aitaikuji.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:34:68:49:90:2b:49:fe:ba:f8:78:4f:84:20:7d:46:5f:ac was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aitaikuji.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:34:68:49:90:2b:49:fe:ba:f8:78:4f:84:20:7d:46:5f:ac
Serial Number (int): 366282448480258785249562631764954409492396
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:0f:b6:09:4f:d4:a4:89:f7:c4:9b:22:9c:af:1d:5d:26:c1:ea:e0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:43:6f:b9:1b:04:98:f5:40:45:99:42:9b:e2:0c:15:c1:4e:ee:50
Fingerprint (sha256): bc:65:08:89:8c:e1:18:c1:41:d8:e9:c0:72:e2:d4:f5:cf:d0:20:76:8f:1d:91:51:1e:99:f6:d8:31:72:88:6c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aitaikuji.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aitaikuji.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.airindiaairline.com
*.aitaikuji.co
*.alflen.com
*.antwine.com
*.astrowinner.com
*.ballandclaw.com
*.bizzworld.org
*.broomhall.com
*.buildabite.com
*.chocolatechipcake.com
*.costabonita.com
*.cursofoto.com
*.damun.com
*.diminutivo.com
*.elmallku.com
*.escoladeteologia.com
*.ettorneys.com
*.extracaseiro.com
*.fanstitok.com
*.filmalizando.com
*.foodgrowing.com
*.fukushima-is-still-news.com
*.gastronomes.com
*.glaucia.com
*.hkdramanow.pro
*.inkwellplanner.com
*.jammpak.com
*.jencomaskeck.com
*.kogls.co
*.kyletxfleamarket.com
*.marbellasuites.com
*.merbabe.com
*.mergold.com
*.misaj.com
*.moviesinfobsyok.org
*.mundocomercial.com
*.nauanngon.com
*.onlinebroadcasters.com
*.repossessors.com
*.rezas.com
*.sieminski.com
*.tanyakenapa.net
*.tautvydas.com
*.thinkism.com
*.twoinone.com
*.uosnetwork.com
*.villakalliopi.com
*.weiterdenken.com
*.whoisleahmccarthy.com
*.yunin.com
airindiaairline.com
aitaikuji.co
alflen.com
antwine.com
astrowinner.com
ballandclaw.com
bizzworld.org
broomhall.com
buildabite.com
chocolatechipcake.com
costabonita.com
cursofoto.com
damun.com
diminutivo.com
elmallku.com
escoladeteologia.com
ettorneys.com
extracaseiro.com
fanstitok.com
filmalizando.com
foodgrowing.com
fukushima-is-still-news.com
gastronomes.com
glaucia.com
hkdramanow.pro
inkwellplanner.com
jammpak.com
jencomaskeck.com
kogls.co
kyletxfleamarket.com
marbellasuites.com
merbabe.com
mergold.com
misaj.com
moviesinfobsyok.org
mundocomercial.com
nauanngon.com
onlinebroadcasters.com
repossessors.com
rezas.com
sieminski.com
tanyakenapa.net
tautvydas.com
thinkism.com
twoinone.com
uosnetwork.com
villakalliopi.com
weiterdenken.com
whoisleahmccarthy.com
yunin.com

Other certificates including the domain name aitaikuji.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for aitaikuji.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366282448480258785249562631764954409492396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-21 08:31:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-19 08:31:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aitaikuji.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748664634957211051388997560972072964855783165016023203676306518705976337786369846029273478534880425500256812200707406454807637723887089998899036490623781355815193973548526506949898820023574142618137210725356090558398427342065154023732562272263977423931311217766488761647747478489873200297020578526268521057689467069861984075296209276965778177493529957677778159922548738646769723536164318267801044075272422842734139183184250916433947684900557163405430374215319970524648758608030030255537014541673268641966319054400231672047954300892190435301170543823625249830966332689398683016511656477701097190170228046870575749718157129603079129465464713586570957330621769462510375556583500999861793228955637268177702826279532030417554569879590208210455980484905799490943745897352086819249992459440250824148890861931084482343553048755257895699640881784240792238497406215118816455957609673896116606082397072012999093466327084024559440993544224377796098533349880320590787949968016193083368207729270626834509877352063458883553873338283430779356332254183296839929860596832534434857035701376767784947613354031638617041778915978144320592714277786667278705403189693792231293692245381953953266343615469983648379158896822974422416237486642506113327246230409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf0fb6094fd4a489f7c49b229caf1d5d26c1eae0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1758 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airindiaairline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aitaikuji.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alflen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrowinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballandclaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bizzworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broomhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildabite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocolatechipcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costabonita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursofoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.damun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diminutivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmallku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escoladeteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ettorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extracaseiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanstitok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmalizando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodgrowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fukushima-is-still-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gastronomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glaucia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkdramanow.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkwellplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jammpak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jencomaskeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kogls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyletxfleamarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marbellasuites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merbabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mergold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moviesinfobsyok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundocomercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nauanngon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinebroadcasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repossessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rezas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sieminski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanyakenapa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tautvydas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinkism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twoinone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uosnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.villakalliopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weiterdenken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whoisleahmccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yunin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airindiaairline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aitaikuji.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alflen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrowinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballandclaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizzworld.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broomhall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildabite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolatechipcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costabonita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursofoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diminutivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmallku.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escoladeteologia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ettorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extracaseiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanstitok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmalizando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodgrowing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukushima-is-still-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gastronomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glaucia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkdramanow.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkwellplanner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jammpak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jencomaskeck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kogls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyletxfleamarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marbellasuites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merbabe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mergold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesinfobsyok.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundocomercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nauanngon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinebroadcasters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repossessors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rezas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sieminski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanyakenapa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tautvydas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twoinone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uosnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villakalliopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiterdenken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoisleahmccarthy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170fc6f34dc0000040300473045022100f989dbe2040facb988cc78c7c752078cafc16534c372f5fd6527c94e6eeddcb402200b34347acb6d2e834daace741291c18e886efec70db46f81f99956fd01eea61a007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170fc6f34da00000403004630440220166a1945656af6d2f4ccecd0da63d8175892e4ae874c3a1f3f5fa8eb42dc9fde02201379fd0a1e642b74719dd308426f9358fac2a65f84b2c87077aa55332be8919e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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