chicfitness21.com

Issued by R3

About this certificate

This digital certificate with serial number 04:5d:7f:dd:f8:84:05:1d:c7:4c:7b:97:21:0e:3a:73:9f:2a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chicfitness21.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5d:7f:dd:f8:84:05:1d:c7:4c:7b:97:21:0e:3a:73:9f:2a
Serial Number (int): 380265368344255966783910946752279730167594
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:4e:c9:f6:09:00:b0:41:d1:b4:40:da:9a:e2:14:c8:72:dd:9f:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:a7:94:fb:c1:2a:83:f1:21:ff:95:5e:86:a8:d6:86:b5:46:f0:e6
Fingerprint (sha256): c6:d7:e1:71:d8:e7:53:73:8a:d9:2c:e9:d2:8e:e2:0b:6a:3a:c0:24:f6:47:66:13:53:e3:82:03:b7:85:ef:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chicfitness21.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chicfitness21.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.atral.net
*.californiadriverdcourse.com
*.cartoongify.com
*.chicfitness21.com
*.cmsolucionesintegrales.com
*.cocolmint.com
*.cursoawsbasico.com
*.diagnosticsquestions.com
*.doublellacoustics.net
*.erameb.ru
*.eskime.com
*.estudiodellas.com
*.familytitank12.com
*.fashionanova.com
*.fccheathplan.com
*.feedingoursoles.com
*.fightkids.com
*.fopack.com
*.fseot.com
*.higodagoju.com
*.iwayfair.com
*.karatealien.com
*.kiteprayersl.com
*.lashesbykayk.com
*.mglservice.com
*.mivaccuna.online
*.naturlipo.com
*.njtrasit.com
*.pimacountylibrary.com
*.pvwavtech.com
*.rachelsgoodeats.com
*.reactorzip.com
*.ridgefieldorganic.com
*.scholasrships.com
*.shulyar-artists.com
*.spellbinderspaperart.com
*.stingerpengun.com
*.strenthenalabamahomes.com
*.sustainabilitycloud.co
*.techasbargains.com
*.temaswordpress.com
*.temeduet.com
*.topcasback.com
*.trimhealthymomma.com
*.ugottacoolvscoo.com
*.vernmo.com
*.wfix.xyz
*.wimpyrockets.com
*.wwwtheloothgroup.com
*.yateencontre.com
atral.net
californiadriverdcourse.com
cartoongify.com
chicfitness21.com
cmsolucionesintegrales.com
cocolmint.com
cursoawsbasico.com
diagnosticsquestions.com
doublellacoustics.net
erameb.ru
eskime.com
estudiodellas.com
familytitank12.com
fashionanova.com
fccheathplan.com
feedingoursoles.com
fightkids.com
fopack.com
fseot.com
higodagoju.com
iwayfair.com
karatealien.com
kiteprayersl.com
lashesbykayk.com
mglservice.com
mivaccuna.online
naturlipo.com
njtrasit.com
pimacountylibrary.com
pvwavtech.com
rachelsgoodeats.com
reactorzip.com
ridgefieldorganic.com
scholasrships.com
shulyar-artists.com
spellbinderspaperart.com
stingerpengun.com
strenthenalabamahomes.com
sustainabilitycloud.co
techasbargains.com
temaswordpress.com
temeduet.com
topcasback.com
trimhealthymomma.com
ugottacoolvscoo.com
vernmo.com
wfix.xyz
wimpyrockets.com
wwwtheloothgroup.com
yateencontre.com

Other certificates including the domain name chicfitness21.com

(limited to 100 certificates)
chicfitness21.com
chicfitness21.com

Certificate

The complete raw certificate details for chicfitness21.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380265368344255966783910946752279730167594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 07:25:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 07:25:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chicfitness21.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670957088669719315560411446250743303458865634029262175266316029558477874765372238500094622635810983827266389607134152326387543857514105303319180065075555978015456521936460729568012919786126127238585539629674214866949872932130463829045791275104580753882045294916880848804927870541693010573298084303907159922403640349800754376651649117567477413184092353639064230742519993001894462427318134480167407304847331535875013596546264081194674191092516818572418081344800115379905988502244316971552618673243086734541266331063024885931925516413721596144418557669718128855607709229051997325748739344480858722494904599048878502222232951610406075472521963338755790495663101959118411590224327724894416223963187171590960675086210279949151487465472772045607986025686654062826876185549018642092570496045349396936150015033957024773088207162165162577008384761871035346915599525963737997972638456512512202563644989309854338947501357323349451745289926730907102817620401982857015872344302098613685541039612496660486096049442548480285758250162182538455985066502162766680081533780042244220381763993813614271274656046516747073827749903282821961815261379277654323000125438592719196425586078729088220249097372989231425960128972881823813183006481129331694581064283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d4ec9f60900b041d1b440da9ae214c872dd9f9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1940 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiadriverdcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoongify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicfitness21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmsolucionesintegrales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocolmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursoawsbasico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diagnosticsquestions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doublellacoustics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erameb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eskime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estudiodellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familytitank12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fccheathplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feedingoursoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fightkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fopack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fseot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.higodagoju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwayfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karatealien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiteprayersl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lashesbykayk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mglservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mivaccuna.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturlipo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njtrasit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimacountylibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pvwavtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rachelsgoodeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reactorzip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgefieldorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scholasrships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shulyar-artists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spellbinderspaperart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stingerpengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strenthenalabamahomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustainabilitycloud.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.techasbargains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temaswordpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.temeduet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topcasback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trimhealthymomma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ugottacoolvscoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vernmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wfix.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wimpyrockets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwtheloothgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yateencontre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atral.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiadriverdcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoongify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicfitness21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsolucionesintegrales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocolmint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursoawsbasico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticsquestions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doublellacoustics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erameb.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eskime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estudiodellas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familytitank12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionanova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccheathplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedingoursoles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fightkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fopack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fseot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'higodagoju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwayfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karatealien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiteprayersl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lashesbykayk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mglservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mivaccuna.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturlipo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njtrasit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimacountylibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pvwavtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rachelsgoodeats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reactorzip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgefieldorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholasrships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shulyar-artists.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spellbinderspaperart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stingerpengun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strenthenalabamahomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilitycloud.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techasbargains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temaswordpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temeduet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topcasback.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimhealthymomma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugottacoolvscoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vernmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfix.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wimpyrockets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtheloothgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yateencontre.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e6a6aac7e000004030046304402203091ba01a1db02a8611607c3418bfd9f87035c509bb7a4c30f75b0234de76be702207c2745570f9b1ddbe5bc3bd3eb49107d3e8104034fd39bbded801343d8b4c2b200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e6a6ab49d000004030047304502207531e0427a53a36cfff66dc565ce42e6ff72954a728f13021610987f6e5841fb022100dd6a7b49a7b0bae4352689a1b79774624df51dcdaba2a2bf75760c285909118b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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