tiauna.com

Issued by R3

About this certificate

This digital certificate with serial number 03:be:69:4d:6d:6d:1c:5e:e4:22:ea:17:16:47:ba:d8:6e:72 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tiauna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:69:4d:6d:6d:1c:5e:e4:22:ea:17:16:47:ba:d8:6e:72
Serial Number (int): 326130478476101868155027716322406035910258
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3f:75:f7:a9:a5:4f:ec:ef:3f:05:a6:91:0f:a2:b4:97:9d:fa:c8:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3b:97:af:f3:c8:07:89:96:c8:78:d5:19:fe:6e:52:c8:91:59:23:d8
Fingerprint (sha256): c0:92:1d:f8:cf:fa:ea:12:c0:90:92:af:bc:44:4c:b1:17:59:9c:37:d3:fe:6d:cf:2c:4b:82:c2:33:e9:fd:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tiauna.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tiauna.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.afimy.com
*.arasak.co
*.aslain.co
*.barbend.co
*.bitcoinkash.com
*.bobbyadams.com
*.careinitatives.org
*.centraltexascremations.com
*.cheryks.com
*.discas.co
*.elmanitas.com
*.erotskioglasi.net
*.fcoinjp.co
*.gogalaxy.co
*.goodfon.co
*.hantecfx.co
*.hardayal.com
*.hiroseuk.co
*.ihergo.co
*.interactivebrokers.vip
*.kaochi.com
*.levantado.com
*.librairie-v.co
*.m0nkrus.co
*.mailchi.co
*.mitly.co
*.mydicewallet.co
*.mzco.org
*.neweegg.co
*.nicotv.co
*.nitago.co
*.nottinghamshirepayslips.co.uk
*.onlesaura.com
*.osada.com
*.pcmban.co
*.pkpassvalidator.com
*.protovation.com
*.punishbang.co
*.radiko.co
*.scattorney.com
*.showjet.co
*.superiogrocers.com
*.tiauna.com
*.toster.co
*.trottel.com
*.unipus.co
*.wayafir.com
*.wforex.co
*.ww2toys.net
*.yopublico.net
afimy.com
arasak.co
aslain.co
barbend.co
bitcoinkash.com
bobbyadams.com
careinitatives.org
centraltexascremations.com
cheryks.com
discas.co
elmanitas.com
erotskioglasi.net
fcoinjp.co
gogalaxy.co
goodfon.co
hantecfx.co
hardayal.com
hiroseuk.co
ihergo.co
interactivebrokers.vip
kaochi.com
levantado.com
librairie-v.co
m0nkrus.co
mailchi.co
mitly.co
mydicewallet.co
mzco.org
neweegg.co
nicotv.co
nitago.co
nottinghamshirepayslips.co.uk
onlesaura.com
osada.com
pcmban.co
pkpassvalidator.com
protovation.com
punishbang.co
radiko.co
scattorney.com
showjet.co
superiogrocers.com
tiauna.com
toster.co
trottel.com
unipus.co
wayafir.com
wforex.co
ww2toys.net
yopublico.net

Other certificates including the domain name tiauna.com

(limited to 100 certificates)
themeisters.com
yanaguptayana.com
tiauna.com
wwwblack-friday.net
orilynnofficial.com
direktverkauf.com
myshinyjewelry.com
www.knocka.com
tiauna.com
etheridge.net
tiauna.com
thefastball.com

Certificate

The complete raw certificate details for tiauna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326130478476101868155027716322406035910258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 20:41:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 20:41:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tiauna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764319737932098687458856125314153018315358032721471274664746227934981143862706225758679819015191791449997726250366971326033710070990623240791785466890846333192329053495488995260886981810280002120436078181710689433362974966638277523772090790759483416921189669310306039358264814048018473757350066105041506476788885495655707391856744792351900511817599276717604114263439072815139411739974386332831665716392786425079651265730488595976081409552903091274308044855047313118126013090134562829288112182169278959571334198408013492337896261724281913981731212444136570711846179501491263414108662015393284443467242206113194681212971917588197161057679731572603664874852092786071627648597693323892824010434984558983097722948349115853092053649987196146228872193237901234461537864228864500370690361310261140952542015800756302747772283093464225069797492537482046978540900063890630149204783875501847824501114190337292128823060220073216124576112807801889259772119884298006685816145596901094767599485857017549045997013012299105211361634608170544276683198991053843593507332620037380350769308255988625535858509716237988453941879544853747655474345648799069835292202344190027355102832248311074797851619853882933199285550628909376801391415222003760254235736553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f75f7a9a54fecef3f05a6910fa2b4979dfac810
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1530 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afimy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arasak.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aslain.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbend.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinkash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobbyadams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careinitatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centraltexascremations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheryks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discas.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmanitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erotskioglasi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcoinjp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gogalaxy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodfon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hantecfx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardayal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiroseuk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihergo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interactivebrokers.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaochi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.levantado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.librairie-v.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m0nkrus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailchi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydicewallet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neweegg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicotv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitago.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nottinghamshirepayslips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlesaura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcmban.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pkpassvalidator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.punishbang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiko.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showjet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superiogrocers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiauna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toster.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trottel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unipus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayafir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wforex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ww2toys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yopublico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afimy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arasak.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aslain.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbend.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinkash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobbyadams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careinitatives.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centraltexascremations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheryks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discas.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmanitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erotskioglasi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcoinjp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gogalaxy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodfon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hantecfx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardayal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiroseuk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihergo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactivebrokers.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaochi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levantado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'librairie-v.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm0nkrus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailchi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydicewallet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neweegg.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicotv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitago.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nottinghamshirepayslips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlesaura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcmban.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkpassvalidator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punishbang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiko.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scattorney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showjet.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiogrocers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiauna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toster.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trottel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unipus.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayafir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wforex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2toys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yopublico.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d0f12d8d80000040300473045022058da86bbd3848eecaa081528abb8db9396d1488906ed79018a0d91fd0e7527b4022100c0676483fd88e8932981e1c380558eaf22b9e12e7483c57fc5978343bdedb0d8007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d0f12d98d0000040300463044022041b1bc0f6f16b43b96498b971bc532a5916c9e433613e1fd699c6a7cd162dbb402205346219e3d608dd4b270457b02873171da6118e296eb66405bec4919f5c8da65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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