nzic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7d:b8:a5:d1:e1:bc:c6:9a:c1:56:f5:0b:19:2d:fa:e7:69 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nzic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7d:b8:a5:d1:e1:bc:c6:9a:c1:56:f5:0b:19:2d:fa:e7:69
Serial Number (int): 304117592597512497648844749495385311602537
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f5:78:c2:82:9c:23:bd:e0:6d:d5:f5:ca:c2:8c:51:7e:d9:59:93:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:76:97:ca:04:88:f1:30:09:c4:3f:70:5d:0f:27:5b:c1:15:b0:fb
Fingerprint (sha256): ba:3d:5f:19:43:d8:3d:b6:5f:e3:07:b1:e6:2d:f4:7e:3a:96:9b:95:93:fd:f2:b3:c0:5a:60:d4:e5:b1:57:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nzic.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nzic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alayan.com
*.allertonglass.com
*.alsad.net
*.aromacrystals.com
*.atchomes.com
*.bestflowersbyjulie.com
*.bukovski.com
*.buscemis.com
*.crosskeysinn.com
*.cybilla.com
*.delander.com
*.deluthtrading.com
*.devoradas.com
*.dheevara.com
*.didgeridoonas.com
*.dienban.com
*.ekitapindir.biz
*.embrulho.com
*.enfeite.com
*.gabeira.com
*.garrafones.com
*.gozlan.com
*.griffe-black.com
*.habitacasas.com
*.hatchel.com
*.hdsexygirls.com
*.iwhh.com
*.kalinski.com
*.ketime.com
*.klucze.com
*.lienzos.org
*.lucich.com
*.macrofunding.com
*.magro.com
*.montrealbicycles.com
*.nijenhuis.com
*.noorain.com
*.nzic.com
*.primicias.com
*.productone.com
*.ragha.com
*.segurtec.com
*.shanelyang.com
*.siamsports.com
*.spirittospirit.com
*.stream-tv2.net
*.takro.com
*.varadhan.com
*.worldofhondayamaha.com
*.yunit.com
alayan.com
allertonglass.com
alsad.net
aromacrystals.com
atchomes.com
bestflowersbyjulie.com
bukovski.com
buscemis.com
crosskeysinn.com
cybilla.com
delander.com
deluthtrading.com
devoradas.com
dheevara.com
didgeridoonas.com
dienban.com
ekitapindir.biz
embrulho.com
enfeite.com
gabeira.com
garrafones.com
gozlan.com
griffe-black.com
habitacasas.com
hatchel.com
hdsexygirls.com
iwhh.com
kalinski.com
ketime.com
klucze.com
lienzos.org
lucich.com
macrofunding.com
magro.com
montrealbicycles.com
nijenhuis.com
noorain.com
nzic.com
primicias.com
productone.com
ragha.com
segurtec.com
shanelyang.com
siamsports.com
spirittospirit.com
stream-tv2.net
takro.com
varadhan.com
worldofhondayamaha.com
yunit.com

Other certificates including the domain name nzic.com

(limited to 100 certificates)
streamingvfcomplet.zone
nzic.com
nzic.com
ollig.com
chattanoogaairport.com
esuede.com
nzic.com
www.swashplate.com

Certificate

The complete raw certificate details for nzic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304117592597512497648844749495385311602537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 20:45:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 20:45:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nzic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 642750913422607185132210645155481547820304887907394202128456758339048106365635037318683642237376621687168195571927262555241031355726996095169614893433492485526079371529953290376023166105850395176586548169714450870773386245601722018243933644462432713902626950262236899167455541413736902683736929583999678753039704816291950398916635086589455446668292906949002480899375198615546462662626160511610612695668178742165935143617266944965122528567498203341001787968800985430071281101831034436879516404016927892905876235812391631275377554122774786508405351126887294953555111235930252884870286656872697252416867968077295769823425258257393004795017997591043196127545226608942887899311183404143151240419372729521496659072661032838756078842147646914054746178049662594743361705436212561195319559139735621262728643460928777170117649718665738056042071251436184545992900920702428257111984569919096808810867212604035948954035731038929574091827154383606631436565852669738122324493092271604196464098920770418151742872269155543672372824591242116620768185295168255566097059658905242207997838904991996496838091349347271157269326238103460252643702200877221659220865421977706038467175332723015224999492318534041173025991599400264333383625548694702050358763087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f578c2829c23bde06dd5f5cac28c517ed95993ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allertonglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alsad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aromacrystals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atchomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestflowersbyjulie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bukovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buscemis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crosskeysinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cybilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deluthtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devoradas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dheevara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.didgeridoonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dienban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekitapindir.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.embrulho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enfeite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gabeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garrafones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gozlan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.griffe-black.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habitacasas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hatchel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdsexygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalinski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klucze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lienzos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrofunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montrealbicycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nijenhuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noorain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primicias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.productone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ragha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segurtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shanelyang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siamsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spirittospirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stream-tv2.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varadhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldofhondayamaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yunit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allertonglass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aromacrystals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atchomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestflowersbyjulie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buscemis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosskeysinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delander.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deluthtrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devoradas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dheevara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'didgeridoonas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dienban.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekitapindir.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embrulho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enfeite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabeira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrafones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gozlan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'griffe-black.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitacasas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hatchel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdsexygirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwhh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalinski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klucze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lienzos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrofunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montrealbicycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nijenhuis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noorain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primicias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurtec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanelyang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siamsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spirittospirit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream-tv2.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varadhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldofhondayamaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3f05c9e40000040300473045022100ae97632cfeae114c628be301b32e5487a4c5ce0cbb95cac7a8fcd07497688fd5022077bcb1d31b815ad7a15dff877d25aca9157b8d92de9688847b126640bc398c040076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f3f05ca1b000004030047304502203108b5b5278cf6f0db4808eac9c19d401ca2445d9168e2c084c9a2dee7e306ec022100ab4b84f7bdf6a4a3a860759750cb006217bd2fb8f74ff3d29bade91a4af91a74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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