paetsgeek.com

Issued by R3

About this certificate

This digital certificate with serial number 04:73:b8:1c:dd:71:68:f2:d2:83:fd:2a:99:f0:9a:ba:c4:29 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=paetsgeek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:b8:1c:dd:71:68:f2:d2:83:fd:2a:99:f0:9a:ba:c4:29
Serial Number (int): 387826343749883158146904105124374182020137
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7d:12:ab:e4:05:49:27:8a:a9:83:34:90:c7:99:b5:af:ca:6e:6d:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ba:11:92:99:bc:37:4d:47:b1:19:3a:08:08:cb:72:e1:eb:ba:49:7f
Fingerprint (sha256): cb:8c:51:13:27:34:1b:82:46:48:46:ea:14:19:34:88:70:61:47:39:df:66:de:b9:1e:48:3a:3d:d9:43:5c:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate paetsgeek.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paetsgeek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acabo.com
*.acquavillage.com
*.andreawalker.com
*.bellaandcanvas.com
*.cecle.es
*.chiflado.com
*.compuutershare.com
*.contracts4trades.com.au
*.dormie.com
*.elarmamento.com
*.equimenttrader.com
*.ethiopianarilines.com
*.floorposters.com
*.freemandarin.com
*.gensi.com
*.gobong.com
*.goetzinger.com
*.grosirbatik.com
*.guitaraoke.com
*.hawaiianairlines.co
*.homcenter.co
*.involved.us
*.kietz.com
*.madelli.com
*.maroldt.com
*.matimonio.com
*.medaviebc.com
*.mm09com.com
*.myfailymobile.com
*.nehms.com
*.osinovsky.com
*.paetsgeek.com
*.postermywall.co
*.riverfrontrental.com
*.scholarshiips.com
*.scorecaardrewards.com
*.shiphut.com
*.sobralusa.com
*.stitchfix.co
*.sunsetridersatv.com
*.superligado.com
*.tecnologiainmobiliaria.com
*.teesprimg.com
*.tenerifeapartments.net
*.thatchedroofhuts.com
*.torguud.com
*.trusinvestin.com
*.vertv0800.com
*.wowstick.us
*.wwwpurposegames.com
acabo.com
acquavillage.com
andreawalker.com
bellaandcanvas.com
cecle.es
chiflado.com
compuutershare.com
contracts4trades.com.au
dormie.com
elarmamento.com
equimenttrader.com
ethiopianarilines.com
floorposters.com
freemandarin.com
gensi.com
gobong.com
goetzinger.com
grosirbatik.com
guitaraoke.com
hawaiianairlines.co
homcenter.co
involved.us
kietz.com
madelli.com
maroldt.com
matimonio.com
medaviebc.com
mm09com.com
myfailymobile.com
nehms.com
osinovsky.com
paetsgeek.com
postermywall.co
riverfrontrental.com
scholarshiips.com
scorecaardrewards.com
shiphut.com
sobralusa.com
stitchfix.co
sunsetridersatv.com
superligado.com
tecnologiainmobiliaria.com
teesprimg.com
tenerifeapartments.net
thatchedroofhuts.com
torguud.com
trusinvestin.com
vertv0800.com
wowstick.us
wwwpurposegames.com

Other certificates including the domain name paetsgeek.com

(limited to 100 certificates)
paetsgeek.com
paetsgeek.com
nutrisys6em.com
paetsgeek.com
paetsgeek.com
paetsgeek.com
wesai.co
paetsgeek.com
paetsgeek.com
paetsgeek.com

Certificate

The complete raw certificate details for paetsgeek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387826343749883158146904105124374182020137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 10:15:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 10:15:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paetsgeek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858595894161462637816648868944559703706570688403627326209321549427368333696256032174144164482114717213074431487628227816006556250883264126700869500090941780544682737485385193169198155254010449632809791264613616939032266292056676471822137389723877023681578431805710707951608057696294394720507465894603284538873212531666703369174212898766832254513309729966018176016586011138890341921181373990594656899323281409187716002411681352316720479815228589949501750299561506285627789224870195075442473159894767337410500330656191612104497681616697453293757606471506242340967865628650342933300518205059193997365251616921708688818221238719343415059897052762185301079589438494883698516512807171663899879183045608409779712184708850535905152882527341850822808978508942006027892650329139807523872554009043557509298845214260118250257545421702875213493409699605859714721201825758962225415768787330204526302429659788637613841865833664711155436261576859626007897065210717647906386043836884004004417535518707169709967775228553585358545509966942680881461403272685390809215802515043030743775938067088022088137840209816220862336675308036366438956171132489287531871306530450567782018860349823521630390784242388780827079053895615294935251455690951401655269941557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d12abe40549278aa9833490c799b5afca6e6d71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1772 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acquavillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andreawalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellaandcanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cecle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiflado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compuutershare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contracts4trades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dormie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elarmamento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equimenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethiopianarilines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floorposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemandarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goetzinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grosirbatik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaiianairlines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homcenter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.involved.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kietz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maroldt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matimonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medaviebc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mm09com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfailymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nehms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osinovsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paetsgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postermywall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverfrontrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scholarshiips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scorecaardrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiphut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sobralusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stitchfix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunsetridersatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superligado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnologiainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teesprimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenerifeapartments.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thatchedroofhuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torguud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trusinvestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vertv0800.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowstick.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwpurposegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquavillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreawalker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellaandcanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiflado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compuutershare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracts4trades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elarmamento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equimenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiopianarilines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floorposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemandarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gensi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goetzinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grosirbatik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homcenter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'involved.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kietz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maroldt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matimonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medaviebc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm09com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfailymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nehms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osinovsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paetsgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postermywall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverfrontrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarshiips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecaardrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiphut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sobralusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stitchfix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetridersatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superligado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnologiainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teesprimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenerifeapartments.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatchedroofhuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torguud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trusinvestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertv0800.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowstick.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwpurposegames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcd8b167c000004030047304502207bffc908f9ef8a70bc900c2e6f2322b96f4b6b7778c492bacf9bb5f8419f43ac022100ea32f278df338b3326f02ab9a7bc759526886f1a4252358d0c7a6c80bd4b775e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd8b16b90000040300473045022100f8469d20e6993cf1e855990d3454b38e09271d07040bccb254a408f8071c3e05022047f9455f981097001aad506ad75ed7287ad51720176d5995c2a36cb1a611ca39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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