ixa.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:19:14:fd:b5:35:24:5a:44:87:bb:88:00:94:ae:0f:fe:d6 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ixa.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:14:fd:b5:35:24:5a:44:87:bb:88:00:94:ae:0f:fe:d6
Serial Number (int): 269871818854651590616814592752586383687382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:63:b3:db:ed:ed:83:98:59:cd:02:5a:83:a1:6d:7f:05:84:4c:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:e7:12:7f:7b:d6:3b:0a:09:08:52:c4:e1:c3:4b:a1:e6:08:4d:8a
Fingerprint (sha256): ca:a6:68:16:14:80:e1:97:a3:01:5f:2c:c5:55:61:a5:c9:4a:f2:26:35:65:fc:f8:d6:c1:74:7a:4d:45:0c:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ixa.com.au

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ixa.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1strumor.com
*.360sharp.com
*.887gu.com
*.aboveparkingmanager.com
*.apayangterjadijikatidak.me
*.bearersoftheoath.com
*.bx55333.com
*.cafedefrance.info
*.counterseven.com
*.cvakademi.com
*.eknarela.com
*.etnologue.com
*.extraforavocado.com
*.gelmail.com
*.hardrese.info
*.heidijoyphotography.com
*.highstrungcrochet.com
*.hrbzhiqi.com
*.i-near.me
*.insightfulsquad.com
*.ixa.com.au
*.jeweler-tool.com
*.kailynd.com
*.kukeko.com
*.ladybscakes.com
*.lamaisonmoderne.co
*.nudists-nudism.com
*.ourhealthyhouse.com
*.plumbinginglewood.com
*.ppmmm.com
*.protectukraine.org
*.provamipizzeria.com
*.registoday.com
*.renal.me
*.robotcortacespedes.com
*.rozemax.com
*.sarah-stragiotti.org
*.simplecleaningsolutionscorp.com
*.sis001fbq.com
*.tp-lingk.cn
*.trendbilisim.org
*.utrzers.com
*.vinmovie.com
*.westernconnecticutstateuniversity.com
*.whatuspp.com
*.wwwamplify.com
*.xfb103.com
*.yoloenergywatch.org
*.yukekspor.com
1strumor.com
360sharp.com
887gu.com
aboveparkingmanager.com
apayangterjadijikatidak.me
bearersoftheoath.com
bx55333.com
cafedefrance.info
counterseven.com
cvakademi.com
eknarela.com
etnologue.com
extraforavocado.com
gelmail.com
hardrese.info
heidijoyphotography.com
highstrungcrochet.com
hrbzhiqi.com
i-near.me
insightfulsquad.com
ixa.com.au
jeweler-tool.com
kailynd.com
kukeko.com
ladybscakes.com
lamaisonmoderne.co
nudists-nudism.com
ourhealthyhouse.com
plumbinginglewood.com
ppmmm.com
protectukraine.org
provamipizzeria.com
registoday.com
renal.me
robotcortacespedes.com
rozemax.com
sarah-stragiotti.org
simplecleaningsolutionscorp.com
sis001fbq.com
tp-lingk.cn
trendbilisim.org
utrzers.com
vinmovie.com
westernconnecticutstateuniversity.com
whatuspp.com
wwwamplify.com
xfb103.com
yoloenergywatch.org
yukekspor.com

Other certificates including the domain name ixa.com.au

(limited to 100 certificates)
ixa.com.au
tiztalentsshow.com
propertysource.au
ixa.com.au
wesleystanford.com
propertysource.au

Certificate

The complete raw certificate details for ixa.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269871818854651590616814592752586383687382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 18:09:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 18:09:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ixa.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791940490248439793993809236148318157191249926925509614472631485339795867675802198191299581285817876857408087820579727290659722097979345186012377812519739666380657341124842650311874659794791231003562356810985231812062134034849549221794576768788309231770990398230114883761409468566131303194561693041330788055824909432329441487499291587003674714946296579025299996205831062018253546301874804849255417155705667724306186857392918744034280359448959427459123031098682413099856343300058018154376947479434365696381912035415269039821292804232436278987319610950283436815122587364080133596331445356710452366521871029763661911524311154695345193964723814101768213963274101533610579707318404602782994826595461143732912510773156615558146150348408674528111785362921013530661131850227693227862981755754612635511163286384654396448171536657300456133878749747452332808318026844881425446740546471067767344482331811693425821787642234437075010837956333987430994474659913823457580851287847890207335264535837181499842011511512935750083060725644189975356930353303334216906774420909410145724924061932211410592366404441796588805097921922945226455128975044910381981802736023428334761960744822395219216442814903486418938046883520094906980005875527610950058633834547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd63b3dbeded839859cd025a83a16d7f05844c3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1836 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1strumor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.360sharp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.887gu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboveparkingmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apayangterjadijikatidak.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bearersoftheoath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bx55333.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafedefrance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.counterseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvakademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eknarela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etnologue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extraforavocado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gelmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardrese.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heidijoyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highstrungcrochet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hrbzhiqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i-near.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insightfulsquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ixa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeweler-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kailynd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kukeko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladybscakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamaisonmoderne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nudists-nudism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourhealthyhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plumbinginglewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppmmm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protectukraine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.provamipizzeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.registoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renal.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robotcortacespedes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rozemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarah-stragiotti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simplecleaningsolutionscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sis001fbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tp-lingk.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trendbilisim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utrzers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernconnecticutstateuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatuspp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwamplify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfb103.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoloenergywatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yukekspor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1strumor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '360sharp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '887gu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboveparkingmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apayangterjadijikatidak.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearersoftheoath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bx55333.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafedefrance.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counterseven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvakademi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eknarela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etnologue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extraforavocado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardrese.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heidijoyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highstrungcrochet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrbzhiqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-near.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insightfulsquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ixa.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeweler-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kailynd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kukeko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladybscakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamaisonmoderne.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nudists-nudism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourhealthyhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plumbinginglewood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmmm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protectukraine.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'provamipizzeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renal.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robotcortacespedes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rozemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarah-stragiotti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplecleaningsolutionscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sis001fbq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tp-lingk.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trendbilisim.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utrzers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernconnecticutstateuniversity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatuspp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwamplify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfb103.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoloenergywatch.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yukekspor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4088a0f000000403004730450221009337c4c54503b4ac91142ee3906f267220866c6fb9d057b4b499ceef3ce8e96102200e0106c5dda6923006d5519c641e43cd7915c52b2d1ddbc6eb836e28fd691337007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c4088a0f2000004030047304502200ab82972378f5eef64895633a4a93e4e088ce2ce0af2af12c2d7f5c74d138819022100cc35c9c707cc5a26fec3c1dec4937b31edc84b5600ebc37ea923c87cd32a1a87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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