health-fitness.site

Issued by R3

About this certificate

This digital certificate with serial number 03:8a:11:1c:c8:90:a8:d1:cd:96:db:a6:ca:a6:7f:3b:b2:19 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=health-fitness.site

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8a:11:1c:c8:90:a8:d1:cd:96:db:a6:ca:a6:7f:3b:b2:19
Serial Number (int): 308318570758553653693232760899158436196889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dd:e4:32:35:1c:1a:10:f2:61:17:9c:7a:46:46:aa:19:7b:38:41:4d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:93:9e:17:39:1d:c8:4f:0e:6c:fb:5f:00:3a:a6:c3:a8:af:0d:1a
Fingerprint (sha256): b2:bd:d4:47:0d:f0:98:9d:0d:a1:42:4c:35:62:90:63:4a:ab:f2:cd:83:7b:5c:35:ef:3b:39:d5:c9:db:0a:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate health-fitness.site

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for health-fitness.site

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.71.io
*.99bb66.com
*.andrade.eu
*.atuttoriality.it
*.baltimorecitytowing.net
*.bosti.org
*.business-planware.com
*.casualwork.com.au
*.cheap-furniture.site
*.cobraselfdefenselexingtonky.com
*.crispy.org
*.cruzvermelha.com.br
*.dianegraebner.com
*.f.fo
*.farma.com.br
*.getlooseco.com
*.gisellemontesoficial.com
*.health-fitness.site
*.hrdiemen.es
*.impopular.me
*.infopaul.com
*.inovationplaylist.org
*.interratialpass.com
*.jestyayin503.com
*.jestyayin629.com
*.lagenziadiviaggio.it
*.lego-starwars.de
*.louisvuoitton.it
*.namgungchan.com
*.newsnews.com.au
*.openacademics.org
*.pawn123.net
*.pevnydisk.cz
*.pitp.org
*.playstation.co
*.plazas.org
*.problogger.com.au
*.simplewordsonline.com
*.skysunsat.pl
*.tecomprotucoche.es
*.thelearningtree.net
*.thesecretgarden.com.au
*.tit.net
*.toyuha.com
*.ultimatix.in
*.unimia.it
*.vmsriwrkcvas.com
*.xnclubth.com
*.yehudi.com
*.yourbudget.com.au
71.io
99bb66.com
andrade.eu
atuttoriality.it
baltimorecitytowing.net
bosti.org
business-planware.com
casualwork.com.au
cheap-furniture.site
cobraselfdefenselexingtonky.com
crispy.org
cruzvermelha.com.br
dianegraebner.com
f.fo
farma.com.br
getlooseco.com
gisellemontesoficial.com
health-fitness.site
hrdiemen.es
impopular.me
infopaul.com
inovationplaylist.org
interratialpass.com
jestyayin503.com
jestyayin629.com
lagenziadiviaggio.it
lego-starwars.de
louisvuoitton.it
namgungchan.com
newsnews.com.au
openacademics.org
pawn123.net
pevnydisk.cz
pitp.org
playstation.co
plazas.org
problogger.com.au
simplewordsonline.com
skysunsat.pl
tecomprotucoche.es
thelearningtree.net
thesecretgarden.com.au
tit.net
toyuha.com
ultimatix.in
unimia.it
vmsriwrkcvas.com
xnclubth.com
yehudi.com
yourbudget.com.au

Other certificates including the domain name health-fitness.site

(limited to 100 certificates)
health-fitness.site
sni.cloudflaressl.com
health-fitness.site
sni.cloudflaressl.com
noon20.net
health-fitness.site
health-fitness.site
health-fitness.site
health-fitness.site
inhealth.site
health-fitness.site
italiangraffiati.it

Certificate

The complete raw certificate details for health-fitness.site in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx1Al/dJH6Ns0PLkjXhko
4yHGx0qu1pcIclFxRWUpf4S7DqdfR+WgDi/QI7hwDIQUNujLzKvcIC7IvE6dvEvF
NoprUEQedB4yjKd8rmcI5x5IvBQsZmHp9poR3ppLl8t93RSKanwo/sW9qeZYmBWi
dMRYJDH3jMnx3QcTJlMrb5ojeWq5Bq6zZTFUOE4oPldrhCoAeKe8rTf22oqI2TFp
ur8vXr5L71LRqdTLBjsOkxnR8r45d1J5LMM317qTn7lCzxcHK/5yz6dgSJPW8W2G
f/h3fNOapt2TnOwkMaeNSK0hd1dvY3V/eLSC1Xfmn0eH00qupcCqfPrrfWntHMhx
aPHXqTvg+mqeAOZ2OTsJKjKJ/oDQaWno4G4L0BwuegHgHHztQ+qjupKnACKbHqPH
/ikmanvpqiwuc+5UWZ3LwvOAG60vY/zaE7mxnwMbwRTEm42VFIj9bvdAt6//R3M/
9HrgxH9koErDzOJXgJ0sIE+8GVw5cNiDJ38u2gqnQ0a8yilnvHItNrsIuE4phUBF
3Ck/v1VTg7LYiD+ogO1adg1KewEhXawlInt/IUDlKcdPJZrK/XOBNUp9EY96QQHb
O75TVgTgmniQ8+qxvYW83S6wGbmDHoelwbn2WqpWNn03pLROUXDneOONiWag4bE7
lkSMtzkapfH5dMxNdo5puzECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308318570758553653693232760899158436196889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 14:07:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 14:07:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'health-fitness.site'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813126423293777850849901258965078746834005990463762765421083435317218736337481621627489409027958938677860725035463265989909194113683137075132768286534315819931342725920500689147246602850061596087114525791753330971899736914668396992681761242374679438445920581976920399864556944484775866442773820464981314941454947377485238941454053534338283721926706081134587512735075167730817114105086900173594020665422041866272651009214485879562236837142614937540761447043136600701826871190450054302411991699839167752031770820847588538198204994668251510113700038145661562507154160159432197204721658005574437189250677910409342595488305562464782231262630656411396779916806505236341145469719736006416877162941553458374432281573057593396372238163787659753366974420534741074453685460703209431603734480952234411982737180666788954630027838947003879093763301744178524461883006778129564970792078283904200177340050475434067081719787847577798223802855726125494374507037037207020355525991315281135725724998699896900494025306403159952355038204154782960482201722771614364541841403421822592916968349880206749330572690645107622846128617162270678602658329851806596073157647524945387343263182826433918758286421244537154501437032683240075712343616059023715875561257777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dde432351c1a10f261179c7a4646aa197b38414d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1792 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.71.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99bb66.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andrade.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atuttoriality.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baltimorecitytowing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bosti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.business-planware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casualwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheap-furniture.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cobraselfdefenselexingtonky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crispy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruzvermelha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dianegraebner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f.fo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getlooseco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gisellemontesoficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.health-fitness.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrdiemen.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impopular.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inovationplaylist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interratialpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jestyayin503.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jestyayin629.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagenziadiviaggio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lego-starwars.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.louisvuoitton.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namgungchan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsnews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openacademics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawn123.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pevnydisk.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pitp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playstation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plazas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.problogger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplewordsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skysunsat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecomprotucoche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelearningtree.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesecretgarden.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toyuha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultimatix.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unimia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vmsriwrkcvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xnclubth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yehudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourbudget.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '71.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99bb66.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrade.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atuttoriality.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltimorecitytowing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bosti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-planware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheap-furniture.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobraselfdefenselexingtonky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crispy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruzvermelha.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dianegraebner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.fo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farma.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getlooseco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisellemontesoficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-fitness.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrdiemen.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impopular.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inovationplaylist.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interratialpass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jestyayin503.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jestyayin629.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagenziadiviaggio.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lego-starwars.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisvuoitton.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namgungchan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsnews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openacademics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawn123.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pevnydisk.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playstation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'problogger.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplewordsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skysunsat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecomprotucoche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelearningtree.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesecretgarden.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyuha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimatix.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unimia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmsriwrkcvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnclubth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yehudi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourbudget.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e950d02ac000004030047304502206df7f0054db205e198c0ec90a6a481fe8dd85d6118965a8b2192d05198888dc3022100a2674cd29803605b60d23c6f700452da94c58b91e832ef1280ce0c1cb7ef35c2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e950d02ba0000040300473045022100e3fa0aa96f68e49bb75348d23cd5710be98ae9edfda28c7298af6f4676439b3202200f3ff96f5b88dd896571cc13a981b324bdc9425c3f296d0bd45887888116b5d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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