theka.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:95:06:0f:f8:07:08:ea:d9:0f:3e:e9:fe:56:6c:22:79:64 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=theka.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:95:06:0f:f8:07:08:ea:d9:0f:3e:e9:fe:56:6c:22:79:64
Serial Number (int): 399159274681283343797159502781086253087076
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ef:8c:29:bd:38:9c:71:5a:34:35:53:b8:12:60:9e:18:6c:ab:77:8c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d2:9c:12:3d:82:b3:f4:6c:e3:dc:42:72:79:70:6f:3c:d8:d2:78:6c
Fingerprint (sha256): b6:28:45:16:09:f5:ec:7e:19:9c:ce:c7:3f:d4:3a:b8:ad:7e:d2:35:78:17:1e:d7:ac:9f:73:a2:b0:56:af:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate theka.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theka.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.almadany.com
*.antiquetractormagazine.com
*.arrevillaga.com
*.bharatmovie.com
*.brichacek.com
*.calypsos.com
*.cambridgecompany.com
*.capillamusical.com
*.care2go.com
*.cholotv.com
*.coachingcommons.com
*.divertisement.com
*.doronko.com
*.electrovapor.com
*.elkland.com
*.esonora.com
*.fepow.com
*.forexactiv.com
*.gaupp.com
*.giornalismo.com
*.handyguenstig.com
*.ilanen.com
*.instrucciones.com
*.jiaomu.com
*.kingdomhalls.org
*.lahealthclubs.com
*.laksa.net
*.laozhong.com
*.lemerise.com
*.lieja.com
*.magkatarr.com
*.martgame.com
*.melhoresjogos.com
*.multiproprieta.com
*.mykarta.com
*.occupazione.net
*.pathak.com
*.pelanggan.com
*.picott.com
*.radiozamaaneh.com
*.sensores.org
*.sunbulbs.com
*.swisses.com
*.theie.com
*.theka.com
*.tmelss.co
*.truefighter.com
*.vozicki.com
*.www95.com
*.yough.com
almadany.com
antiquetractormagazine.com
arrevillaga.com
bharatmovie.com
brichacek.com
calypsos.com
cambridgecompany.com
capillamusical.com
care2go.com
cholotv.com
coachingcommons.com
divertisement.com
doronko.com
electrovapor.com
elkland.com
esonora.com
fepow.com
forexactiv.com
gaupp.com
giornalismo.com
handyguenstig.com
ilanen.com
instrucciones.com
jiaomu.com
kingdomhalls.org
lahealthclubs.com
laksa.net
laozhong.com
lemerise.com
lieja.com
magkatarr.com
martgame.com
melhoresjogos.com
multiproprieta.com
mykarta.com
occupazione.net
pathak.com
pelanggan.com
picott.com
radiozamaaneh.com
sensores.org
sunbulbs.com
swisses.com
theie.com
theka.com
tmelss.co
truefighter.com
vozicki.com
www95.com
yough.com

Other certificates including the domain name theka.com

(limited to 100 certificates)
aircraftdonation.com
shuntaro.com
enviroearth.com
collegebosrd.com
theka.com

Certificate

The complete raw certificate details for theka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399159274681283343797159502781086253087076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 06:39:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 06:39:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761870624019648473900893274782916943813356083668765301381705436194182794581276199523043969883074016373958206319590730200863269183680887697365806880887269426408076880204831594923224025245386365238769458146341324835823237439739252831531809522771127166433654489474812554520479670899680542266797879902884653671409247360396117462817546334177348807140312003899825836499104662833194640265709323031974353868075685525124334437625045671298748253105197369016915705982280434897866909507500488096447048419877872743828282151709999313382996530475998727059931651787832408666413315339357232822747584011814992521814842945864240453966765182230666196082190657028421621671874658476316477653250083688184775044071219965194911270942299166198808081758760880265232157063903023215360342308649371348207339806676265250003763759916954593130597150381777741060414437085197471484984782033744064440197856702901213883780664404773642599239892418250994768600850976979162561971593153953164203924191876061618344782415925919517602625604758489540419357571304226734674610240832596851584935125762381814104247485644405310254054585211849247381796826265219470558157756226452377779835999366685892398609336248971653648336036433096946540465956869907409505675755896548774923008550649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef8c29bd389c715a343553b812609e186cab778c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1616 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almadany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antiquetractormagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrevillaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bharatmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brichacek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calypsos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cambridgecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capillamusical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.care2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cholotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coachingcommons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divertisement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doronko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electrovapor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elkland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esonora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fepow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexactiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaupp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giornalismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handyguenstig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilanen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instrucciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiaomu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingdomhalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lahealthclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laksa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laozhong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemerise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lieja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magkatarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melhoresjogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multiproprieta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mykarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occupazione.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelanggan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiozamaaneh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sensores.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunbulbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swisses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmelss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truefighter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vozicki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www95.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yough.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almadany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antiquetractormagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrevillaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bharatmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brichacek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calypsos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capillamusical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'care2go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cholotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coachingcommons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divertisement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doronko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrovapor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elkland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esonora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fepow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexactiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaupp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giornalismo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handyguenstig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilanen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instrucciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiaomu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingdomhalls.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahealthclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laksa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laozhong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemerise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lieja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magkatarr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melhoresjogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiproprieta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykarta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occupazione.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelanggan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiozamaaneh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sensores.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunbulbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmelss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truefighter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vozicki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www95.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yough.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f4b72519c00000403004830460221009d6dedae0bcdf933adaad9d0f2ff2c9c1eb7c76dc4174b9e298e965418e3507b022100aa5a90742d5162e4e401b77de455362c042b41ed5c5084cfe99519124b09972c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f4b7251c8000004030047304502202e95f42221904cdc0eb1ccf1e6c1c7bc2ccc7aa5dc61c564fb29606e53e97a4c022100fa4b65c83a53c90efda226fcb35b58196c6492c0243d4854e881b5de3be99fc9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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