mindfulmedicine.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ac:26:c2:97:50:ec:61:33:55:5d:66:73:60:9d:1a:fd:24 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mindfulmedicine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:26:c2:97:50:ec:61:33:55:5d:66:73:60:9d:1a:fd:24
Serial Number (int): 319916945944167797338383525715377255021860
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:c9:1b:7f:65:15:4b:b9:e8:3d:ed:06:3d:dd:87:fc:8b:c3:cf:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:27:12:a8:f7:66:95:1d:df:e3:dc:cb:5c:b2:ec:66:cd:f6:71:b6
Fingerprint (sha256): b8:a3:81:a0:6f:d1:41:b3:57:50:0d:72:06:6e:7a:41:03:13:4e:ef:a1:90:b1:b0:38:f6:47:eb:64:0b:fd:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mindfulmedicine.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mindfulmedicine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.arresto.com
*.burne.com
*.construimos.com
*.cpr-etc.com
*.cryptodomains.com.au
*.ff-hattersheim.de
*.grammys.uk
*.gulamali.com
*.isula.com
*.iyuantioao.me
*.kenitex.com
*.lateralization.com
*.lavesta.com
*.lendingtere.com
*.levanger.com
*.liveyourfreedom.co
*.loofah.com.au
*.mindfulmedicine.com
*.monlivre.co
*.munesh.com
*.pakrecipes.com
*.part-time.com
*.pghdhd.co
*.phim2v.net
*.pokienet59.com
*.precel.com
*.removebees.net.au
*.robocall.com.au
*.rohstgel.co
*.schizophrenianame.me
*.senour.com
*.seoconnecticut.com
*.sharadha.com
*.skillshae.com
*.skillslinktraining.com.au
*.smitbhavsar.me
*.suplementosbrasil.com
*.tasasdecambio.com
*.teentubeshd.com
*.titancomercial.co
*.trellian1231313.com
*.tucarita.com
*.turkresim.com
*.tyingtheknot.net
*.upstarrt.com
*.visak.com
*.wakefieldhoa.com
*.webfa.co
*.wijffels.com
*.zemmour.me
arresto.com
burne.com
construimos.com
cpr-etc.com
cryptodomains.com.au
ff-hattersheim.de
grammys.uk
gulamali.com
isula.com
iyuantioao.me
kenitex.com
lateralization.com
lavesta.com
lendingtere.com
levanger.com
liveyourfreedom.co
loofah.com.au
mindfulmedicine.com
monlivre.co
munesh.com
pakrecipes.com
part-time.com
pghdhd.co
phim2v.net
pokienet59.com
precel.com
removebees.net.au
robocall.com.au
rohstgel.co
schizophrenianame.me
senour.com
seoconnecticut.com
sharadha.com
skillshae.com
skillslinktraining.com.au
smitbhavsar.me
suplementosbrasil.com
tasasdecambio.com
teentubeshd.com
titancomercial.co
trellian1231313.com
tucarita.com
turkresim.com
tyingtheknot.net
upstarrt.com
visak.com
wakefieldhoa.com
webfa.co
wijffels.com
zemmour.me

Other certificates including the domain name mindfulmedicine.com

(limited to 100 certificates)
heeltotoe.com
elarmamento.com
construimos.com
lainaline.com
mindfulmedicine.com
pennavemeats.com
pennavemeats.com
mindfulmedicine.com
heeltotoe.com
mindfulmedicine.com
coroaroludo21cm.com

Certificate

The complete raw certificate details for mindfulmedicine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319916945944167797338383525715377255021860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 09:00:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:00:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mindfulmedicine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 653427046406275985224807922399768154834529853373330903159899742400528794649785382423620481883405118480667960799837105915003111480709328389100609848986391570778239923890654694050074160858859101891894316490013642444846733107287716068784983576175758063358982584929073969103348970101004007803298621220543503332742187361308898135372372774875082233175042325612507132847271570330183982923647005118572828566069271021044362548607732524289418512705430395426779593096716927533175465280458529258007403840650013155497889227379041572655492280636235592439013176235671624352781624156756732393723172104526413608673738570621600860498464869748409921844536695603356799058680979942863187562040818053680475876241211270267742991555684209989149018157768556579197769373267491805648230350751343766086321030926877754518087852925243637126508018690270515319814731774136779487159421112658909653154987412477492152823042849266253192730333052291868645236581010390717186632141413079654184713986525384838108864134207651172905989371442826644405096199195162596863184764285317486287357022818725988972510628296035415473195708175241537169214626742645795617025594423852539480591542474616803928828997561940353090672449058331339009831738123954396522404954913554618369957974627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60c91b7f65154bb9e83ded063ddd87fc8bc3cff6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1678 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.construimos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpr-etc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptodomains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ff-hattersheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grammys.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulamali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iyuantioao.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenitex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lateralization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lendingtere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.levanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveyourfreedom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loofah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mindfulmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monlivre.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.munesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pakrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.part-time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pghdhd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phim2v.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokienet59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removebees.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robocall.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rohstgel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schizophrenianame.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seoconnecticut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharadha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skillshae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skillslinktraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smitbhavsar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suplementosbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tasasdecambio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teentubeshd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titancomercial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trellian1231313.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tucarita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turkresim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tyingtheknot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upstarrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wakefieldhoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webfa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wijffels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zemmour.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arresto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'construimos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpr-etc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptodomains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ff-hattersheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammys.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulamali.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iyuantioao.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenitex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lateralization.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lendingtere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveyourfreedom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loofah.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindfulmedicine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monlivre.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'part-time.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pghdhd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phim2v.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokienet59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removebees.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robocall.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rohstgel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schizophrenianame.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seoconnecticut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharadha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillshae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillslinktraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smitbhavsar.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suplementosbrasil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasasdecambio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teentubeshd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titancomercial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trellian1231313.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucarita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkresim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyingtheknot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upstarrt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldhoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wijffels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zemmour.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9848a3d20000040300463044022066f781042839348bb047b648f9f857129ba99367c325178d1d02024863debcd002206dc3da216e6c8cbdc9befcd151d0fdd7ca79649f7fbb08c223abbea0de5172f6007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a9848a3c7000004030047304502210093fee844fe13f462f5bb81efb845c0c00b7747eaf4cdd72a9026787de39d27a202206f90fe686330ddfdc94b7d47b6d68b418ec1ee97b1222743d31854245e5a7a88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0086d558d8eb16eac7629bf7c236a9a9c006cf6c8c0286a092d71ac4c48802ab51934bb72c91c5178a23c06e513d7984155e393d265c9235ea6e67ce9879b0d4b14319de2491788551ca2444a8981d71c7add7d4482dec815b67f5fcca9c850b187e58e03b117da0037c8198e90cfeb629edf0a646c5ad961d59a3fb4ad28029442775a0b38a43c33f0337cc70af2d1eb9916bd237d17afcc674e6e1fc0b1437a032764499e9ecbae98475fafac11f13e3f22cb0d882c5953115d4083c0b11975a06492fc8beb1671f00981fa3b82902f7249a9c3cea4b420bc285b8cb92f2ffb2fb695baf434378bc416e793bde2812515f223dbb03df840a779db8249e09917f