e-daf.org

Issued by R3

About this certificate

This digital certificate with serial number 03:3c:00:fa:34:de:e1:b5:bf:79:7c:fe:0f:e6:3b:2e:9f:6d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=e-daf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:00:fa:34:de:e1:b5:bf:79:7c:fe:0f:e6:3b:2e:9f:6d
Serial Number (int): 281755098957095486769631066371761294450541
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:10:65:5e:2b:7b:40:b8:88:ec:cf:14:8e:a3:23:12:40:4d:76:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:64:62:13:28:ca:db:9f:a7:97:13:58:90:5c:02:07:ed:b4:63:a6
Fingerprint (sha256): a5:d4:0d:e7:0b:a6:d5:e9:89:b0:10:84:58:56:23:7c:59:b1:3e:5a:03:d7:11:12:f5:0a:e2:48:26:40:0a:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate e-daf.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e-daf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1843.net
*.aerialupgrades.com
*.broskey.com
*.cardova.com
*.collarspace.co
*.costreporting.com
*.crdf.de
*.devantier.com
*.dowser.com
*.e-daf.org
*.e-edis.de
*.evergreencreditunion.com
*.jackone-bonus.de
*.jaguardefy.top
*.knocka.com
*.lestrouvailles.com
*.lightningconsulting.com
*.limpiafondos.club
*.lumanog.com
*.markmodels.com
*.miding.com
*.mounted.com.au
*.muychevere.com
*.narmol.com
*.oxoo.com
*.pattaya.au
*.pawlenty.com
*.penspinning.com
*.peoplecloning.com
*.piscopo.com
*.qpd.in
*.quilten.com
*.sangh.com
*.schaeferfamily.com
*.signaturelingerie.com
*.solveazure.com
*.spanishtranslate.com
*.staff3.com
*.the-dumb-post-inn.co.uk
*.tithonia.com
*.toccoaclinic.com
*.ujpest.com
*.umbralyoga.com
*.usedsaddles.com.au
*.vdona.com
*.verdines.com
*.wamj.com
*.watchgurad.com
*.wishart.com.au
*.woosang.com
1843.net
aerialupgrades.com
broskey.com
cardova.com
collarspace.co
costreporting.com
crdf.de
devantier.com
dowser.com
e-daf.org
e-edis.de
evergreencreditunion.com
jackone-bonus.de
jaguardefy.top
knocka.com
lestrouvailles.com
lightningconsulting.com
limpiafondos.club
lumanog.com
markmodels.com
miding.com
mounted.com.au
muychevere.com
narmol.com
oxoo.com
pattaya.au
pawlenty.com
penspinning.com
peoplecloning.com
piscopo.com
qpd.in
quilten.com
sangh.com
schaeferfamily.com
signaturelingerie.com
solveazure.com
spanishtranslate.com
staff3.com
the-dumb-post-inn.co.uk
tithonia.com
toccoaclinic.com
ujpest.com
umbralyoga.com
usedsaddles.com.au
vdona.com
verdines.com
wamj.com
watchgurad.com
wishart.com.au
woosang.com

Other certificates including the domain name e-daf.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for e-daf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281755098957095486769631066371761294450541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 00:45:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 00:45:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e-daf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668436286033294302032912588136510973278302686894467485728090727397508781848094212155576508146900288603037819435306040163773351755797347481292186780777836060544766359701673998285670824976864449273896319925611400894964519947661293529521240918989715804589464048818430104501014898239209300983574715509285347707491570935791226294508830164342833325550804060411728972633453702731056205828610073324466212064992798059458910460039309157757716386200529155053053067843887721872675499964887030968999271800457303360415094727565150154524005713856041435689483490614817765445332204796520405073404271167568356390399560923590362046870048997071165777080203494778690547692347298615048397081971870222737113735714277347659614836041441036334508838124277169692098990020166874903855396622953163246196284251860675398946026948746112170161368279403324925811866161170225148745984261360284906947737655954630111260413337188008974936953116478048003113982932184873511171195473015420852293691632160840130795333966802440292788802558211855021721595564200212895232660637104489461525028845022303585572759902829982304536214532554609216985128493973047272364004524282211549388934961108938050832416147638992264008137683641207523800866239832824889951952210411859405501997262003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f10655e2b7b40b888eccf148ea32312404d7657
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1843.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerialupgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broskey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collarspace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costreporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crdf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devantier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-daf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-edis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evergreencreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jackone-bonus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaguardefy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knocka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lestrouvailles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightningconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limpiafondos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumanog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mounted.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muychevere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narmol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pattaya.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawlenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penspinning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peoplecloning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piscopo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qpd.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quilten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sangh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schaeferfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signaturelingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solveazure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spanishtranslate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-dumb-post-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tithonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toccoaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ujpest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umbralyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedsaddles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vdona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verdines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wamj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchgurad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wishart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woosang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1843.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerialupgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broskey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collarspace.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costreporting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crdf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devantier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dowser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-daf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-edis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreencreditunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackone-bonus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaguardefy.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knocka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lestrouvailles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightningconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limpiafondos.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumanog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mounted.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muychevere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narmol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pattaya.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawlenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penspinning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplecloning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piscopo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qpd.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quilten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schaeferfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signaturelingerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solveazure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spanishtranslate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-dumb-post-inn.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tithonia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toccoaclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujpest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umbralyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedsaddles.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wamj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchgurad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wishart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woosang.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018966acfbd90000040300463044022051d9224ccbb4583288efe74c58b1b5be691a2ab4eceedba1aed66bba9ecfec8f02200b8ed1e185a342966b6fff2f0836294fe7b662c503f898ecbe40cf149d2d5050007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018966acfc8d000004030047304502202b9a5cd5373ba39bdb909d60fc2f3344ce6182dcb1b8bd69938991b5856096f8022100bec0b80dcbae59d021fc7ef14633abfc84ab7a0f17b30d7ac1cc2245b9318cb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d8a2e75cf5f1a9a2d42f9f1164865be39b066b24aded06af8801de92411672616c8ac0628eb97725b4f527049801cd8a55e212bdb97d7c143f0e154fb0bcff58b3d90d85fcd4f3bcfb3654ded45b4f3224211f62b7906adc708c07573ad4af206e90350c1d46c28bd89fa51b3b3bcbfcb546deaeb9e173702adb352549749cdf45ee0c06c13716656eaaf8311dbe2bef94c863efe9d8959b6e24a64f41bafed9580512bf530433231da0aa7c697d2698a543d6ee8b39d751ef28ce379eac1e23c3f373c0d99894f7b7335b24036c609422a82096654b95fd4d8755647e28429b65c2c8819827543e3d11a3ed55559fbf86e0b37cc72189740dcf8a003ead9f9