5zigen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d8:50:15:b6:cb:46:62:c9:99:56:34:3e:80:da:8f:b8:1f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5zigen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:50:15:b6:cb:46:62:c9:99:56:34:3e:80:da:8f:b8:1f
Serial Number (int): 334944300035603918781614838055049716807711
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:26:bb:fa:3e:10:53:1c:11:43:20:cf:54:f8:c4:48:6a:e5:3a:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:ea:08:d7:15:18:ab:6f:cd:cf:4d:a1:11:26:8d:16:2d:92:86:b8
Fingerprint (sha256): ac:cb:87:b4:6f:94:ec:fd:18:54:43:61:94:7f:ae:7a:c6:d5:00:09:4d:9a:b1:4d:bf:9d:1c:a0:95:6e:41:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5zigen.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5zigen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5zigen.com
*.alabamaebt.com
*.amwwater.com
*.angeleyes2.com
*.azureultralounge.com
*.bankrelicard.com
*.castlebrunch.com
*.cheesiness.com
*.cicicard.com
*.coeanofgames.com
*.cruiselinesships.com
*.cultureofsaftey.com
*.cyto-comprasegura.com
*.diamondempirenyc.com
*.diesguitars.com
*.diodge.com
*.emails2fragrancex.com
*.eprimiuminsurance.com
*.gengrasjeep.com
*.harlownyc.com
*.headtotoemassageboutique.com
*.hentaidream.com
*.hipknitism.com
*.indialic.com
*.livesschoolinc.com
*.lorextechnologiy.com
*.mcveighfunealhome.com
*.membersshowcasecinemas.com
*.mhedcation.com
*.myhughs.com
*.newjerseymedicalnutrition.com
*.nextcarauto.com
*.okaley.com
*.onlinecitationpaymet.com
*.p91porn.com
*.pitibuljeans.com
*.sercuretech.com
*.shopfairwaymarket.com
*.siriudxm.com
*.solocruiseresource.com
*.soolinepractice.com
*.tattoolaserremoval.com
*.textimgstory.com
*.thepricegrouptalent.com
*.thevillagesrentals.com
*.turbotaxadvantage.com
*.turkeywireless.com
*.waterfuelmuseum.com
*.wwwcastlewindows.com
*.xgrealty.com
5zigen.com
alabamaebt.com
amwwater.com
angeleyes2.com
azureultralounge.com
bankrelicard.com
castlebrunch.com
cheesiness.com
cicicard.com
coeanofgames.com
cruiselinesships.com
cultureofsaftey.com
cyto-comprasegura.com
diamondempirenyc.com
diesguitars.com
diodge.com
emails2fragrancex.com
eprimiuminsurance.com
gengrasjeep.com
harlownyc.com
headtotoemassageboutique.com
hentaidream.com
hipknitism.com
indialic.com
livesschoolinc.com
lorextechnologiy.com
mcveighfunealhome.com
membersshowcasecinemas.com
mhedcation.com
myhughs.com
newjerseymedicalnutrition.com
nextcarauto.com
okaley.com
onlinecitationpaymet.com
p91porn.com
pitibuljeans.com
sercuretech.com
shopfairwaymarket.com
siriudxm.com
solocruiseresource.com
soolinepractice.com
tattoolaserremoval.com
textimgstory.com
thepricegrouptalent.com
thevillagesrentals.com
turbotaxadvantage.com
turkeywireless.com
waterfuelmuseum.com
wwwcastlewindows.com
xgrealty.com

Other certificates including the domain name 5zigen.com

(limited to 100 certificates)
hideage.com
5zigen.com
meramac.com
meramac.com
cicolina.com
5zigen.com
mamakurecipes.com
decorue.com
meramac.com
mamakurecipes.com
mamakurecipes.com
koreo1818.com

Certificate

The complete raw certificate details for 5zigen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334944300035603918781614838055049716807711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 20:51:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 20:51:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5zigen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728741816503559259178600560991747350855459322752847404378948229142492796912914734059771160029720553551881322204223658552385837200512523507745942458621906848387990264108552466570214566433484891418364317968571037049222947873876625455182222086637278522644107155804959861123753494905563726933747161721353473790370606342532488489472981340582006526875991714244765651786128593701537566421931588658347815757397041738546384228087986326088075027113329921856012922232175645006258782458013959274984749862774741259372161760047853025619592938602735426686921028569159708492180053988797645339025909149449015925014906410181588068426255385702981693159931918652171675787465160968719003389159993194700860677450425375276849409016647583373436853113880403415049304023670620495341874531068913731615540926601971513553913645387799921130874921783207663684697911614334756337979755266036282743036683306631683687551715845635012709915952760891229151572544349527099770697225729430055890296000622462668949454873608895170183184926090403539222218490312054404085818078530298627071389806160471113539182031155000388601721552077064044337767534413591728543722947664583232981172642945302329938139171282266016865097533559250894509612607451685338032541537349894632589006840623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d26bbfa3e10531c114320cf54f8c4486ae53a5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5zigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alabamaebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amwwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angeleyes2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azureultralounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bankrelicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castlebrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheesiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cicicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coeanofgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruiselinesships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultureofsaftey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cyto-comprasegura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diamondempirenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diesguitars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emails2fragrancex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eprimiuminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gengrasjeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harlownyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.headtotoemassageboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hentaidream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hipknitism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indialic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livesschoolinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorextechnologiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcveighfunealhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.membersshowcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhedcation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhughs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newjerseymedicalnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextcarauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okaley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinecitationpaymet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.p91porn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pitibuljeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sercuretech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopfairwaymarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siriudxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solocruiseresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soolinepractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tattoolaserremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.textimgstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepricegrouptalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thevillagesrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turbotaxadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turkeywireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfuelmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwcastlewindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xgrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5zigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alabamaebt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amwwater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angeleyes2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azureultralounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankrelicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castlebrunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheesiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cicicard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coeanofgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruiselinesships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureofsaftey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyto-comprasegura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondempirenyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diesguitars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emails2fragrancex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eprimiuminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gengrasjeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harlownyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'headtotoemassageboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hentaidream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hipknitism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indialic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livesschoolinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorextechnologiy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcveighfunealhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membersshowcasecinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhedcation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhughs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newjerseymedicalnutrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcarauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okaley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecitationpaymet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p91porn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitibuljeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sercuretech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopfairwaymarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siriudxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solocruiseresource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soolinepractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattoolaserremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textimgstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepricegrouptalent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevillagesrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotaxadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkeywireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfuelmuseum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcastlewindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xgrealty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed80c0d5d0000040300473045022100b9b5de8105d84537ec34b1dcab1a6b4935c3ddff45029be3fae5f746926c816702204085b07ad812a7366a79f9363dd3b96782ca241149a6692b7bca3aee5fc5ddae00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed80c0d640000040300473045022100f45ea823c1cc2d80f4379168a5e1e549c9d9dd43516017d82c17aae10ab1f3f902204e4b96405fecb7bbc5ba80da1fa05ec3ac47aee157b29e97fc3c9eefaaab4cba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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