gigen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a1:b2:8b:88:10:03:72:db:8d:e8:07:0d:ee:1d:4f:b7:54 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gigen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:b2:8b:88:10:03:72:db:8d:e8:07:0d:ee:1d:4f:b7:54
Serial Number (int): 316359645941741307930136530871390630295380
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 35:35:1f:18:d0:3e:0b:d4:a9:9b:7f:17:7b:eb:58:00:4d:ad:65:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:37:42:5e:83:7f:c1:92:c5:7c:a6:d6:ce:a6:c4:5e:cb:c5:b7:20
Fingerprint (sha256): a8:69:00:42:99:d5:84:88:30:aa:08:d8:c5:98:cd:81:c5:9a:8e:3d:c4:7b:f9:ef:a5:29:89:a3:8e:66:15:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gigen.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gigen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.babbs.com
*.behshop.com
*.bellendir.com
*.benamati.com
*.cartoonstock.co
*.chromotherapie.com
*.edberg.com
*.eduwa.com
*.esic.net
*.fiordipelle.com
*.foreigncurrencytrader.com
*.fregie.com
*.geiringer.com
*.gigen.com
*.goens.com
*.gpscompany.com
*.hamani.com
*.hilaltermal.com
*.hontz.com
*.houcke.com
*.jesso.com
*.kaotikobcn.es
*.khandeh.com
*.lacajadeahorro.com
*.lwow.com
*.mancavesystems.com
*.marvick.com
*.masalam.com
*.mehanika.com
*.montique.com
*.mycologylab.com
*.mywoods.com
*.naturallybright.com
*.okunan.com
*.phunggia.com
*.preprally.com
*.prometur.com
*.ridgewoodcollectibles.com
*.series24.es
*.sharifs.com
*.simplu.com
*.svityaz.com
*.tapella.com
*.theworstjobs.com
*.tristesse.com
*.tvevolucion.com
*.vagdevi.com
*.x123movies.com
*.yogaeducation.com
*.zombiez.com
babbs.com
behshop.com
bellendir.com
benamati.com
cartoonstock.co
chromotherapie.com
edberg.com
eduwa.com
esic.net
fiordipelle.com
foreigncurrencytrader.com
fregie.com
geiringer.com
gigen.com
goens.com
gpscompany.com
hamani.com
hilaltermal.com
hontz.com
houcke.com
jesso.com
kaotikobcn.es
khandeh.com
lacajadeahorro.com
lwow.com
mancavesystems.com
marvick.com
masalam.com
mehanika.com
montique.com
mycologylab.com
mywoods.com
naturallybright.com
okunan.com
phunggia.com
preprally.com
prometur.com
ridgewoodcollectibles.com
series24.es
sharifs.com
simplu.com
svityaz.com
tapella.com
theworstjobs.com
tristesse.com
tvevolucion.com
vagdevi.com
x123movies.com
yogaeducation.com
zombiez.com

Other certificates including the domain name gigen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gigen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316359645941741307930136530871390630295380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 22:59:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 22:59:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gigen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779467183471499988110536458954639130669814384869536994401270156445012501751066802926686620609083763285741778925797195028877031668765197499018624847931467755158623322698140241768840520041560656838727395288550128088383632573671041261862584129510058815615563400470067743382221123355415833460447818852743733676039825376020807056243188378896571241117324346426510838935277098587079874130074505778634533311798540759178469781175530882333020907566988102222676937410820093501961596203332844101549566246357005356244183105968528728981205855880432727537568799495703610679674765452138389212227108844691708890506168437782381898913806947292709432454312637495697423926129896716449512246056392132173899078473576696372005007892599046584287382085253386204302701680972791016721407539711040772657104535846001251910274895954902996030862767489548639129378351779565305251491457657721872592608321722041756641258726352003408749683079742317167497735334827160577817062658128741968791206263460793734349820274718922008670783964293383690950518055715271191685279376367118074076153820363148849876289379388844627338776305686681307124086837270242999974706296572467533931590828074761056578762114029123189690191266688350942041401871915842614385821504993818093168160403473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35351f18d03e0bd4a99b7f177beb58004dad6549
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1574 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.babbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.behshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellendir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benamati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonstock.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chromotherapie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eduwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiordipelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foreigncurrencytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fregie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geiringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hamani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilaltermal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hontz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houcke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaotikobcn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khandeh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacajadeahorro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lwow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mancavesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marvick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mehanika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycologylab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mywoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturallybright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okunan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phunggia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prometur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgewoodcollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.series24.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharifs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svityaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theworstjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tristesse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvevolucion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vagdevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x123movies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yogaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zombiez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellendir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benamati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonstock.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromotherapie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esic.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiordipelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreigncurrencytrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fregie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geiringer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpscompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilaltermal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hontz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houcke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaotikobcn.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khandeh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacajadeahorro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mancavesystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masalam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehanika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycologylab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturallybright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okunan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phunggia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgewoodcollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'series24.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharifs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svityaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theworstjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristesse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvevolucion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vagdevi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x123movies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogaeducation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zombiez.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f016e0ce000004030047304502202a440a9fcf7e6f826ee1388f4da05a78bf2ce9775c29a2af9e876d21e6d03c36022100cd53e044794a46ea4fa9b8e26d461c52e23e192aeda78829ec68576b24f77d630076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170f016e1020000040300473045022100a888aa85871b26ed8c7cb7605313a99afa341454674645ad832941a717cfb8a2022001d9c417400033b86cef1ef5c35c69a302d21292cec5376763d1edfeb7d7aa1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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