asqf.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d3:dd:23:b6:0a:73:98:77:37:09:95:58:f1:94:71:9b:2d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=asqf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:dd:23:b6:0a:73:98:77:37:09:95:58:f1:94:71:9b:2d
Serial Number (int): 333430382025283875443100050185721914432301
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:33:97:22:fe:c1:29:f5:be:1b:31:9e:ac:b1:d8:95:5a:d0:b7:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:fd:ce:1a:6d:25:39:98:f5:54:8f:01:8e:5a:9a:f8:b4:05:08:45
Fingerprint (sha256): bf:e4:84:64:3f:46:b9:70:49:54:6a:4a:39:fd:5e:ea:74:b9:6c:34:99:c0:46:c8:e4:33:31:14:a3:78:0d:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate asqf.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asqf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alkyoni.com
*.asqf.com
*.ayris.com
*.ballyhannon-castle.com
*.barrabrava.com
*.batterycredit.co
*.batteryprices.co
*.bitreg.me
*.blockstory.com
*.boomblocks.com
*.botagents.co
*.cafecoaches.com.au
*.cozyexpress.com
*.dagum.com
*.daizhao.com
*.daosales.co
*.darkmoto.it
*.defilaw.co
*.desorden.com
*.ershaad.com
*.escortargentinas.com
*.evanstonweddings.com
*.gaylene.com
*.gravell.com
*.handmake.me
*.hasanoglukumas.com
*.indefenseofchristiansaction.org
*.izletv.com
*.kiropraktorklinik.com
*.mhdaily.org
*.modling.com
*.ocehloechl.com
*.papersnet.com
*.playarium.me
*.primeiro.com
*.result.asia
*.riskfacotr.com
*.riskfactpr.com
*.riskfator.com
*.riskgactor.com
*.rockymountainjewelry.com
*.rouba.com
*.salvas.com
*.souldatafirms.co.uk
*.ssociete.com
*.studentbookshop.com
*.tanca.com
*.um-ap.com
*.videosengracados.com
*.yingshun.com
alkyoni.com
asqf.com
ayris.com
ballyhannon-castle.com
barrabrava.com
batterycredit.co
batteryprices.co
bitreg.me
blockstory.com
boomblocks.com
botagents.co
cafecoaches.com.au
cozyexpress.com
dagum.com
daizhao.com
daosales.co
darkmoto.it
defilaw.co
desorden.com
ershaad.com
escortargentinas.com
evanstonweddings.com
gaylene.com
gravell.com
handmake.me
hasanoglukumas.com
indefenseofchristiansaction.org
izletv.com
kiropraktorklinik.com
mhdaily.org
modling.com
ocehloechl.com
papersnet.com
playarium.me
primeiro.com
result.asia
riskfacotr.com
riskfactpr.com
riskfator.com
riskgactor.com
rockymountainjewelry.com
rouba.com
salvas.com
souldatafirms.co.uk
ssociete.com
studentbookshop.com
tanca.com
um-ap.com
videosengracados.com
yingshun.com

Other certificates including the domain name asqf.com

(limited to 100 certificates)
hellofurher.com
kontaktlens.com
secretlanguagename.com
kontaktlens.com
asqf.com
asqf.com
asqf.com
wxtl.com

Certificate

The complete raw certificate details for asqf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9Kx3z6Jg5ciSbeROfovd
cKvIFDav6ZBpXAWb7atpOWi3b9rGnb5Ao2eGVjVdAcKEzHPvVv1PiAfehQ8+S5eT
KOgEZkuSzy3dIXj20Lw2wB0sILoHGiI4gqDcrrrDZprIXvYyVe3f+Ky1W7N52Ug1
gLIqr+QM/AjX7jSbaPINZG151JQd7y/IzNyhF7YQKpjeqWJ2CbE87EHcciv2YY4z
oawmM3NK+qrbEm2eMGdt/56MnFJh96GndWUQRSunVmLUN2PmoV2MnUspi6DoCYXh
6FjHSl7s2cppT3Ni/nvBTjBYBLsL4MP5Bdy7a7rXWsWS6H0iXz83J0EfPTpVZDRU
YVoSbtYurVSki0PqrrKkb6f2JIomRmlQgj+joAEDwI/G2tEPACKCmr7W7/BqRMH5
QX3Ne5sHvGITIT+9raW5/deYU8Z2bqZoCU5HMlnmFqNbHr3rpoTzkf7U3x43V8Ys
TjqEli15GWwE0Y+OFaj8QglDL1jcZwCx3lEMN80yU0OJsV6cdNvA1lBSIXNM9SQZ
Ey7iGyVGkDdpmvnrmmxFSRsMZoSZ9lPSDbeHfBGlL8Ro+pTxXpTLAs9zdTBUditq
M6SkZI7ytoTP1YTPQe+L/bmWEIQmCuaPLs4koA1wo05tLYdXtyxt0xBH1oMzD5Bq
Y4Z+LS5VpY3fZODJ2nylHl8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333430382025283875443100050185721914432301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-20 13:39:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-20 13:39:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asqf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 998181621745622894074608384480929908384568979452414786232517225776458545957888436917064056470487209599038441824316021073227325099302772918675186971427912691584860655384151811174329704825044960299975183937332982084618664918260547314225503101009127208522557599917058479198234543539367006471312002176055411019991007470427229711785199590338378988754866326848196936787051285785257169700503500428883795720113039458384767652524310566370546990186206648387320789133814432139843324369395333738555765727166525060540878617570238551121663519732598329628385567012357193527514418207478486524100069129818365251347548880916512783431193471037584245679732129015678074690313732396700980587941211056319117880704055340489131167626117079677070183269351321605441821219952289023517593225905574468884625170328336611764228338217331938498569899181000633666411470553526711023348438305397512214734499267709662637792814178123599180467859603674162299560620925172234164822652295416931879053659805932264757767239662870061843183721258635867172816105579062278505254739235225598741547320134000353114462921435362337205410575427566702970858221329254843650539752733813648499153793798888496801851202966168765387516563324909812802813200526885737871043828549614406688819191391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78339722fec129f5be1b319eacb1d8955ad0b745
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alkyoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asqf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballyhannon-castle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barrabrava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batterycredit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batteryprices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitreg.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boomblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botagents.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafecoaches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cozyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dagum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daizhao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daosales.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkmoto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.defilaw.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desorden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ershaad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escortargentinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evanstonweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaylene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gravell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handmake.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasanoglukumas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indefenseofchristiansaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.izletv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiropraktorklinik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhdaily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ocehloechl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papersnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playarium.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primeiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.result.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riskfacotr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riskfactpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riskfator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riskgactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockymountainjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rouba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.souldatafirms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssociete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studentbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.um-ap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videosengracados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yingshun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkyoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asqf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballyhannon-castle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrabrava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batterycredit.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batteryprices.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitreg.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boomblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botagents.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafecoaches.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cozyexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dagum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daizhao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daosales.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkmoto.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defilaw.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desorden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ershaad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escortargentinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evanstonweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaylene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gravell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handmake.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasanoglukumas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indefenseofchristiansaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'izletv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiropraktorklinik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhdaily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocehloechl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papersnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playarium.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primeiro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'result.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskfacotr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskfactpr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskfator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskgactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockymountainjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rouba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souldatafirms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssociete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'um-ap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videosengracados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yingshun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185cf9e656600000403004730450220345d0c47e437091707e42ed6236ae1efd6f89f791aa497290fe6ab77b96eb904022100b0a50942dfe15a78322d4bc99af8446340bb4d305b2833f7b92dcc444dbe1dad007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185cf9e654f000004030046304402203d98a82b8ce742792c21b75b2b1a8b36d0dd4aeda465a88a8684616d8c0f428b022051138dd620e7e231a7197d208f3f22e7e9fb56467ff27ace6f42380fe23a9d0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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