handem.com

Issued by R3

About this certificate

This digital certificate with serial number 03:64:f3:a7:bb:48:f0:76:1e:be:fb:52:c8:af:c5:e0:a7:f4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=handem.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:64:f3:a7:bb:48:f0:76:1e:be:fb:52:c8:af:c5:e0:a7:f4
Serial Number (int): 295688967802515138944225973504720674793460
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:06:0a:af:11:0c:16:ba:e6:2d:ba:f7:e3:59:6b:13:be:b0:f3:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:67:dc:cd:66:04:4d:13:1f:e7:7e:29:f8:ac:9b:3e:b6:1f:10:8a
Fingerprint (sha256): b2:d6:0a:79:e0:5b:f3:4c:fa:4b:e7:ef:cc:c3:49:52:77:77:26:cf:09:55:01:72:7b:c3:61:8d:84:ce:aa:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate handem.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for handem.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.6502.com
*.amalalayed.com
*.bioliefprints.com
*.bondandbowery.com
*.camping-lespins.net
*.cayoscochinos.com
*.clothin.com
*.cloudgym.com.au
*.contexto.com
*.daisuki.com
*.dfq.in
*.faca.net
*.fancyflyers.com
*.fietsenkleding.com
*.gmailhangout.com
*.gozio.com
*.habiaunavez.com
*.habiballah.com
*.handem.com
*.hongkan.com
*.houblon.com
*.how-to-root.com
*.ishirts.com
*.kintzer.com
*.kitchenary.com
*.lagransangre.com
*.lajkovi.com
*.loveyourmarketing.com.au
*.marrada.com
*.maxkend.com
*.meskin.com
*.mobiloabs.com
*.munecasyaccesorios.com
*.obfirefighting.com
*.ohanes.com
*.rmaarp.com
*.rujiao.com
*.sakuratl.com
*.social-ac.xyz
*.stylishweddings.com.au
*.technomads.com
*.tenancingo.com
*.thamer.com
*.tuen.net
*.urmj.com
*.vietcv.co
*.watchcars.com
*.wotgive.net
*.xxhu12.com
*.ypiix.com
6502.com
amalalayed.com
bioliefprints.com
bondandbowery.com
camping-lespins.net
cayoscochinos.com
clothin.com
cloudgym.com.au
contexto.com
daisuki.com
dfq.in
faca.net
fancyflyers.com
fietsenkleding.com
gmailhangout.com
gozio.com
habiaunavez.com
habiballah.com
handem.com
hongkan.com
houblon.com
how-to-root.com
ishirts.com
kintzer.com
kitchenary.com
lagransangre.com
lajkovi.com
loveyourmarketing.com.au
marrada.com
maxkend.com
meskin.com
mobiloabs.com
munecasyaccesorios.com
obfirefighting.com
ohanes.com
rmaarp.com
rujiao.com
sakuratl.com
social-ac.xyz
stylishweddings.com.au
technomads.com
tenancingo.com
thamer.com
tuen.net
urmj.com
vietcv.co
watchcars.com
wotgive.net
xxhu12.com
ypiix.com

Other certificates including the domain name handem.com

(limited to 100 certificates)
handem.com
handem.com
maspion.group
hotelmonteleone.co
hotelmonteleone.co
noivo.com
relire.com
handem.com
xhilemx.com
handem.com
handem.com
wadl.com

Certificate

The complete raw certificate details for handem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295688967802515138944225973504720674793460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 09:16:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 09:16:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'handem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893161210748166906505780185533696591795263862239318861925313203624384733862729135776869427853598994777832884142854182966746576113898903720309214062543206813815523154922816290406013097954606632985896379403254547108951442791479974905616448995158122566033306368367328060448816165848349494531705793833760406761755093420491550523706681610540816431598238131234270984751545444845549542200559760976844685364221861090290278234160098056188800029994213836461972665236093389575862471064103663276115248887408766001863822215488425685508631895967021364120937372984487744618714031953797297071242941417829451638573025452875021829437392394762828784132851225373304946906947192793716929108664003777029925951009213761455518941320675766379429038867155476135062512080496076220244934845207787635276893880245028698220882546434015762282340919226246099297906570762669609720376634057676819950610707394423634149493744626994395672829371573261792457215763340428657620662740073709497631756708881023904601935301565756732428254823057394016010031086214509749712141820891815415928953819428936047884206615971903645162118885883457736500724147816406286454640933373875290938379608053411150971773176188700963227793005403251704787221191889641788214395757667464194370786260363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68060aaf110c16bae62dbaf7e3596b13beb0f3ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1592 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amalalayed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioliefprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bondandbowery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camping-lespins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cayoscochinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clothin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudgym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daisuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfq.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancyflyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fietsenkleding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmailhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gozio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habiaunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habiballah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongkan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houblon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.how-to-root.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ishirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kintzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchenary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagransangre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lajkovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loveyourmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marrada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxkend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobiloabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.munecasyaccesorios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obfirefighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rmaarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rujiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sakuratl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.social-ac.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stylishweddings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.technomads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenancingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietcv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wotgive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxhu12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ypiix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6502.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amalalayed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioliefprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bondandbowery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camping-lespins.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cayoscochinos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudgym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contexto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daisuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfq.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancyflyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fietsenkleding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmailhangout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gozio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habiaunavez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habiballah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongkan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houblon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'how-to-root.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ishirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kintzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagransangre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajkovi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loveyourmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marrada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxkend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiloabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munecasyaccesorios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obfirefighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmaarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rujiao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakuratl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-ac.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stylishweddings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technomads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenancingo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urmj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietcv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wotgive.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxhu12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ypiix.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001896359ebb6000004030046304402203257a6f62acf8f814d65a118513e41b55803d88afe6441f9715f843a2d989b7a02204e53b45c27f54d8cf0f7e4f7dbac5cb6ad30cc0e586da130f4dcb8faa59f499e007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001896359ebd80000040300483046022100cea9692120c7e932c1fa7027a99bd7e83a316036ac72b9e8483672742026e256022100c5703c47b048a19b1d89a2791add90546ebea9f1214b8f6144a60d2997ab299f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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