propiedadesybeneficios.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:65:31:3f:e7:85:67:c9:81:92:4c:35:dc:6c:04:62:80 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=propiedadesybeneficios.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:65:31:3f:e7:85:67:c9:81:92:4c:35:dc:6c:04:62:80
Serial Number (int): 322041626853462928694171253933947857691264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:13:b4:92:b6:e1:42:a8:68:6a:e7:b4:30:f1:cb:74:3b:53:4a:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ed:f1:62:fe:08:a2:cf:1f:18:03:d5:58:87:65:5f:a8:62:bf:2b:a4
Fingerprint (sha256): be:23:83:e9:59:d4:7c:c9:83:57:d5:e1:da:78:ac:79:cc:46:7a:f9:82:12:33:03:fa:5b:2d:fb:53:c7:fb:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate propiedadesybeneficios.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for propiedadesybeneficios.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4858.au
*.5271.au
*.advertoonsmedia.com
*.alwaysforeverjewelry.com
*.apkpure.cm
*.blackwellbulletin.com
*.boom-it.online
*.bridkah.com
*.cheaploanbroker.com
*.chot.com.au
*.dashpaymagazine.com
*.eleaks.net
*.emotion-tee.com
*.enregyclassaction.com.au
*.fukilist.com
*.gacebook.co
*.garden-sheds-89895.com
*.gilmourses.us
*.gpu4vision.org
*.heat-pumps-48506.com
*.hotinsensity.com
*.houdinifoundations.com
*.hpcpipay.com
*.hqmoviespoints.com
*.jenniferzimmermanmd.com
*.jewelsseptic.com
*.krcapitalpartners.com
*.mining.cm
*.mortierbrigadetech.com
*.mundovideohd.net
*.netglix.co
*.nzx.com.au
*.ogomoives.com
*.ohiocityyogacollective.com
*.phoenix-narada.com
*.pinhome.net
*.propiedadesybeneficios.com
*.reparise.us
*.samsungfirmwares.net
*.serene.com.au
*.sportche.ca
*.stimulator.com.au
*.sunset.com.au
*.sweetislife.com
*.tustoons.biz
*.ulattluvjw.com
*.vasquezconfecciones.com
*.vianosbodyshop.com
*.wgoogle.co.uk
*.youngmaryrecords.com
4858.au
5271.au
advertoonsmedia.com
alwaysforeverjewelry.com
apkpure.cm
blackwellbulletin.com
boom-it.online
bridkah.com
cheaploanbroker.com
chot.com.au
dashpaymagazine.com
eleaks.net
emotion-tee.com
enregyclassaction.com.au
fukilist.com
gacebook.co
garden-sheds-89895.com
gilmourses.us
gpu4vision.org
heat-pumps-48506.com
hotinsensity.com
houdinifoundations.com
hpcpipay.com
hqmoviespoints.com
jenniferzimmermanmd.com
jewelsseptic.com
krcapitalpartners.com
mining.cm
mortierbrigadetech.com
mundovideohd.net
netglix.co
nzx.com.au
ogomoives.com
ohiocityyogacollective.com
phoenix-narada.com
pinhome.net
propiedadesybeneficios.com
reparise.us
samsungfirmwares.net
serene.com.au
sportche.ca
stimulator.com.au
sunset.com.au
sweetislife.com
tustoons.biz
ulattluvjw.com
vasquezconfecciones.com
vianosbodyshop.com
wgoogle.co.uk
youngmaryrecords.com

Other certificates including the domain name propiedadesybeneficios.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for propiedadesybeneficios.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322041626853462928694171253933947857691264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 09:12:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 09:12:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'propiedadesybeneficios.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769018284953662119435058131220760418624918706309616086613314686584758317637419621382295048680919321996155948648912336359421040082112958031606557083845251542906256178101010020929080095431708854527390025221578331275837558516115706103028998405302490199515945610965051679760527509119375083463364409618773315605516659964236590679106243389545044030254135110129556222121346681312315996997485576618093145802101481187979544504117217631108544712434814317378699196454461030729848067423362446407311531965443022571986069361252987514952416739482816713588079012869214399799269814776036604410291508514642637861358758461575374801723497511949738331016007301338551579196161376536962456239324822333168396617999219248085780839027786428142656959965147132621835952923840216001833941091482371225990453489239470437946325599044472380623491183258679393205060318926462684370116154870269386410006483745442163938116990887441203044814427557573156622838286610665143987823254098323870473939458778128983653481584793438922764219266420293242471126460681945685803994855222212032631443068285649870227264067488080148797941287044839556542440897257435671294834637471104223773521091336279275457395847926074264565284491834258177862567027055543556613350065473121458616118396591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d13b492b6e142a8686ae7b430f1cb743b534ad9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4858.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5271.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advertoonsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alwaysforeverjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apkpure.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackwellbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boom-it.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bridkah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheaploanbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dashpaymagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eleaks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emotion-tee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enregyclassaction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fukilist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gacebook.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garden-sheds-89895.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gilmourses.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpu4vision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heat-pumps-48506.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotinsensity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houdinifoundations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpcpipay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqmoviespoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenniferzimmermanmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewelsseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krcapitalpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mining.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortierbrigadetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mundovideohd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netglix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogomoives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohiocityyogacollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoenix-narada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinhome.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propiedadesybeneficios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reparise.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsungfirmwares.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serene.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportche.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stimulator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunset.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetislife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tustoons.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulattluvjw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vasquezconfecciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vianosbodyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wgoogle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youngmaryrecords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4858.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5271.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advertoonsmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwaysforeverjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apkpure.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackwellbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boom-it.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridkah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheaploanbroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chot.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashpaymagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleaks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emotion-tee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enregyclassaction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fukilist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gacebook.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garden-sheds-89895.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gilmourses.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpu4vision.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heat-pumps-48506.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotinsensity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houdinifoundations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpcpipay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqmoviespoints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenniferzimmermanmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewelsseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krcapitalpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mining.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortierbrigadetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mundovideohd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netglix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogomoives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiocityyogacollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenix-narada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinhome.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propiedadesybeneficios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reparise.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsungfirmwares.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serene.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportche.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stimulator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunset.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetislife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tustoons.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulattluvjw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vasquezconfecciones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vianosbodyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wgoogle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngmaryrecords.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c818fa95400000403004630440220206b17c7cf3aa89dfe492cb0a83b2af9eb03114eb584aa71a4f7d63227b001fd02201ce6f78ca7c9186d659f0ba20a6e23599a71bf9f5e02be0a68645537c519cee900760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c818faa160000040300473045022100e1634dd09c933fc58548dfeaf9cabfafea92596f49a4f53a71955d3b78d84cf002205b6f8d24e1c7fb5c1a169d0c71fadc30843b9d6506a29cd34b3b9834e66598db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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