sejamacaperuana.com

Issued by R3

About this certificate

This digital certificate with serial number 04:86:91:9a:3c:b4:d0:ad:62:c1:f8:ae:72:44:e7:f3:4b:35 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sejamacaperuana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:86:91:9a:3c:b4:d0:ad:62:c1:f8:ae:72:44:e7:f3:4b:35
Serial Number (int): 394240519798821995819861136748036708584245
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ee:3c:89:ca:30:72:9b:c2:0c:7c:40:c8:83:e8:2b:01:3e:06:2e:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5e:11:65:ad:98:c4:04:8c:f9:28:6a:a3:d8:6e:93:35:a9:7b:10:b8
Fingerprint (sha256): bb:43:94:b7:f5:77:6c:04:8c:06:a9:95:cf:ba:88:19:87:b9:32:24:12:21:48:1e:44:7e:0b:a3:c9:aa:cf:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sejamacaperuana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sejamacaperuana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abissmoda.com
*.actionoverheaddoorsav.com
*.aithings.co
*.aunty.com.au
*.biblsoft.org
*.bigbrothersinvestment.com
*.blockchainaccounting.co
*.bloodandfirelarp.com
*.chefgrade.com.au
*.coins-ph.online
*.comtekbroadband.com
*.configuration.me
*.cossogno.com
*.cwch07.com
*.digitaldealership.co
*.enrool.com
*.fablabcoworking.com
*.findcosmeticdentists.org
*.gamerscool.com
*.genderbabyfood.com
*.graffz.com.br
*.hauterouteskiandrun.com
*.heartoftexashuskies.net
*.hitlerargentina.com
*.homeblog.com.au
*.hpsdraa.com.br
*.icarsclub.com
*.jamanetwork.co
*.kayamt.xyz
*.kccinews.com
*.kckckc.net
*.kettlered.com
*.kingzasia888.pro
*.mocheeze.com
*.myprpopcorn.com
*.myxoverageinfo.com
*.needmoretools.com
*.pagentvision.com
*.parkrightservices.com
*.plaiziou.com
*.roofriders.co
*.scab.me
*.securtymutual.com
*.seiiartworks.com
*.sejamacaperuana.com
*.sportsmedinfo.net
*.tusashop.com.br
*.userid.com.au
*.vmkinnovations.com
*.vulkan-play-casino.com
abissmoda.com
actionoverheaddoorsav.com
aithings.co
aunty.com.au
biblsoft.org
bigbrothersinvestment.com
blockchainaccounting.co
bloodandfirelarp.com
chefgrade.com.au
coins-ph.online
comtekbroadband.com
configuration.me
cossogno.com
cwch07.com
digitaldealership.co
enrool.com
fablabcoworking.com
findcosmeticdentists.org
gamerscool.com
genderbabyfood.com
graffz.com.br
hauterouteskiandrun.com
heartoftexashuskies.net
hitlerargentina.com
homeblog.com.au
hpsdraa.com.br
icarsclub.com
jamanetwork.co
kayamt.xyz
kccinews.com
kckckc.net
kettlered.com
kingzasia888.pro
mocheeze.com
myprpopcorn.com
myxoverageinfo.com
needmoretools.com
pagentvision.com
parkrightservices.com
plaiziou.com
roofriders.co
scab.me
securtymutual.com
seiiartworks.com
sejamacaperuana.com
sportsmedinfo.net
tusashop.com.br
userid.com.au
vmkinnovations.com
vulkan-play-casino.com

Other certificates including the domain name sejamacaperuana.com

(limited to 100 certificates)
sejamacaperuana.com
sejamacaperuana.com
sejamacaperuana.com
sejamacaperuana.com
sejamacaperuana.com

Certificate

The complete raw certificate details for sejamacaperuana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394240519798821995819861136748036708584245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 20:06:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 20:06:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sejamacaperuana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821692322995170621792616587667146500291245330556433984805392300569829106922166825959777515343319659047800009489345203947682902149474870073663623829130656069001151331522727613801390264265991033991197928100361331274194510907953950724815679146132384137760625295330645973540292821968587262437490033747740881221081287697367141254007520116222798691462745787950073663728365499142298143929917068673538542755606523918371390179003536119173416766645758903825989325341745089691592265972943275112148517650814468877723512482996287257203881034610758752058172699420012476481889716687729804615672863887021212625462324022787661391363157928092561554873072984778280697459483392084390183387225269234761022610253139173601724702090267276442149511489343209185444031556653700657545435612237544129360974161200002558255353699734626270254635105042417682200342868786091307389942318773037879445914324862223163578176937849249487360253620026668488762978145676444913997845890476486322302884970228063340356282502296828080023849298565982365648843773149663843924121997958635661765753755833677647860262388306764952436391264139890110178683986198664392266575176028562382546263848836188410273878610018279723965971791394625145892385838772884507552799277705864422148702343813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee3c89ca30729bc20c7c40c883e82b013e062e19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abissmoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.actionoverheaddoorsav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aithings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aunty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biblsoft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigbrothersinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockchainaccounting.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloodandfirelarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chefgrade.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coins-ph.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comtekbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.configuration.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cossogno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwch07.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitaldealership.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enrool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fablabcoworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findcosmeticdentists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamerscool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genderbabyfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graffz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hauterouteskiandrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartoftexashuskies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitlerargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeblog.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpsdraa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icarsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jamanetwork.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kayamt.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kccinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kckckc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kettlered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingzasia888.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mocheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myprpopcorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myxoverageinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.needmoretools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pagentvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parkrightservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plaiziou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roofriders.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scab.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securtymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seiiartworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sejamacaperuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsmedinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tusashop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.userid.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vmkinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vulkan-play-casino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abissmoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actionoverheaddoorsav.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aithings.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aunty.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblsoft.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbrothersinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockchainaccounting.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodandfirelarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chefgrade.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coins-ph.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comtekbroadband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuration.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cossogno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwch07.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldealership.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fablabcoworking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findcosmeticdentists.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamerscool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genderbabyfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graffz.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hauterouteskiandrun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartoftexashuskies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitlerargentina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeblog.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpsdraa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icarsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamanetwork.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kayamt.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kccinews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kckckc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kettlered.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingzasia888.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mocheeze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myprpopcorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myxoverageinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needmoretools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagentvision.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkrightservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plaiziou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roofriders.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scab.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securtymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seiiartworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sejamacaperuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsmedinfo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusashop.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userid.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmkinnovations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vulkan-play-casino.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dcd7d76fc000004030046304402204d7a148549358f4df0d989fc2074f47eed3f23284e002a344dad436be6188f2d02207d053167ecc4cda054fbb8d99cb35b9c2b9a668dc987e1d84502f20b5af6c220007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dcd7d7707000004030047304502204cb46612d67d840471da3f479bbcac569e77cbc5116da75217266394169b7865022100eb748374e68a511412ea01dd883f63a423fa2846d31f9998197b764535ba038a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b7b2d538d25aac497c567a8b5f8b1822d9f26c4d5fa95637f9e2205d14597c1457570842034218582cfb8ef3390e87fb3350d1634602d138da711432a3b6f01e3f3cd7ca2050d13188f8c51f16242c129f264cc1373460ccd7d04b350fb263ff80986f7368620c66aa0a8adfb3d4c470b3f473bf2894300e609ffff0567799ac1e1ed9679aebb2d988812c633ba0f35b24ae13fe5e211a72786d73302c86ca8e6b0060c48cfb013b02024f9dee65b8568ac8161804ff56228216e9a63621f53d9242f4e4afafda93d5a44b5311fd0658bb987e88f5f356d045dd8b90a71868070db5c97ac651be48b96a59e7596e10ef756ddee434fd35a63c2ffaaf9b8651e1