refikanado.com

Issued by R3

About this certificate

This digital certificate with serial number 04:d3:68:c7:79:61:64:0a:77:42:35:ff:83:46:35:4b:09:90 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=refikanado.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d3:68:c7:79:61:64:0a:77:42:35:ff:83:46:35:4b:09:90
Serial Number (int): 420387998587883137017906793921921053034896
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:1e:64:53:34:8c:44:61:a3:76:ed:70:57:4f:b7:6f:01:3a:ce:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:40:e8:9a:e0:c7:81:d1:76:1e:2d:bc:42:bc:3d:42:2c:70:79:99
Fingerprint (sha256): ac:a4:9d:a2:52:92:61:fc:7e:46:ae:b4:2c:0c:c1:2f:0d:1a:da:a5:6d:0a:2b:cf:cc:67:36:5b:ce:7f:38:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate refikanado.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for refikanado.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adrenalinanews.com.br
*.autoresurcruz.com
*.bredersuasso.com
*.bulllchat.com
*.chattalove.com
*.cigar4value.com
*.connectionchat.com
*.d73p95c.net
*.datingdist.ga
*.dirbased.info
*.directoryproz.info
*.diygardesign.com
*.gas-card.com
*.gaspolmovie.biz
*.getssl.me
*.goadtsolar.co
*.informationclassification.com
*.jovainca.com
*.juanamolinashop.com
*.librosgranel.com
*.makeyourdreamsareality.co
*.mockingbird.info
*.modern-post.com
*.n6fsv.info
*.ourownworlds.com
*.piercingly.com
*.pxopacvma.info
*.qq.net.au
*.quesedice.net
*.refikanado.com
*.rentalcarreservations.com
*.restructuringadvisor.com
*.reviveallmusic.com
*.sabeezwsm.com
*.sashabitch.com
*.seekoner.com
*.siparislerin.com
*.sjrx.info
*.spm55.com
*.srgafo.com
*.sueltalasopa.tv
*.svrakaprevoz.com
*.tacklehq.com.au
*.taroshuntaro.me
*.thai-plastic.com
*.thewavefactory.com
*.tubevectoe.com
*.unitymachine.com
*.unlockyjunky.com
*.visionbilling.com
adrenalinanews.com.br
autoresurcruz.com
bredersuasso.com
bulllchat.com
chattalove.com
cigar4value.com
connectionchat.com
d73p95c.net
datingdist.ga
dirbased.info
directoryproz.info
diygardesign.com
gas-card.com
gaspolmovie.biz
getssl.me
goadtsolar.co
informationclassification.com
jovainca.com
juanamolinashop.com
librosgranel.com
makeyourdreamsareality.co
mockingbird.info
modern-post.com
n6fsv.info
ourownworlds.com
piercingly.com
pxopacvma.info
qq.net.au
quesedice.net
refikanado.com
rentalcarreservations.com
restructuringadvisor.com
reviveallmusic.com
sabeezwsm.com
sashabitch.com
seekoner.com
siparislerin.com
sjrx.info
spm55.com
srgafo.com
sueltalasopa.tv
svrakaprevoz.com
tacklehq.com.au
taroshuntaro.me
thai-plastic.com
thewavefactory.com
tubevectoe.com
unitymachine.com
unlockyjunky.com
visionbilling.com

Other certificates including the domain name refikanado.com

(limited to 100 certificates)
refikanado.com
refikanado.com
refikanado.com
refikanado.com
gaspolmovie.biz

Certificate

The complete raw certificate details for refikanado.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 420387998587883137017906793921921053034896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 13:19:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 13:19:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'refikanado.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 994015858735322198821181782505623214155741863573722445888398783928990764228749673384925730141132260924072600900309193886210259107505342661428999724829241126590910555666336015565672192939711440291914393987993660258131959261393474623931438216963453762116558255562828380700357028640806515298978548340330176259926321762416654986737632200075437473568260429096572171411992360006137260462306972295359951668629801567941142822606748633913490742830578019396252073660067065137237713789014491522417963965723711088918909381068213936124252124756235528704354050016549373105308864884012297078923032719823834268911149050565476969941168261076467253030259688235463418878407417560159146410266779986242070772649098501611595908925065469910905024411960612747326818904850933239614682633722658718580950802106911911548364566219212768276050004799626601891348290261100562231879730644568287352833881832696571669648223081803152720481857383170804328374005518236386159007467826956350646202128912821062978386951337640379265027898811536648512438621575608567446880057144362078876290275726899441826609651988034483040708069464787683385557197885431834922333166527967064460137852209127683907077722610226568525790237507802728820975864613152362747050609078849930446383340631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf1e6453348c4461a376ed70574fb76f013acef8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1832 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adrenalinanews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoresurcruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bredersuasso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulllchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chattalove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cigar4value.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connectionchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d73p95c.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datingdist.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dirbased.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directoryproz.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diygardesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gas-card.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaspolmovie.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getssl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goadtsolar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informationclassification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jovainca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juanamolinashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.librosgranel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeyourdreamsareality.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mockingbird.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modern-post.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.n6fsv.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourownworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piercingly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pxopacvma.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qq.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quesedice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refikanado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentalcarreservations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restructuringadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reviveallmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sabeezwsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sashabitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seekoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siparislerin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sjrx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spm55.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srgafo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sueltalasopa.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svrakaprevoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacklehq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taroshuntaro.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thai-plastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewavefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tubevectoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitymachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlockyjunky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visionbilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adrenalinanews.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoresurcruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bredersuasso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulllchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chattalove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigar4value.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectionchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd73p95c.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingdist.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirbased.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directoryproz.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diygardesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gas-card.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaspolmovie.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getssl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goadtsolar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informationclassification.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jovainca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juanamolinashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librosgranel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeyourdreamsareality.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mockingbird.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modern-post.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'n6fsv.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourownworlds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piercingly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pxopacvma.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qq.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quesedice.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refikanado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentalcarreservations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restructuringadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reviveallmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sabeezwsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sashabitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seekoner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siparislerin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjrx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spm55.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srgafo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sueltalasopa.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svrakaprevoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacklehq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taroshuntaro.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thai-plastic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewavefactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tubevectoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitymachine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlockyjunky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionbilling.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b9067b8be000004030046304402202813fb0a67f427930487bc68cd9de3c9cf972223fef129c00b7346243643edba02202cdca4bfdf8c1a8446d6ebe31007a18c3bb73f5bb1c01b9ad8da87c580d557b60076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b9067ba5d0000040300473045022100b44b48d0ec5a310bd63d6b58c88c9a923871f48bb9dad00b3755d78f84cb240002200fe52fb22d28c6dc5e207b707879d47c162f4f46b949cdf8bb96d801ad026156
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053e72389b51b147213d59cd17f241122281f99e90a22de241426799f52d172b7e980564e87b0b75b1e684dcc1f2520ac895e1ffb29e824bd39e50ec8c5d2bc131c55269a4e356c4e68178940ae4be772574a5613cfd739aca1229af04c2eeea6847c235c1cd13be780c28f397f7ccd43433adb06be7eab887d9810ca87a695ec949ed7d6ee10df661a72dcfd8ed4b33a0b4f535398dd9ea4831459ad7ea4e33c3af5cf4f3ddbf01345d67984eb27282dafe5dfd1ec879f0c0047f2aff986d95599ec275f58c66c83d4f2378d5f0a887f1830e15b562d61b9bdd22605ee73a9074bd080d0c5200db4109ff749f7477755d4e0367e61a24803dafeebd039dbb852