ccgencards.com

Issued by R3

About this certificate

This digital certificate with serial number 04:33:84:53:4f:e4:06:26:56:f4:8d:a0:ba:1a:1f:ec:2d:9c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ccgencards.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:33:84:53:4f:e4:06:26:56:f4:8d:a0:ba:1a:1f:ec:2d:9c
Serial Number (int): 365979435116467998510653207883936625864092
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9a:c4:fe:93:14:01:71:92:7a:86:55:c9:62:9c:d5:61:15:c9:0e:21
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:6c:bd:8d:48:a5:57:f1:f2:1a:17:7d:86:ad:5d:68:3b:54:42:b2
Fingerprint (sha256): c2:e1:bb:38:ad:e6:1f:8c:7e:bc:3c:b8:ba:b7:56:e6:08:22:86:e6:e0:c3:4e:9a:58:38:c5:d0:a7:31:af:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ccgencards.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ccgencards.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abwehr.com
*.aminev.com
*.armstrongutilities.com
*.backyardwaterfeature.com
*.bellasinatra.com
*.bocadelrio.com
*.bwellshbp.com
*.ccgencards.com
*.cgiscriptmarket.com
*.chuckwalker.com
*.cuttt.ly
*.daniellefty.com
*.dariaemacs.com
*.dramacenter.com
*.eosins.com
*.filmixme.net
*.finalfeliz.com
*.frigidarepromotions.com
*.gezinstherapie.com
*.gitomypc.com
*.glispecialisti.com
*.gotpmypc.com
*.gptomeeting.com
*.gptomypc.com
*.gtoomypc.com
*.healthsourseri.com
*.home-builders.us
*.homepat.com
*.kaiserpermanentelogin.com
*.kustomdesignbuild.com
*.leeft.com
*.marugame.info
*.mercurymetalsltd.com
*.ohmotherminedy.com
*.peinture.co
*.ratemymusic.com
*.referense.com
*.scalesmothforget.com
*.spendshark.com
*.spreenet.com
*.stillkeep.com
*.sweatwerks.com
*.tecnokd.com
*.tumueble.com
*.u310649-referrals.com
*.wbudget.com
*.websiteflippa.com
*.www1dental.com
*.wwwlevis.com
*.yogasweats.com
abwehr.com
aminev.com
armstrongutilities.com
backyardwaterfeature.com
bellasinatra.com
bocadelrio.com
bwellshbp.com
ccgencards.com
cgiscriptmarket.com
chuckwalker.com
cuttt.ly
daniellefty.com
dariaemacs.com
dramacenter.com
eosins.com
filmixme.net
finalfeliz.com
frigidarepromotions.com
gezinstherapie.com
gitomypc.com
glispecialisti.com
gotpmypc.com
gptomeeting.com
gptomypc.com
gtoomypc.com
healthsourseri.com
home-builders.us
homepat.com
kaiserpermanentelogin.com
kustomdesignbuild.com
leeft.com
marugame.info
mercurymetalsltd.com
ohmotherminedy.com
peinture.co
ratemymusic.com
referense.com
scalesmothforget.com
spendshark.com
spreenet.com
stillkeep.com
sweatwerks.com
tecnokd.com
tumueble.com
u310649-referrals.com
wbudget.com
websiteflippa.com
www1dental.com
wwwlevis.com
yogasweats.com

Other certificates including the domain name ccgencards.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ccgencards.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnBvvsAQpAA32ouxikHpM
Z645WZ2k+gtgoHiKmyTswtkGv8l13Cl9VtsrLwOyelLRvreR4+bgdwFUkb9+Dcx/
t8vNnbOPnsEHBnNeRRVSb1VBkeQj/UsEo6CYiXJ882pYuiFnMf9EMbD/7OaaOnTb
sE1lXOM6XrHe7SQUdKA30iM4rEgERhc4IjN2mXAffbeNJtmOPJ6Pu5jJKGwrUv9k
MprM7SKJ5lFdhptT/+gwfRry9KlVGOMbeaT2TnvMC0ljf3ksRqQdpc9F2KDPfF6U
eRnyIfI1wK8pT5W1KMGF3fIbvfNdKBgRWdvRo/wP6hGhiBRs34akb3RmA+k+Zpk6
Qne8/XoOfAFZvueLsOfH7pM85pdbClFMa5icqawOTZy3tMUziwrG3UOuICawFAil
LaGSBvizlXwZSlAXGlw/tvgflxYoYrIUSWDq/06qne08JABsoJtkNLt3UsSi0g0+
tQ+BffrzroJSjx+2rIi9LG8dWP6ETU6nd1Z8sbuu3efIZH7nLxWbquYywyimQygu
9xUb0LRIBjb1rFvFST8BjZkN0/a9iPZG6i71vImsCgqAi2lNDG/9RCb+MwOjPx3o
IsKynTqEwlGXd+iMUnIeJ9dWuXZESafE6jLuOxVpJuGxOFbZFPx5OrSgCPwkO03+
UcFq8XhQpZW0bJoeu740K3MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365979435116467998510653207883936625864092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-28 09:33:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 09:33:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ccgencards.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636869670224919719836560068822066991751351897727124333221233726576426245321895808481801011877585279273172057048643025458946394861978780024165615933397434590504610682122584559052697475533744538705621663774572687774467182263446481732943698357296992963487700506956028722976040030031262725701036581472390358090834255729596682864563993776333659555874301823754771573454838982981700138441400261906298561275410866101163383526164034100811023407966230163691552755086542031421119287752564670654586239138466209725670183961537644288778260789807953524463952535981736472905441409977921880586439306305142467469695812908878323998089756893494376073664244851536987552689334626507645400959852804196971272572831700832790884133016972928137607081445048767105725523138909023179309204475881309633461701389791150455064336085212583242678611290640944534860303457132586144838610576123402871754083062773253106606701391898473242046871996301486063784024308955616281282423833404464855445789462245105236965823108311383870350674978552932915208546077072231212784977902386091092110479876083669538339782048426030375693392743175871213868310622668167917089612874762319077344239366619237825156523790053442761493097776234464826176085762769256385773196008419123769068003535731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ac4fe93140171927a8655c9629cd56115c90e21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1788 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abwehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aminev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.armstrongutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.backyardwaterfeature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellasinatra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bocadelrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwellshbp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccgencards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgiscriptmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuckwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuttt.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daniellefty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dariaemacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dramacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eosins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmixme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finalfeliz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frigidarepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gezinstherapie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitomypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glispecialisti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotpmypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gptomeeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gptomypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gtoomypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthsourseri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.home-builders.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homepat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaiserpermanentelogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kustomdesignbuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leeft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marugame.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercurymetalsltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohmotherminedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peinture.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratemymusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.referense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scalesmothforget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spendshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spreenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stillkeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweatwerks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnokd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tumueble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.u310649-referrals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbudget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websiteflippa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www1dental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwlevis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yogasweats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abwehr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aminev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armstrongutilities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backyardwaterfeature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellasinatra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bocadelrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwellshbp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccgencards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgiscriptmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuckwalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuttt.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniellefty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dariaemacs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dramacenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eosins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmixme.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalfeliz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frigidarepromotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gezinstherapie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitomypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glispecialisti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotpmypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gptomeeting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gptomypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtoomypc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthsourseri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home-builders.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homepat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiserpermanentelogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kustomdesignbuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leeft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marugame.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercurymetalsltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohmotherminedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peinture.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratemymusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scalesmothforget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spendshark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillkeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweatwerks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnokd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tumueble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u310649-referrals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbudget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websiteflippa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1dental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwlevis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yogasweats.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018adb59c906000004030047304502204ab6f1c1bd27dadb1a29783e5dfe7ebe66f3cbbeff7d142e62d9ad334b4bdcd2022100c586edd16e9302f9d7cac642ce965de4c7ec5871f53ae322d4b67aed7b992695007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018adb59c8fb0000040300483046022100cce65769b0509b858ce92f5c8f277cd8a6ad8284c75382f275b80c4f520c1428022100b3306c0e240b7b11764ed5699ea256d904c67b394af4d0ed61f1bd0e12d93038
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00990e5f20a241ab77bac02339661eb9c4dd2fe0a9c8f85d7818966bc57487116ff48fba29d267c35c3efaeffae5cc8fa59b44dcfed96d0fadb4f48b1a205b0ebc14f89a82f2db76c15b3a9341e77b6c35e900027d7919e97cf764f18ee00d50d61475112d1a0b8b880b78faccb222e779243e5c214c26927c108346385e34c5b17b83ae26569a4e6c5a52aa050373e99f7f8fb4a504d3066418796753fbc6c2e54eb4f8990b8d11d00da6c5fdbc160440f0f3dbd7b9501b42a3a6457bea3ae0b911a676d43fc506b5a247cb4d3c65b992b20bbfeb09d53a383eedc31151f52778fa9da0262e786c2402ff43365698ff617ca929fc1bf8a9a1ab5c84d73af83c08