flightcompare.au

Issued by R3

About this certificate

This digital certificate with serial number 04:20:48:fa:3d:e1:9a:d2:35:b2:3f:32:5a:3e:6b:a5:eb:e0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=flightcompare.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:20:48:fa:3d:e1:9a:d2:35:b2:3f:32:5a:3e:6b:a5:eb:e0
Serial Number (int): 359435183213523402275049268051018604997600
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e4:1c:cf:80:ba:fc:20:eb:1a:04:fc:37:2b:51:21:41:56:81:92:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:6b:21:50:08:13:69:7d:2a:e7:a4:e0:9b:53:bf:62:9f:17:92:3c
Fingerprint (sha256): b2:0d:12:d1:b9:1f:b9:e2:5f:93:79:a5:ea:92:a1:ed:33:ae:05:00:11:76:b9:d0:65:c9:c4:4a:26:26:f7:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate flightcompare.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flightcompare.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alfaxwebdevelepment.com
*.allfest.us
*.anytimepub.us
*.apadanasport.com
*.aventuraastica.com
*.c2crefschool.com
*.clubstream.us
*.deadshotvip.com
*.edigarov.com
*.emarthubs.com
*.estimable-narrationtolearntoday.info
*.ether-arena.com
*.extravaganzausa.com
*.fcsh.cc
*.flightcompare.au
*.giacooper.com
*.inspiratoracademy.com
*.jpmagazines.com
*.lojasmgalu.com
*.massagemquantica.com
*.moshavertajhiz.com
*.movielandwax.com
*.mtfujiri.com
*.mtsmuhammadiyahbululi.com
*.nastyfin.com
*.neckslide.com
*.netsportv153.com
*.office1qatar.com
*.oneimart.com
*.pacificfiberlink.com
*.poorstudentscookbook.com
*.profinvestcrupt.com
*.project-vex.eu
*.pronoticia.com
*.pupitreinfantil.com
*.riseinteraxctive.com
*.schroderbier.com
*.sealnal.com
*.selatannews.com
*.sentriktalkstech.com
*.seunegocioplr.com
*.sigmaaldrichvietnam.com
*.sinetsianshop.com
*.tasteofindiafoods.com
*.taudesk.us
*.tayyubmajeed.com
*.tech-blogs-list.com
*.thegreatbungee.com
*.thepinkpiggybank.com
*.vladimirugel.com
alfaxwebdevelepment.com
allfest.us
anytimepub.us
apadanasport.com
aventuraastica.com
c2crefschool.com
clubstream.us
deadshotvip.com
edigarov.com
emarthubs.com
estimable-narrationtolearntoday.info
ether-arena.com
extravaganzausa.com
fcsh.cc
flightcompare.au
giacooper.com
inspiratoracademy.com
jpmagazines.com
lojasmgalu.com
massagemquantica.com
moshavertajhiz.com
movielandwax.com
mtfujiri.com
mtsmuhammadiyahbululi.com
nastyfin.com
neckslide.com
netsportv153.com
office1qatar.com
oneimart.com
pacificfiberlink.com
poorstudentscookbook.com
profinvestcrupt.com
project-vex.eu
pronoticia.com
pupitreinfantil.com
riseinteraxctive.com
schroderbier.com
sealnal.com
selatannews.com
sentriktalkstech.com
seunegocioplr.com
sigmaaldrichvietnam.com
sinetsianshop.com
tasteofindiafoods.com
taudesk.us
tayyubmajeed.com
tech-blogs-list.com
thegreatbungee.com
thepinkpiggybank.com
vladimirugel.com

Other certificates including the domain name flightcompare.au

(limited to 100 certificates)
phko1xf.cyou
accomplishedtelecasttoviewtoday.info
flightcompare.au
flightcompare.au
*.30daysbutttransformation.com
flightcompare.au

Certificate

The complete raw certificate details for flightcompare.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359435183213523402275049268051018604997600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 06:42:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 06:42:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flightcompare.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 755912702719861125486970981436286130450566632019754705228649580529767932210044801954760402596199693817627288429070455969729906206819721344248157446618286964710985631873373816967631034793377710733818461420628802045205501260967939297652363481332433394059840864492868808726051881795053802872585712600767938943470318011647377358998013601452517419258839689308884123826036584621567564583595657045327060710331981426970669033607357375632073176482506777551643130430106079099564178087268501796703018859811827279869704216596204295123708971902042921174486973559601314231912435613290626943593353211175184490858172057531270245442808689926988960334537750520709174754356014959923829057180008052191610505074637252490246734883340139514298157239712736349385987618979902606750934748277297416222698394466821830765529340205325434348667340152224786250888432935979198701686484555565189575816874061386962989467246368003327507402787530009147601355395528256973505446376164252876433132710697743632583300117551182179032649925854828382393749374823463636892922594474910330919779953364430039761645285318046960810022232553200121248126982271772761385955912559411900056134116775031839117135285758524337332855743338469364387782862831052355958588151002063282594207224687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e41ccf80bafc20eb1a04fc372b51214156819210
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1972 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alfaxwebdevelepment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allfest.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anytimepub.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apadanasport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aventuraastica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c2crefschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubstream.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadshotvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edigarov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emarthubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estimable-narrationtolearntoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ether-arena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extravaganzausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcsh.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightcompare.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giacooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspiratoracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojasmgalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massagemquantica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moshavertajhiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movielandwax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtfujiri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtsmuhammadiyahbululi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nastyfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neckslide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netsportv153.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.office1qatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneimart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificfiberlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poorstudentscookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profinvestcrupt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.project-vex.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronoticia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pupitreinfantil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riseinteraxctive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schroderbier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sealnal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selatannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentriktalkstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seunegocioplr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigmaaldrichvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinetsianshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tasteofindiafoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taudesk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tayyubmajeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tech-blogs-list.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegreatbungee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepinkpiggybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vladimirugel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfaxwebdevelepment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allfest.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anytimepub.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apadanasport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aventuraastica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c2crefschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubstream.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadshotvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edigarov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emarthubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estimable-narrationtolearntoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ether-arena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extravaganzausa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcsh.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcompare.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giacooper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspiratoracademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpmagazines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojasmgalu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massagemquantica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moshavertajhiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movielandwax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtfujiri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsmuhammadiyahbululi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nastyfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neckslide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netsportv153.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office1qatar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneimart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificfiberlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poorstudentscookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profinvestcrupt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project-vex.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronoticia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pupitreinfantil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riseinteraxctive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schroderbier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sealnal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selatannews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentriktalkstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seunegocioplr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigmaaldrichvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinetsianshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasteofindiafoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taudesk.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tayyubmajeed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tech-blogs-list.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegreatbungee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepinkpiggybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vladimirugel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e0343612d0000040300473045022100a82b1a7fbd60012d15c3b3ad38da73cfd87ba3d31a01bfe194e5f58f1059c82902201b3cce5694ad47f3169487ae2fb249e6637bad2fab36faf049a6ab24d4903c6000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e034363270000040300473045022100d5085f3fb51f41d75cbc7f0292a7c93187a7c2322300ffd23cb334edc6c2ab130220439a0e2202447da0c224bc8cb6668ed50dbb470a86df2fb7cb02a30e57b71fa9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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