luftansaair.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:8c:a6:a8:5f:42:30:fc:d2:61:2d:56:ab:e7:0d:ff:15 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=luftansaair.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:8c:a6:a8:5f:42:30:fc:d2:61:2d:56:ab:e7:0d:ff:15
Serial Number (int): 321413511629046288598358964324601749700373
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:e1:f8:a3:c9:c0:7a:c9:5c:5a:ca:e1:20:1e:9e:e3:b6:93:b6:07
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:6c:43:41:54:32:b5:04:ab:43:e1:2f:10:f7:bd:e7:8f:25:32:96
Fingerprint (sha256): ab:68:ba:a9:7a:6a:d8:9b:68:25:20:e6:94:a7:e2:fc:3c:4a:ea:62:28:02:5c:2d:bb:0c:72:ac:3f:f0:aa:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate luftansaair.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for luftansaair.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adamsmarkhotel.com
*.adventurescuba.com
*.alexandergrahambell.com
*.baret.com
*.bigthundergoldmine.com
*.bikenight.com
*.bowelmovements.com
*.century21dnd.com
*.creativewebdesigns.com
*.devanlowe.com
*.fashionboutiques.com.au
*.frontiertel.com
*.geosuper.com
*.ggarvin.com
*.gm5.xyz
*.goodneighborplumbingca.com
*.gumraid.com
*.h-arab.com
*.handmadebysylviawithlove.com
*.harryshousekeeping.com
*.hawaiianstylehalau.com
*.heidikjewelry.com
*.herpiceps.com
*.hopxuongpiox.com
*.horticolawn.com
*.hsbcrewards.com
*.humananmiltary.com
*.inporn.info
*.jbchairs.com
*.littlewhiteapron.com
*.luftansaair.com
*.madyhumbs.com
*.mcdonaldds.com
*.mobilnigeria.com
*.oceansandsresort.com
*.poodleskirt.com
*.redhatters.com
*.robuxing.com
*.royalcaribeancruiseline.com
*.sanantonioseaworld.com
*.sporttoto4d.com
*.stapeseasyrebates.com
*.threewheelbike.com
*.ticastrans.com
*.univvision.com
*.urdupiont.com
*.webpagecontest.com
*.wiltonprinting.com
*.zubasearch.com
*.zypherhillswater.com
adamsmarkhotel.com
adventurescuba.com
alexandergrahambell.com
baret.com
bigthundergoldmine.com
bikenight.com
bowelmovements.com
century21dnd.com
creativewebdesigns.com
devanlowe.com
fashionboutiques.com.au
frontiertel.com
geosuper.com
ggarvin.com
gm5.xyz
goodneighborplumbingca.com
gumraid.com
h-arab.com
handmadebysylviawithlove.com
harryshousekeeping.com
hawaiianstylehalau.com
heidikjewelry.com
herpiceps.com
hopxuongpiox.com
horticolawn.com
hsbcrewards.com
humananmiltary.com
inporn.info
jbchairs.com
littlewhiteapron.com
luftansaair.com
madyhumbs.com
mcdonaldds.com
mobilnigeria.com
oceansandsresort.com
poodleskirt.com
redhatters.com
robuxing.com
royalcaribeancruiseline.com
sanantonioseaworld.com
sporttoto4d.com
stapeseasyrebates.com
threewheelbike.com
ticastrans.com
univvision.com
urdupiont.com
webpagecontest.com
wiltonprinting.com
zubasearch.com
zypherhillswater.com

Other certificates including the domain name luftansaair.com

(limited to 100 certificates)
goyaa.io
espressscripts.com
luftansaair.com
schwagbucks.com
perimon.com
luftansaair.com
luftansaair.com
ok-7eleven.com
goyaa.io
urdupiont.com

Certificate

The complete raw certificate details for luftansaair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321413511629046288598358964324601749700373
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 17:20:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 17:20:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luftansaair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905211562005705218095240285240600903072837698514731819759339229432982879587303811638407653187238827336208367976342966748387264895228086078009366914232382337695878479376534455163139537636694839687319848901030999683497144156254408847192657816262666185936816078021502225776439134313994187444682811247100248842574294649140400395594042459150834036576448953952205500806452806560403104254054681753941099070811717067176892487202201002147657935531692051552299317434781313350007539994327414042395596173907343566823270459222313202634851496234938697538845851690125149381535925507619671927312079643656711811629708218710736860972948566451692421803013448007848675691865513770575715027186269866151293298416132256863250551481102610192808028910876966209664792011812277020186475670713737084632019451440042298059202204956131843784834391636150558890717822881282425144498894834150568452871283124592547637270140661914494098113666110755277892890125202464285055262963773864302880165832880528306824490180065393154095799461608627166009704654482376339935904736102987023840860749820667532992541526957534642615972819389277259391312497108120033971819963914410587940842652583913987066733333722139841032961610647741863993485585604094277467921748026032009512957839437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a0e1f8a3c9c07ac95c5acae1201e9ee3b693b607
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionboutiques.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geosuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gm5.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodneighborplumbingca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gumraid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h-arab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handmadebysylviawithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harryshousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaiianstylehalau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heidikjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herpiceps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopxuongpiox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horticolawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.humananmiltary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inporn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jbchairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littlewhiteapron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madyhumbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdonaldds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oceansandsresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redhatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robuxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanantonioseaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sporttoto4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticastrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.univvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zypherhillswater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikenight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionboutiques.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geosuper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm5.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighborplumbingca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gumraid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h-arab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmadebysylviawithlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harryshousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianstylehalau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidikjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herpiceps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopxuongpiox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horticolawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humananmiltary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inporn.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jbchairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlewhiteapron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madyhumbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdonaldds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceansandsresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redhatters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robuxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantonioseaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttoto4d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticastrans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'univvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zypherhillswater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab3d2a541000004030047304502210090aa824cbbf1b2799381d28e477b6f608cb43ff068f937a3335975e0605bb53702203bfe3ee491e25eae3e6dd34b061c46961bbe4516f65aabe56aa087dc66b445590075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab3d2a55300000403004630440220105b96b3c1f6595ab7827df15aeb50ebabbd45242ec9859276e2464749770840022073df9926ceb993ceee4169dcab56f2b7418b76dbb9fad24da1ab67129ff411ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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