
*.ten0.com
*.thisbeghana.com
*.typingpro.com
*.viewpointsgalleryhawaii.com
*.webantenna.org
*.wwwhcpci.com
*.wwwwinco.com
*.xxvideosporno.com
3g16.com
ana-maria.consulting
arafathasan.com
arthitis.org
astrologypsychicaffiliation.org
bendigoskipbinhire.com.au
benny-drecher.com
berngov.com
betterfoodsonline.com
blackjackturnering.com
blu.fund
borisbet.com
bravofly.software
carapelliforart.com
catholicmatc.com
childandfamilyfoundationstore.com
colorscapeapp.com
congentco.com
countrylane.com.au
crankyyankee.com
donerschoose.org
fancyree.com
fdoe.org
federalmotorcarriers.com
getmyrobux.com
indianarmynic.in
iptvtrus.net
koukouwangming.com
lumarahealth.com
marumaru272.com
moigioiviet.net
nydumpster.com
optiumonline.net
otonaschool.com
realestategosford.com.au
reducesimage.com
renoldskitchens.com
rykashoes.com
seodarwin.com.au
smsinfo.com.au
surfboardcamera.com
synoyms.com
ten0.com
thisbeghana.com
typingpro.com
viewpointsgalleryhawaii.com
webantenna.org
wwwhcpci.com
wwwwinco.com
xxvideosporno.com

Other certificates including the domain name blu.fund

(limited to 100 certificates)
vollmersubstationproject.com
coolmax.pro
desidrama.su
vollmersubstationproject.com
diana-free-reading.com
casaderuidoso.com
sbo.es
prepaid-visa.com
battlebar.com
ceti-micorscopes.com
blu.fund
creditcardselect.com.au
diana-free-reading.com
blu.fund
astrologypsychicaffiliation.org
astrologypsychicaffiliation.org
prepaid-visa.com
battlebar.com
vollmersubstationproject.com
blu.fund
vollmersubstationproject.com
vollmersubstationproject.com
stopforeclosurebankruptcy.com
ceti-micorscopes.com
battlebar.com
blu.fund
battlebar.com
vollmersubstationproject.com
desidrama.su
sbo.es

Certificate

The complete raw certificate details for blu.fund in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347700746685327973739597566874051784959890
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-21 19:23:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 19:23:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blu.fund'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817855422306464020276372393251622916959106206471255119848459099796700737177829841865017903321184097401794801454899088571587157997689846167658307083487910299027135579492730194768549794246515956046802094621163520801120892864595796838598471902143633010396873813240177391533710827318085962556151661327508841520630359695415015069154225868381509578502490148133771850810334011748725835658998777225576671080135535139300795126388410907212542009968234353203336075629892737793276020658410468531283005780493746923576164230622238552547799625959142833701472979930270244114999755409439199100633586022436611132338163018525696065861439829832208175582036800173607724552565118752117099437931619952050332851032435469981944002652368403645323892571915411327396885475747900071026339974827468769605220751756236055565258715056170099175126358390183364735887176382075980900386852827214601877491592926352615344300459367247290250048982038608890768096831779295888160155288069221666379900695778958865113380556431702427734760368616140274536811829290681429440766637687872314256176717863255827978337259318750675952555508484987780341708199898332217605029764911475654235383801368752444907480913890586857839163278359565373416772206380215421036332505303738940289000183289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64367a9a6fedce1ba90ae83de136e5378252b4dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1928 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3g16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ana-maria.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arafathasan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arthitis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrologypsychicaffiliation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bendigoskipbinhire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benny-drecher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berngov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterfoodsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackjackturnering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blu.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borisbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bravofly.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carapelliforart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catholicmatc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childandfamilyfoundationstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorscapeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.congentco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countrylane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crankyyankee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donerschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancyree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federalmotorcarriers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getmyrobux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianarmynic.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iptvtrus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koukouwangming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumarahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marumaru272.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moigioiviet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nydumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optiumonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otonaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realestategosford.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reducesimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renoldskitchens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rykashoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seodarwin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smsinfo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfboardcamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synoyms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ten0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thisbeghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.typingpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viewpointsgalleryhawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webantenna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwhcpci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxvideosporno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3g16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ana-maria.consulting'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arafathasan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arthitis.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrologypsychicaffiliation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bendigoskipbinhire.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benny-drecher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berngov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterfoodsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackjackturnering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blu.fund'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borisbet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bravofly.software'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carapelliforart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catholicmatc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childandfamilyfoundationstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorscapeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congentco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrylane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crankyyankee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donerschoose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancyree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdoe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federalmotorcarriers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getmyrobux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianarmynic.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvtrus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koukouwangming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumarahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marumaru272.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moigioiviet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nydumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiumonline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otonaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestategosford.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reducesimage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renoldskitchens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rykashoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seodarwin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smsinfo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfboardcamera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synoyms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ten0.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thisbeghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typingpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpointsgalleryhawaii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webantenna.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwhcpci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwinco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxvideosporno.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001849bdbc5350000040300463044022068f30bf680aca1d1b1dfde2b100cc406238b4c6c4051ced0e4c4bff9c668263e0220195b229e384d9944dbe85686f513762da6a304f6bfef0464b18ae9db580172a3007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001849bdbc54d0000040300473045022100eb5c5e9e637da5ccb32f2556b31b92ed040182276ab9d71ad770818072dd1df0022023dc87ac023a1c6b47d5bce046b119129a79f0fddfcfb03c24f34b1780a186e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a293b81fbd29a4581ced96e72870657d8a8c02316edc51f8651dcbc394e96369b4d023d8a37ee9972595c45e2cc11bb52a06bb2a346e8a0e1fda031c2ead798b3acce1b0fe24bc5d6f67d69326099694201af87bdb41ba34345185fd58521e3ae223fc07515313614eae16040af53d7c5a709528418e98ab44df30769c15b48f1e7b3456328f0e2bcd53c1a3f477b7125e1768f0ddf75400a26ecb02ab9ede4ced89cc5b1243798d8e014c5142ff8f3357985ee2f4478ef5dee802cd92986d025bb1bd8ece48f1e3a0a793b13031501be18e4090a5e602d1a5e01108d038c5ec550d5ba06c324ee673d97c149c4cec361dfa0a2207948f3eb064d82ed34f540f