lucita.com

Issued by R3

About this certificate

This digital certificate with serial number 03:20:6b:b5:15:b2:a6:d6:a1:4a:63:3a:a5:a4:c2:00:dc:33 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lucita.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:6b:b5:15:b2:a6:d6:a1:4a:63:3a:a5:a4:c2:00:dc:33
Serial Number (int): 272369061178116000160554242140247794179123
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:d7:e8:ee:6d:2d:48:be:97:72:75:f0:4b:90:28:98:3e:f5:b4:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:d6:58:f2:bb:39:8c:e1:a1:73:6c:be:77:b7:d6:5f:69:a6:b9:2d
Fingerprint (sha256): b3:3e:46:e5:3e:2a:87:0c:c5:f5:7d:cb:6c:3f:e8:6c:21:6a:34:84:d0:98:6a:9b:c4:23:8f:b1:ba:03:9f:27

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lucita.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucita.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ajuma.com
*.akepe.com
*.angelhelp.com
*.aplikacije.com
*.asbos.com
*.bunao.com
*.chengyao.com
*.christeen.com
*.compareseguros.com
*.compucuerna.com
*.connett.com
*.crepike.co.uk
*.cristello.com
*.cuentame.com
*.cuentoslossilos.com
*.doudu.com
*.familybounce.com
*.floresdelalba.com
*.franciscadecarmen.com
*.gamersbarg.com
*.goodrejinterio.com
*.guanjiu.com
*.haded.com
*.hasubhaipendavala.com
*.koulu.com
*.kuzhel.com
*.lapizzaitaliana.com
*.losunicos.com
*.lucita.com
*.mangoshop.us
*.minimensajes.com
*.mioto.com
*.musallam.com
*.nesportphoto.com
*.pandhi.com
*.piste.net
*.prodigytell.com
*.remuera.com
*.softcomputers-org.download
*.solismammo.co
*.strahovski.com
*.surfey.com
*.tattoli.com
*.thecouponcard.com
*.unquantified.com
*.yasushi.com
*.yeileng.com
*.yourtvseries.com
*.zanutto.com
*.zilma.com
ajuma.com
akepe.com
angelhelp.com
aplikacije.com
asbos.com
bunao.com
chengyao.com
christeen.com
compareseguros.com
compucuerna.com
connett.com
crepike.co.uk
cristello.com
cuentame.com
cuentoslossilos.com
doudu.com
familybounce.com
floresdelalba.com
franciscadecarmen.com
gamersbarg.com
goodrejinterio.com
guanjiu.com
haded.com
hasubhaipendavala.com
koulu.com
kuzhel.com
lapizzaitaliana.com
losunicos.com
lucita.com
mangoshop.us
minimensajes.com
mioto.com
musallam.com
nesportphoto.com
pandhi.com
piste.net
prodigytell.com
remuera.com
softcomputers-org.download
solismammo.co
strahovski.com
surfey.com
tattoli.com
thecouponcard.com
unquantified.com
yasushi.com
yeileng.com
yourtvseries.com
zanutto.com
zilma.com

Other certificates including the domain name lucita.com

(limited to 100 certificates)
lucita.com
lucita.com
lishun.com
lucita.com
lucita.com
lucita.com
lucita.com
kagoot.com
manateecountyrealestate.com
www.vrloving.com
lucita.com
lucita.com
kuleler.com
lucita.com
lucita.com

Certificate

The complete raw certificate details for lucita.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272369061178116000160554242140247794179123
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 06:25:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 06:25:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucita.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 628990971244990457861588338932033112697676670009289892117961969509601278461057956436759961876100175097605062430619484296579170650397902918922501500346136800032281258229940975723705123603359818426848437050260812090262494375758895557310046262728676576057077473370874493217485502732253288776177956583773904444915023237078870426470264905350653003341767947807006687232436366299878551847202644656982887353034271216698540666383416058172634404899478574900808425860165854442570106088609534509388790088659104519433525735653931279834261047251540386444352550765556876510110884694886862334616093859571865859849605083248722665699065365822483313332504336439705766531224595089024840013255754351165970344159492078173409500331891049633635066055444719917539322139593917216253338777916449101925806039415162496632388519802983540694606502518572789701136032707679413483861791274587109026268559085663627958058063970109150168767594644044305132641567401188248661278863863272961158673737608257447399899966653469223369065540528850330828501887517687961972598257374713536241955509605113033611108722416258828694325302997050215798668430507540764357082226932255997250826284822341773684878938750585419866944571635828681996874350198979545108967042163438780367316333827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94d7e8ee6d2d48be977275f04b9028983ef5b40d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aplikacije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chengyao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compareseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compucuerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crepike.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cristello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuentame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuentoslossilos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doudu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familybounce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floresdelalba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franciscadecarmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamersbarg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodrejinterio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guanjiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasubhaipendavala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuzhel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapizzaitaliana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losunicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangoshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minimensajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mioto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musallam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nesportphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodigytell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remuera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.softcomputers-org.download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solismammo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strahovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tattoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecouponcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unquantified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yasushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeileng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtvseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zanutto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zilma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplikacije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chengyao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compareseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compucuerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crepike.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuentame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuentoslossilos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doudu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familybounce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floresdelalba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franciscadecarmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamersbarg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodrejinterio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guanjiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasubhaipendavala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuzhel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapizzaitaliana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losunicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangoshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minimensajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mioto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musallam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesportphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodigytell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remuera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softcomputers-org.download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solismammo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strahovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecouponcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unquantified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yasushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeileng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtvseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zanutto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zilma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db5f4b4870000040300483046022100884321b73f0698b6f8affe795b8271c3d8f976811515a3fcd3c5f9c115c8f8610221008d7d2e24c28b108dfc1f6de2bdb10d680c166cf7dea227d4a03992e8b876d924007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018db5f4b67e0000040300473045022100c2f86f5dcf2dd516216b5547a3e3ec2477c54f3e936abd15565057c4b23d494202201905c669411ea1f976793f6b9000a6ad273a88a430c2e1b90373b944292e57fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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