semig.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:27:29:a2:ec:59:97:1a:0e:6b:30:df:db:96:0f:eb:fd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=semig.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:27:29:a2:ec:59:97:1a:0e:6b:30:df:db:96:0f:eb:fd
Serial Number (int): 273639079084917265253186563363632898370557
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:a4:fc:56:14:85:51:4a:68:ff:b5:c4:ba:98:47:04:81:0d:b5:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:54:19:f8:22:8a:09:a2:3b:49:54:58:8e:65:0f:a4:fd:18:3a:0b
Fingerprint (sha256): c0:d9:d7:41:e5:9b:3e:38:91:72:2a:86:cd:1d:38:8a:eb:0c:a8:ea:67:9b:6b:29:32:12:ef:da:a4:fe:5e:8e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate semig.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for semig.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alsolitoposto.com
*.apertadinha.com
*.aramam.com
*.bajuanak.net
*.bakramandi.com
*.berteloot.com
*.bjostad.com
*.charitynavigater.org
*.cifan.com
*.ciudadelainmobiliaria.com
*.classicgift.com
*.customrental.com
*.dormit.com
*.estudioseconomicos.com
*.fitflopsandals.com
*.foggies.com
*.fotocantik.com
*.giaoto.com
*.guchi.net
*.haan.org
*.kolodge.com
*.marcella.net
*.mfazenda.com
*.miderecho.com
*.mtju.com
*.nurat.com
*.papri.com
*.parwarish.com
*.poldi.com
*.radiostereo.com
*.rennell.com
*.rhodon.com
*.semig.com
*.sepher.com
*.sitalpa.com
*.soilspecialists.com
*.sovegastro.com
*.sprzet.com
*.stacygerman.com
*.stoil.com
*.stpetershomes.com
*.thegoliath.com
*.tinybust.com
*.urelle.com
*.verstuur.com
*.wbbh.com
*.wearethepeople.com
*.xianling.com
*.ylxl.com
*.ymxh.com
alsolitoposto.com
apertadinha.com
aramam.com
bajuanak.net
bakramandi.com
berteloot.com
bjostad.com
charitynavigater.org
cifan.com
ciudadelainmobiliaria.com
classicgift.com
customrental.com
dormit.com
estudioseconomicos.com
fitflopsandals.com
foggies.com
fotocantik.com
giaoto.com
guchi.net
haan.org
kolodge.com
marcella.net
mfazenda.com
miderecho.com
mtju.com
nurat.com
papri.com
parwarish.com
poldi.com
radiostereo.com
rennell.com
rhodon.com
semig.com
sepher.com
sitalpa.com
soilspecialists.com
sovegastro.com
sprzet.com
stacygerman.com
stoil.com
stpetershomes.com
thegoliath.com
tinybust.com
urelle.com
verstuur.com
wbbh.com
wearethepeople.com
xianling.com
ylxl.com
ymxh.com

Other certificates including the domain name semig.com

(limited to 100 certificates)
www.massotherapeute.com
semig.com
1001gambettes.com
consueti.com
autoscout24.online
musikmp3id.xyz
semig.com
1001gambettes.com
khao.org
1001gambettes.com
debtor.com.au
semig.com

Certificate

The complete raw certificate details for semig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxcbEpDv/+vNZvtcMOPvk
X+r4hcGXDXWVUQVLJy0vs+IVPI6A6GtKnOgU4njLIl3vPFlOg3tct6BvRkm+JEad
Ch/9t5twkrxNjC6w8Qb0zZduIh99mX+e3/0tSFhgbspqySbR5XsSH7xFzILF4kTz
U6OeV9hfWpBmciTOfmeREXLUjtJJUnT/Uthvpn4ZEkjAooP0dmNCGqWVX1B87Ku3
3oifBqBBWVpkGdSCyXOdN26xmk8UkzUj9YwI7y1E5Azr8M822sTq8ZaP3khK2ULh
/dhVcxw9HX5IE4xRHpTl0ZZNlhxEUbrVlnJRqgBuW4LC4dYDTO2NSxIGkFTScgJl
EU2yyT0w1JWshP8qxoOoJ9i+JFJkq/4crY5jwwBidwPpxtNjYy/vvKKO1XDUMUH6
ub7RS+KQr91V3mzYUUUYZhHB4iJ6CPMWOmRtZ1ry2ejh0EbOgo+c2INrc32wyokV
RNLafwwJ0C3yPgexaH9gM+Pg7WymvDVFIyHo1/DNrJhPC2Nk/3CGX6PiDonv6Hv7
7fal/eNYC2Hc5eDI6KskiiqR9xzVXqpblJ8T12LH2PXMZrVrgwgttSux730P6z8T
CCM/4Ndmg58ZVTfUcMfAFpQZn/B2CEotOkcMR9eantguBwvtGEg2+GcZE2fk3h2l
xLopZr4RLsLi4xxC9kp0TkkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273639079084917265253186563363632898370557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 16:00:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 16:00:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'semig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806857472128940511090999215540307392485211967654892871721257779696481281087884467150245189199215607079757785789764119531438323959954376649469226145752012640480013171973228516399675058886749068279992754877017423416962403950822558924337772429746795279149009867514608134927150906077299154843596807930222722436143846915251086061160462901590719358264951354669958249605351033696185844422255110391073134726934800260718185339480408281694824590936251886487988915924244237614451101657391209351698703799964713291751405019735157414442198598890373629351654134898990791331281371592255374480563614153103597719731229298847110061702466192255320573457984164343039481937965197292455155210189025971163200750320875346405490432129401628072817433355665019184611965766306615528856627265235964978065185872023638905001912421451642053375567990221114445831881281815998962575434902925274204438294975866699908801770930287263819785301794357973303273605354689703166724552665637053803904596780982907346093043938794893297460447898554244900138438051774780800680421698393362960290489191329909590393125653227181975389268641613082688700123510066707295919595372085045281023617357597898375261852986403058679067727655593155517293636380887051323901036552431113548848644247113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ba4fc561485514a68ffb5c4ba984704810db56d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1558 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alsolitoposto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apertadinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aramam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bajuanak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakramandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.berteloot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bjostad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charitynavigater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cifan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciudadelainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classicgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.customrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dormit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estudioseconomicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitflopsandals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foggies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotocantik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giaoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guchi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kolodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcella.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfazenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miderecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nurat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parwarish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poldi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radiostereo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rennell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rhodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.semig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sepher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soilspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sovegastro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sprzet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stacygerman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stpetershomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegoliath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinybust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verstuur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearethepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xianling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ylxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymxh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsolitoposto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apertadinha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aramam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bajuanak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakramandi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berteloot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjostad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charitynavigater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cifan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciudadelainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estudioseconomicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitflopsandals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foggies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotocantik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giaoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guchi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kolodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcella.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfazenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miderecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parwarish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poldi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiostereo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rennell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhodon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'semig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitalpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soilspecialists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovegastro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprzet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacygerman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetershomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoliath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinybust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verstuur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearethepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xianling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ylxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymxh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f4d7403190000040300473045022100ca9ec5982ab60a9f7358a8973aa66d4955c2f7b99c626208d75451db86533e5a0220516d590aea6bc8f366afb845f9768b6406f92b251a828e6d37032ff74f5685f50076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f4d740339000004030047304502204b436194be0684adfc912d734e909ad025fdab99458663b98ec6bea29cc01f8b022100bf4fe9db739cf7dc82af4aef733f3f914db3deafab4a9774edf378ab6ea0b804
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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