bedandsofa.net

Issued by R3

About this certificate

This digital certificate with serial number 04:42:a8:60:c1:ca:ec:35:97:10:9f:c7:82:3f:61:94:77:94 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bedandsofa.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:42:a8:60:c1:ca:ec:35:97:10:9f:c7:82:3f:61:94:77:94
Serial Number (int): 371131592638195455966602565774359645157268
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c3:76:34:c6:8f:ed:1c:57:13:44:fe:dc:97:44:0a:a1:59:11:52:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:38:66:4a:cc:5a:13:1d:58:f9:5b:3b:01:ab:e2:77:ed:70:b5:ae
Fingerprint (sha256): c9:16:57:82:65:e2:11:01:a4:40:d9:47:8b:49:cd:83:64:61:02:79:43:0a:3c:3a:00:6f:0c:20:ed:01:ed:f2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bedandsofa.net

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bedandsofa.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aoswi.com
*.beautyclub.com.au
*.bedandsofa.net
*.beloveddisciple.com
*.canadiantirre.ca
*.csgofranklin.com
*.cucinacalabrese.com
*.cy-team.com
*.deejung.com
*.dlsight.com
*.dollar2million.com
*.eduforapp.com
*.ekonomska.com
*.elektrikbilgisi.com
*.emberyl.com
*.enbpb.com
*.escalaofertas.com
*.escort-sevastopol.com
*.eserveraccess.com
*.exceptionalflooringllc.com
*.flybgs.com
*.forestkeeper.net
*.fwwf.com
*.fwze.com
*.guardianbloodbalance.com
*.hillcountryagility.com
*.home246.com
*.jccpcreditcard.com
*.kapp.store
*.kassens.com
*.lacara.com
*.lucillafell.com
*.madinakababhouse.com
*.minello.com
*.myutsav7fun.com
*.nailersguide.com
*.nlzero.com
*.orraceinstrument.xyz
*.perfectkick.me
*.pozoalcon.com
*.recipesrestaurant.com
*.ritalynn.com
*.sexbam36.net
*.shopping-craze.com
*.sidsel.com
*.taiwanx.org
*.thenudism.co
*.transportarconmadera.com
*.venusdvd.net
aoswi.com
beautyclub.com.au
bedandsofa.net
beloveddisciple.com
canadiantirre.ca
csgofranklin.com
cucinacalabrese.com
cy-team.com
deejung.com
dlsight.com
dollar2million.com
eduforapp.com
ekonomska.com
elektrikbilgisi.com
emberyl.com
enbpb.com
escalaofertas.com
escort-sevastopol.com
eserveraccess.com
exceptionalflooringllc.com
flybgs.com
forestkeeper.net
fwwf.com
fwze.com
guardianbloodbalance.com
hillcountryagility.com
home246.com
jccpcreditcard.com
kapp.store
kassens.com
lacara.com
lucillafell.com
madinakababhouse.com
minello.com
myutsav7fun.com
nailersguide.com
nlzero.com
orraceinstrument.xyz
perfectkick.me
pozoalcon.com
recipesrestaurant.com
ritalynn.com
sexbam36.net
shopping-craze.com
sidsel.com
taiwanx.org
thenudism.co
transportarconmadera.com
venusdvd.net

Other certificates including the domain name bedandsofa.net

(limited to 100 certificates)
orendafinancial.com
orendafinancial.com
bedandsofa.net
inspirednest.ca
orendafinancial.com
orendafinancial.com
orendafinancial.com

Certificate

The complete raw certificate details for bedandsofa.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371131592638195455966602565774359645157268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 07:40:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 07:40:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bedandsofa.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724589111139799864540520982361818096676319701520460835267972532405116357363512428438012174635455057556974300656092451530033197704369067795126373965147157662837234502992589626245228782246514575811444411124269109068413051412517460201670041905912402257279757978937726802696505161253152863338620252423542784893995406227301224414355715569683083471725179583741372773872770915803279601232727884715452775096440181786611795941610775315013854213804861744452319563200515826903921249763098336390558637395040613330626980738007883379419339158257338498001386803296430128942865947699397378471479868730664903039528942263498351850506352752571365076346543625916948976786496460919169047820097459009211243921020831574150090869504194180014689938519804032773916107707083203443267496274799236367232225048940155482621433994876472455596221523877444661905024913355136663955199504887873967479314087122240659090772423699858729781595205149873305882280969078698548849819955503675246724050160286317530038996623985051687048246384590129612505698601678969382368783093218244468630656045995774498027719220960321896820444784039827889152298644746824139067075483762280904646313546126794199893844193231133141585563801808761277179970720696230105147562656187005598390143458417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c37634c68fed1c571344fedc97440aa1591152b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1740 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aoswi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beautyclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bedandsofa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beloveddisciple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadiantirre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csgofranklin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cucinacalabrese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cy-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dollar2million.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eduforapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekonomska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elektrikbilgisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emberyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enbpb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escalaofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escort-sevastopol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eserveraccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exceptionalflooringllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flybgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forestkeeper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fwwf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fwze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardianbloodbalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillcountryagility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.home246.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jccpcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kapp.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kassens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lacara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucillafell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madinakababhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myutsav7fun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nailersguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nlzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orraceinstrument.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectkick.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pozoalcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recipesrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ritalynn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexbam36.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopping-craze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sidsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taiwanx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thenudism.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transportarconmadera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venusdvd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoswi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beautyclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bedandsofa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beloveddisciple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiantirre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csgofranklin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cucinacalabrese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cy-team.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlsight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollar2million.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduforapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekonomska.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elektrikbilgisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emberyl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enbpb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalaofertas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escort-sevastopol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eserveraccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exceptionalflooringllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flybgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forestkeeper.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwwf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fwze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardianbloodbalance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillcountryagility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home246.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jccpcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapp.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kassens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lacara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucillafell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madinakababhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myutsav7fun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nailersguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orraceinstrument.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectkick.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pozoalcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipesrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ritalynn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexbam36.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping-craze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidsel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiwanx.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thenudism.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportarconmadera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venusdvd.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018eeb36cf77000004030048304602210085b8c8f0b9e151e196985aeed202e96e2beefc3bdbd7f7473292d7837132b9d6022100f0ef9998b85b748488cda7a335ed192489e90dfeeb04d254727568486903a41800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018eeb36cfa3000004030046304402202dbef05c5eb16ed6efc145b677c7f627e3b958f4615887bd6e363ae547c6e2b602205f422f6d6920efab8e33bd091707c42195dd22099027bbc9dc92d662109b2217
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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