purehomesaunas.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:28:35:b0:e8:67:78:f3:08:4b:73:a5:4c:15:87:e8:1c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=purehomesaunas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:28:35:b0:e8:67:78:f3:08:4b:73:a5:4c:15:87:e8:1c
Serial Number (int): 333530167482201640295688919076682376669212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:2e:a8:b2:4d:6e:16:af:b6:a1:43:8a:b1:cc:8e:cb:ec:af:48:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:2f:45:05:23:1a:90:08:88:4e:20:8c:3f:62:55:be:6f:b8:7c:ac
Fingerprint (sha256): a5:f3:91:c3:a6:7f:eb:74:91:43:99:9a:98:e7:88:6f:77:df:fc:f4:24:d0:33:d5:94:5e:d3:e0:79:a9:9e:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate purehomesaunas.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for purehomesaunas.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.18miny.top
*.3218.au
*.6amtech.co
*.9hits.co
*.angelcare.com
*.anncoulter.org
*.apeedtest.net
*.astarte.com
*.bbth91.xyz
*.creditoycasa.com
*.espbn.com
*.gaigoi.one
*.gslist.org
*.heroesdb.net
*.hickorygov.com
*.jiali172.xyz
*.kat.org
*.lpimatch.com
*.maxcormer.co
*.mayoclinc.co
*.mizuho-ap.co
*.msmsp.top
*.mtciti.com
*.musicracer.co
*.nationwidepaintball.co
*.nelsoncaceres.co
*.orbitza.com
*.paddingtoncapitalmgmt.co
*.parkbooks.com
*.phermania.co
*.placingplatformlimited.co
*.purehomesaunas.com
*.quamut.com
*.rahulsharma.co
*.rathorelabs.co
*.rds301.top
*.reddity.com
*.renuevatuarmario.co
*.salesorce.com
*.saxsfifth.com
*.seasonbot.com
*.seattleymca.com
*.slsp-sk.co
*.strictlyfunk.co
*.strictlyhustlers.net
*.thousandpalmsrealestatelistings.com
*.vcsd.com
*.wackywakky.com
*.worldcubeassociation.com
*.ytstorrentmovies.co
18miny.top
3218.au
6amtech.co
9hits.co
angelcare.com
anncoulter.org
apeedtest.net
astarte.com
bbth91.xyz
creditoycasa.com
espbn.com
gaigoi.one
gslist.org
heroesdb.net
hickorygov.com
jiali172.xyz
kat.org
lpimatch.com
maxcormer.co
mayoclinc.co
mizuho-ap.co
msmsp.top
mtciti.com
musicracer.co
nationwidepaintball.co
nelsoncaceres.co
orbitza.com
paddingtoncapitalmgmt.co
parkbooks.com
phermania.co
placingplatformlimited.co
purehomesaunas.com
quamut.com
rahulsharma.co
rathorelabs.co
rds301.top
reddity.com
renuevatuarmario.co
salesorce.com
saxsfifth.com
seasonbot.com
seattleymca.com
slsp-sk.co
strictlyfunk.co
strictlyhustlers.net
thousandpalmsrealestatelistings.com
vcsd.com
wackywakky.com
worldcubeassociation.com
ytstorrentmovies.co

Other certificates including the domain name purehomesaunas.com

(limited to 100 certificates)
purehomesaunas.com
purehomesaunas.com
purehomesaunas.com
purehomesaunas.com

Certificate

The complete raw certificate details for purehomesaunas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333530167482201640295688919076682376669212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 14:03:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 14:03:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'purehomesaunas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923242296632340948021596329127389309340937144143499185058361990472788290923016985730134486412115880492252935206126767837811762630320559868339466024340197669626299220778545157524368644979009128532395920529667773952782215087236137785660378289668821268641784314996143217874272195994177906393419801670640372713087457005759409949236505976458641514996952232927802996068930847082850158842242027697548221157253257910417762771709751689177480193300111454323866631267649159288038478281646675296293442266022725209165840950785485873039462095641292221941278811818651158545234612949564664204092516155017116455871911982473820241075068839898863108908956901912593572761828991416315005819820730229438501963643711489177070452215032210356827596959866767401368442564918592758253811107634934875875136921863392474766089512705874782577274861489247558936088187120919723938984310447223474022960095844266243455521878498541984513997950008632094561673559928036690274697447421002475985002109839519989685822869863418469208284892217545016134773360408663460744395428180864139851438043625248027786732181719697462529062014048009912798145742919100013642656706820138177945354459327184054211867111842048084613518713373051442516781110559063853490357570797097390809049696581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b42ea8b24d6e16afb6a1438ab1cc8ecbecaf48ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1672 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18miny.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3218.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6amtech.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9hits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anncoulter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astarte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbth91.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditoycasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espbn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaigoi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heroesdb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hickorygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiali172.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxcormer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayoclinc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mizuho-ap.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msmsp.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtciti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicracer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationwidepaintball.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nelsoncaceres.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paddingtoncapitalmgmt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phermania.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.placingplatformlimited.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purehomesaunas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quamut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rahulsharma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rathorelabs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rds301.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reddity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renuevatuarmario.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salesorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saxsfifth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seasonbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seattleymca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slsp-sk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strictlyfunk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strictlyhustlers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thousandpalmsrealestatelistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wackywakky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldcubeassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ytstorrentmovies.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18miny.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3218.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6amtech.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9hits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anncoulter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apeedtest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astarte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbth91.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditoycasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espbn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaigoi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gslist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heroesdb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hickorygov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiali172.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpimatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxcormer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayoclinc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mizuho-ap.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msmsp.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtciti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicracer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationwidepaintball.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncaceres.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paddingtoncapitalmgmt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phermania.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placingplatformlimited.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purehomesaunas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quamut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rahulsharma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rathorelabs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rds301.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renuevatuarmario.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesorce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saxsfifth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seasonbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattleymca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slsp-sk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strictlyfunk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strictlyhustlers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thousandpalmsrealestatelistings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wackywakky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldcubeassociation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytstorrentmovies.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc1e4c7bb0000040300463044022001115ff693addc89fb9d86fe1802c68213a2ada2ce61506a1f29d9d145d4a1380220339c77b3c36eba2ccb494f7d158a145a5a54d74d0ecb7e6e877028822a3c732900750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc1e4ca340000040300463044022014cbadbbfc2110a5c5c6293e1e39a335607ec2914eb10403a9506999975983b602200a0c8ae546c15cf357cd7e859b360e845bb2037d8df238d5a6fee2e21f9c5048
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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