healthallianceplan.org

Issued by R3

About this certificate

This digital certificate with serial number 03:14:1a:75:40:bf:ef:dd:58:9f:f3:93:bf:b4:21:3e:f6:07 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=healthallianceplan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:1a:75:40:bf:ef:dd:58:9f:f3:93:bf:b4:21:3e:f6:07
Serial Number (int): 268177673873603393779070894008536731153927
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:a9:30:02:a3:6a:43:43:b3:77:5a:06:62:19:7c:58:2e:98:0b:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:4b:dd:2c:cb:c8:c2:65:a4:78:5e:ff:7b:94:16:e7:d7:f7:4e:75
Fingerprint (sha256): a6:dd:ee:bf:df:ab:93:13:14:50:64:f1:29:e9:d2:bf:ce:7e:d9:a8:25:0a:52:94:bf:5b:2c:91:2c:74:99:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate healthallianceplan.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for healthallianceplan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achblueten.de
*.americannitional.com
*.anzeichen-von-depressionen.de
*.asiangirl.info
*.assyrianaustraliansocialdevelopmentclub.org
*.astrokeabove.com
*.barradobugresonline.com.br
*.bisexualdating.vip
*.bitcoincartera.com
*.blasenntzuendung.de
*.bundesarztkammer.de
*.dharris.com
*.fundaciondarchile.org
*.gardenersaadvice.info
*.goststream.site
*.healthallianceplan.org
*.huayraquimbal.org
*.ikkouan.com
*.itutor.online
*.junita.com
*.koerperfunktionen.de
*.krankengmnastik.de
*.lds.tools
*.marlald1.top
*.mtwer.org
*.mutiple-sklerose.de
*.nuestracultura.com
*.orientierungsfaehigkeit.de
*.podologiea.de
*.psyzhologie.de
*.pulsa-aqui-para-ver.info
*.rugworld.org
*.seakingarrangments.com
*.steamengines.com.au
*.sysloveme.com
*.talkwithgirl.xyz
*.thehealth-line.com
*.thompsonsgolfcarts.com
*.uniquetwist.com
*.vibrater.com.au
*.viplocalsexycontacts.top
*.vitamin-t-mangel.de
*.vulcanologia.com
*.woodenshutters.com.au
*.xn--ernhrngsberatung-xnb.de
*.xn--ferienhuserg-mcb.de
*.xn--ferienhuserh-mcb.de
*.xn--llungenentzndung-tzb.de
*.xn--steuerermklrung-blb.de
*.xpromakets.com
achblueten.de
americannitional.com
anzeichen-von-depressionen.de
asiangirl.info
assyrianaustraliansocialdevelopmentclub.org
astrokeabove.com
barradobugresonline.com.br
bisexualdating.vip
bitcoincartera.com
blasenntzuendung.de
bundesarztkammer.de
dharris.com
fundaciondarchile.org
gardenersaadvice.info
goststream.site
healthallianceplan.org
huayraquimbal.org
ikkouan.com
itutor.online
junita.com
koerperfunktionen.de
krankengmnastik.de
lds.tools
marlald1.top
mtwer.org
mutiple-sklerose.de
nuestracultura.com
orientierungsfaehigkeit.de
podologiea.de
psyzhologie.de
pulsa-aqui-para-ver.info
rugworld.org
seakingarrangments.com
steamengines.com.au
sysloveme.com
talkwithgirl.xyz
thehealth-line.com
thompsonsgolfcarts.com
uniquetwist.com
vibrater.com.au
viplocalsexycontacts.top
vitamin-t-mangel.de
vulcanologia.com
woodenshutters.com.au
xn--ernhrngsberatung-xnb.de
xn--ferienhuserg-mcb.de
xn--ferienhuserh-mcb.de
xn--llungenentzndung-tzb.de
xn--steuerermklrung-blb.de
xpromakets.com

Other certificates including the domain name healthallianceplan.org

(limited to 100 certificates)
aus-mail02.com
healthallianceplan.org
aus-mail02.com
viprashop.pro
aus-mail02.com
viprashop.pro
healthallianceplan.org

Certificate

The complete raw certificate details for healthallianceplan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268177673873603393779070894008536731153927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 11:29:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 11:29:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'healthallianceplan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727652476782108074343254437362345036118511999754453479898958995816184738375271706736635705506713440658517215579244772207230131198895665670866038972081894623568440211012913657509960470101285263753253679241643184703022118880375804162679371666657428635915174317558056258498866900386782219820610757756086363343039897967993772160746647603749328209023838815866121915388894275878472916841283174685044575385626763243988461972457498428290808252845061094847037620161402441218614493790751187914678484397192002893939473490476117817346125242950415737728555554924533469726101928721189261271652563386444919550000676115123704296869439262933374854992964027830459886819971904052152638761430773462872338530403621091995539857556994568420092501254548674465160319086078459360552825804061299487080996247282292896438335237644483214127201692533539667059719727508090617353814088742624502628371784607797532046178620787609973134151418296119015529654295072825103767558032302816084313392738024157340125795660318207473942809702465965733116681590226084543998169578657248486908865877121402161421990178664345040345016777937739759003650169014444090590638186953435691413416294326684563464521059664816451637302185007210373636617302351774534983313008107946456814426148717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60a93002a36a4343b3775a0662197c582e980bb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achblueten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americannitional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anzeichen-von-depressionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asiangirl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assyrianaustraliansocialdevelopmentclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrokeabove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barradobugresonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bisexualdating.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoincartera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blasenntzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bundesarztkammer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundaciondarchile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardenersaadvice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goststream.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthallianceplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huayraquimbal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikkouan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itutor.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koerperfunktionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krankengmnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lds.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marlald1.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtwer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mutiple-sklerose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuestracultura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orientierungsfaehigkeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.podologiea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psyzhologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pulsa-aqui-para-ver.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rugworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seakingarrangments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steamengines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sysloveme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talkwithgirl.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehealth-line.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thompsonsgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniquetwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vibrater.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viplocalsexycontacts.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitamin-t-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vulcanologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodenshutters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ernhrngsberatung-xnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ferienhuserg-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ferienhuserh-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--llungenentzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--steuerermklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xpromakets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achblueten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americannitional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anzeichen-von-depressionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiangirl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assyrianaustraliansocialdevelopmentclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrokeabove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barradobugresonline.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisexualdating.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoincartera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blasenntzuendung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundesarztkammer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dharris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundaciondarchile.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenersaadvice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goststream.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthallianceplan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huayraquimbal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikkouan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itutor.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koerperfunktionen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krankengmnastik.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lds.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlald1.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutiple-sklerose.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuestracultura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orientierungsfaehigkeit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podologiea.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyzhologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulsa-aqui-para-ver.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seakingarrangments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steamengines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sysloveme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkwithgirl.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehealth-line.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thompsonsgolfcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniquetwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibrater.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viplocalsexycontacts.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitamin-t-mangel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vulcanologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodenshutters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ernhrngsberatung-xnb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ferienhuserg-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ferienhuserh-mcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--llungenentzndung-tzb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--steuerermklrung-blb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpromakets.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa31ddd180000040300483046022100d740a7e103b9a56e8c671c4363f2bef4b37c763c2405eb9bdd05521c18b069a3022100a56ca05bf2a75e748b0f718fa42c165b83ae309b37ad9744a9945b810b7f51ea007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa31ddd100000040300483046022100be163b6bd89401c774b3d89c91ad8f001ac31d5a772f0d2244fdae029c31ed73022100fd3be52d1e1b4f7907e02aff7f92fd32df2232b8251113b2adbcf8340f20ecfb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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