dma.cm

Issued by R3

About this certificate

This digital certificate with serial number 03:da:33:d7:04:58:c8:ec:89:6e:ef:e5:33:b9:0f:b5:e5:42 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dma.cm

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:33:d7:04:58:c8:ec:89:6e:ef:e5:33:b9:0f:b5:e5:42
Serial Number (int): 335587320843818840345675868895623698048322
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:c1:b7:49:5d:0d:88:e0:09:83:bc:1a:9d:d8:71:6a:e3:bc:45:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9b:c8:53:41:20:03:54:63:0e:17:89:b7:47:5f:03:05:a6:1e:71:46
Fingerprint (sha256): c3:f0:e1:2a:43:32:d9:04:a4:07:5a:14:b5:2b:76:6a:92:c8:b5:bb:3c:aa:43:cf:97:d2:a6:80:0d:84:24:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dma.cm

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dma.cm

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.31dayfitness.com
*.77github.com
*.americanspartan.us
*.atmosphere-clothing.com
*.autirbouchon.com
*.bioremedy.us
*.bsdm.us
*.cerveceriakalla.com
*.crackinhub.com
*.cumcoveredwife.com
*.dawnchat.com
*.dentarou.net
*.dintstyle.com
*.directline-cms.com
*.dma.cm
*.donate-btc.com
*.fcgic.com
*.fitnesstrainer.com.au
*.forumhandikap3.com
*.hommesuperieur.com
*.houstonspinaldecompressiontreatment.com
*.hulkus.com
*.iesbanaderos.org
*.kennelhurricanes.com
*.ketofamily.net
*.lessonplanning4u.com
*.metalgoddessjen.com
*.meve.cc
*.mobilwelding.com
*.moonun0930.com
*.mossu-san.com
*.mrfrenzybeats.com
*.multimatchupsports.com
*.nedayepars.com
*.notestips.com
*.nwhsff.com
*.orbiii.com
*.outsidek9.net
*.pkm4.com
*.play-chess.online
*.pupapproveddogtreatrecipes.com
*.russian-institure.com
*.smoketestg.com
*.spiked-onlinikede.com
*.sumofly.net
*.taxbanditerc.com
*.tycgplayer.com
*.verintcloudservises.com
*.yourprecisebusinesssolution.com
*.yourtermsofuse.com
31dayfitness.com
77github.com
americanspartan.us
atmosphere-clothing.com
autirbouchon.com
bioremedy.us
bsdm.us
cerveceriakalla.com
crackinhub.com
cumcoveredwife.com
dawnchat.com
dentarou.net
dintstyle.com
directline-cms.com
dma.cm
donate-btc.com
fcgic.com
fitnesstrainer.com.au
forumhandikap3.com
hommesuperieur.com
houstonspinaldecompressiontreatment.com
hulkus.com
iesbanaderos.org
kennelhurricanes.com
ketofamily.net
lessonplanning4u.com
metalgoddessjen.com
meve.cc
mobilwelding.com
moonun0930.com
mossu-san.com
mrfrenzybeats.com
multimatchupsports.com
nedayepars.com
notestips.com
nwhsff.com
orbiii.com
outsidek9.net
pkm4.com
play-chess.online
pupapproveddogtreatrecipes.com
russian-institure.com
smoketestg.com
spiked-onlinikede.com
sumofly.net
taxbanditerc.com
tycgplayer.com
verintcloudservises.com
yourprecisebusinesssolution.com
yourtermsofuse.com

Other certificates including the domain name dma.cm

(limited to 100 certificates)
swiftnotarypdx.com
dma.cm

Certificate

The complete raw certificate details for dma.cm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335587320843818840345675868895623698048322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 07:57:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 07:57:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dma.cm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1001574761638871383943457229284742796735424185361930822570320103339864187575565578980859213596961288638025965420803669396447277533800168405473707146018006686720007731466764348471284345176585762989291443784094775937339222872230797706498388573131674229669952659493289365179829465417014888013126208080063953334147457560464320187872524537802147696019706409876808226734666859741422377998222467588523519418671077592037039489619251303540370974678281031033645625427346576340496743279958485591791924632161662893029657091322487479945994948323904856010407343491117846714100105034154640685027212955045881536017074426183455927713740897449944685322424532353978896961984432316570057112661726925823686904221856588352141417739463879314950273206256046605770732699735321436230422785425119354111126070504881589325668851275795059643879344444903839780271892115522502244245093596177273732246310697567085198202411927038045404011353883799829446304437735358516057527504385704793377952266705539966016755058100227493706579284664585556854645762050984177016000417421008827346445487406179155612323134835856870592841037412251965928804281425185770090261912684807647968528845982755884982255413280007879584645686883952609888802784223172879944381666868577727831433980433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22c1b7495d0d88e00983bc1a9dd8716ae3bc4580
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.31dayfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.77github.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanspartan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atmosphere-clothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autirbouchon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioremedy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsdm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerveceriakalla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crackinhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumcoveredwife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dawnchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentarou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dintstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directline-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dma.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donate-btc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcgic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitnesstrainer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forumhandikap3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hommesuperieur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonspinaldecompressiontreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hulkus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iesbanaderos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kennelhurricanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketofamily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lessonplanning4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metalgoddessjen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meve.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilwelding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonun0930.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mossu-san.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrfrenzybeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multimatchupsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nedayepars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notestips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwhsff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outsidek9.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pkm4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.play-chess.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pupapproveddogtreatrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russian-institure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smoketestg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiked-onlinikede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sumofly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxbanditerc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tycgplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verintcloudservises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourprecisebusinesssolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtermsofuse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '31dayfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '77github.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanspartan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atmosphere-clothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autirbouchon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioremedy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsdm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerveceriakalla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crackinhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumcoveredwife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawnchat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentarou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dintstyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directline-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donate-btc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcgic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnesstrainer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forumhandikap3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hommesuperieur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonspinaldecompressiontreatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hulkus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iesbanaderos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennelhurricanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketofamily.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessonplanning4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metalgoddessjen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meve.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilwelding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonun0930.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossu-san.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrfrenzybeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimatchupsports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nedayepars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notestips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwhsff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbiii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsidek9.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkm4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-chess.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pupapproveddogtreatrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russian-institure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smoketestg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiked-onlinikede.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumofly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxbanditerc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tycgplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verintcloudservises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourprecisebusinesssolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtermsofuse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e50c7f5930000040300483046022100a69469bb65b9c1a6b1633a554a80463455710dcf2e31bac81454194a4a70b9350221009a0d31fbf7d8bb416e6f322bb6af382036689d36cc27a977bb05a815ec768279007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e50c7f6340000040300483046022100e1498125e3a4f7a7c75670e238fb029ace21e825ba90b1288fafe1d65a556bb5022100d7b96fddcf937faf92612891b587b0685e635786770e970f8e3915867d2a7b8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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