stalma.com

Issued by R3

About this certificate

This digital certificate with serial number 03:00:26:79:15:3c:e2:88:48:a1:e1:e9:67:c5:52:4a:5f:0e was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stalma.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:26:79:15:3c:e2:88:48:a1:e1:e9:67:c5:52:4a:5f:0e
Serial Number (int): 261387997157794849253853717318455937097486
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:c8:f7:55:af:37:27:b9:42:e9:3c:f6:dd:49:0a:65:5b:f3:20:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 20:12:60:f1:fc:44:c8:ca:41:de:b5:f8:fd:bb:7f:9f:ef:33:59:f8
Fingerprint (sha256): c8:9e:3f:19:1c:8b:45:b2:41:3d:42:02:b0:1b:f8:b9:54:a2:13:2e:16:c8:3f:c1:89:1c:be:4e:db:d8:e4:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stalma.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stalma.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anupama.com
*.archivioimmaginicinema.com
*.bookkeepingquotes.com.au
*.burbulis.com
*.cawan.com
*.dalpozzo.com
*.doggifts.com.au
*.durmaz.com
*.eleance.com
*.exekias.com
*.faltings.com
*.funjeux.com
*.godspeedservices.com
*.goplre.pro
*.h0ue4.top
*.historicmarkers.com
*.hometowndelightz.net
*.immigrationcentereurope.com
*.intelatrack.com
*.ipadtv.com
*.joyeriacrispin.com
*.katzen-wie-felix.de
*.kingbedspread.com
*.lelis.com
*.ligoff.com
*.locvung.com
*.lunahuana.com
*.myascend.com
*.mycheapcoupons.com
*.nicholasphillips.com
*.nvesting.com
*.phonewipes.com
*.poshboutiquestores.com
*.putilla.com
*.sanatorii.com
*.shoai.com
*.stalma.com
*.superroofing.com
*.tandemy.com
*.todopolitica.com
*.tokiwaelog.com
*.trocchio.com
*.tutodowns.com
*.tutran.com
*.uglyfamily.com
*.unknowable.com
*.vandinh.com
*.yahyamallak.tv
*.yerbamate.net
anupama.com
archivioimmaginicinema.com
bookkeepingquotes.com.au
burbulis.com
cawan.com
dalpozzo.com
doggifts.com.au
durmaz.com
eleance.com
exekias.com
faltings.com
funjeux.com
godspeedservices.com
goplre.pro
h0ue4.top
historicmarkers.com
hometowndelightz.net
immigrationcentereurope.com
intelatrack.com
ipadtv.com
joyeriacrispin.com
katzen-wie-felix.de
kingbedspread.com
lelis.com
ligoff.com
locvung.com
lunahuana.com
myascend.com
mycheapcoupons.com
nicholasphillips.com
nvesting.com
phonewipes.com
poshboutiquestores.com
putilla.com
sanatorii.com
shoai.com
stalma.com
superroofing.com
tandemy.com
todopolitica.com
tokiwaelog.com
trocchio.com
tutodowns.com
tutran.com
uglyfamily.com
unknowable.com
vandinh.com
yahyamallak.tv
yerbamate.net

Other certificates including the domain name stalma.com

(limited to 100 certificates)
alexanderhancock.uk
stalma.com
colages.com
stalma.com
www.shetta.com
stalma.com
stalma.com
holton.com
stalma.com
stalma.com
stalma.com

Certificate

The complete raw certificate details for stalma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0CxAvVZ5xp2/Fji5WHB/
Q1Hjjz3lTxHGRHQIRrJGHjO4lnHj3KrbgRHbxhbDQIKhZiBvTCCkxd9IiRdKrL6v
r4iopU06KPRtl+zkuJcpk5oyDwI+WHd0QiovwCpPx+Xv3ubegwpFY2hM1IgYBu5W
FtPA3b3e9lSgLhZ3JviohDNIA5e5ZYKrQhvAp9pO3z1Ok5lxUYuZ0uoujQ7WwI79
DcbTPm+zzirsjIterGhYelovN3sPrd+fb6/OpxhAaGAq4FsdJHXBLNzeMkULmEQo
R9zWVlVx9UdAZmJl3n6N2pY7gK0nKKvvK7SM3usF/iHftVvs8C/BHUtcqjLAtsC6
ThianmRofLiql9Zzdk0aHJXaCiTTbQRUhThvDJ4XUT3ITKZPGeACDrP0m6LwdD4S
alwsY9ZPB31UB4QGQwi0o6xSJE+UQ5dqd83mvxRRJ5FN/DcokSGRRRrEQCuZYcAo
H5PY7O8zOM9gCEBYqWsf0mcqvad6ijCAOb3ycg57J+g3q4sx2XvRyyaz8/4DcCso
DAU5SIZYkFnTScqE5Rd5YHwzN5TenohLkaD3itmxLo/bOyp4YgB1r9CDm0AiK6pG
jyBIn7PwZNzGw05BHbg+s9jipZ5jrJ9yXFRDpmE+8jlSg4821bHGPAOozvQTTnw2
D03Eof/SY+nSC9HEYHqhx0kCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261387997157794849253853717318455937097486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 09:10:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 09:10:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stalma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849271185040251881606271782827743064663060675940485859282676082020784092707956945987686720015098234605206344507292326869689192469237621436609879554621876006106579139100624690192320493240668501409672258678916284323211315070153768593951765436617112059786481003554434366004122251570063050631386759746315967035515922466952197787769120599100944240732535869306548511214979151769046879622904642184235456643954515635210906885174853875907900265433461382328917377370263584046308553636632324406210150549757529683232418932719062203979496289129519756183222052990067129875961260266536747073811085014660938535116648103697127746560027147750765514093533714612750433390651055518350088446959259140700262902158113018132214291457605585405629699954109893164066208020911081057662378544047997056074264618403103491670909908242425744150296153716671407003694206037122287748346172293728683585719163011394693742866885708147330801406669673762724337906005948248264665546418993984603432053543536965878465128519808027114129317110239048556136263028126802387555460119269045405400841654149279584593966308047433590130505316849358826041575447136255144651099170420823451633827847995204062159140195108583744192507178704750456480234805287830728158274588183037457650910611273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01c8f755af3727b942e93cf6dd490a655bf3200b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1678 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anupama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archivioimmaginicinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookkeepingquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burbulis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cawan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dalpozzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doggifts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durmaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eleance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exekias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faltings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funjeux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godspeedservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goplre.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h0ue4.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.historicmarkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hometowndelightz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.immigrationcentereurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelatrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipadtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joyeriacrispin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katzen-wie-felix.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingbedspread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ligoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locvung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunahuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myascend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycheapcoupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicholasphillips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phonewipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poshboutiquestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanatorii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stalma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tandemy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todopolitica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tokiwaelog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trocchio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutodowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uglyfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unknowable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vandinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yahyamallak.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yerbamate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anupama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivioimmaginicinema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookkeepingquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burbulis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cawan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalpozzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doggifts.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durmaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eleance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exekias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faltings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funjeux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godspeedservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goplre.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h0ue4.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historicmarkers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hometowndelightz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immigrationcentereurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelatrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joyeriacrispin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katzen-wie-felix.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingbedspread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lelis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ligoff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locvung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunahuana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myascend.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycheapcoupons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicholasphillips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonewipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poshboutiquestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanatorii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superroofing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandemy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todopolitica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokiwaelog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trocchio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutodowns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uglyfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unknowable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vandinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yahyamallak.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yerbamate.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd4fc4f90000040300473045022100959d082ffa22d0f791bf2ffe70e593d1d80338411560f48ec13c8e67a8395ea702206107d1b7f43966e4a3b0a35ca882e73562b3b083cc0b1f93f715bb797047b8c30075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcd4fc6cc000004030046304402207a947f6f8b0a81564b3ec2f76a0e6a3c535dd401271b5bc0d6509f424b25006c02206f3a1c42cda5bb0007d454eef7ab191b200e8a619d5333a7f6ccef76591226bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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