satik.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:e8:20:21:60:58:09:a8:94:04:02:f3:b4:bb:1c:2e:ec was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=satik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:e8:20:21:60:58:09:a8:94:04:02:f3:b4:bb:1c:2e:ec
Serial Number (int): 414772470635177288974547199669004194819820
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:31:ef:57:e0:26:19:d2:68:f0:63:37:43:e0:3e:1e:de:4f:89:6b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9a:73:5d:7b:5d:2a:2a:f4:4e:93:2e:85:85:dd:33:84:f3:84:d8:92
Fingerprint (sha256): ce:cb:1c:d5:8a:dd:b7:ee:53:6a:45:df:17:6a:56:e5:d6:7f:78:83:4b:bd:41:94:e5:7f:c7:a7:1c:92:02:ec

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate satik.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for satik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.948.co.in
*.aggys.com
*.bikeforcerichmond.com.au
*.bouarfa.com
*.braghini.com
*.bride.sg
*.car.com.sg
*.catalina.es
*.caterer.sg
*.cestare.com
*.childcare.sg
*.cipherpost.pro
*.crm.sg
*.ends.com.au
*.flowers.sg
*.fuelaccessories.com
*.getseg.com
*.grontkowskimonument.com
*.hongshi.com
*.ijez.com
*.influencer.au
*.kainu.com
*.kineticshelter.com
*.kinglun.com
*.kustomizedbicyclemagazine.com
*.library.sg
*.macizo.com
*.mayling.com
*.mines.net.au
*.mpowernetwork.com
*.namereign.top
*.nicific.com
*.orestes.com
*.patn.com.au
*.renasnatbank.com
*.revonation.com
*.satik.com
*.shippingestimate.com
*.shirayukihime.com
*.smartpop.com
*.stitchery.com.au
*.stocks.com.sg
*.taobaol.com
*.teacherbook.com.au
*.thea.net
*.ttes.org
*.tutorailspoint.com
*.vaycuoi.com
*.xn--d-3fa.co
*.yellowstoneriver.com
948.co.in
aggys.com
bikeforcerichmond.com.au
bouarfa.com
braghini.com
bride.sg
car.com.sg
catalina.es
caterer.sg
cestare.com
childcare.sg
cipherpost.pro
crm.sg
ends.com.au
flowers.sg
fuelaccessories.com
getseg.com
grontkowskimonument.com
hongshi.com
ijez.com
influencer.au
kainu.com
kineticshelter.com
kinglun.com
kustomizedbicyclemagazine.com
library.sg
macizo.com
mayling.com
mines.net.au
mpowernetwork.com
namereign.top
nicific.com
orestes.com
patn.com.au
renasnatbank.com
revonation.com
satik.com
shippingestimate.com
shirayukihime.com
smartpop.com
stitchery.com.au
stocks.com.sg
taobaol.com
teacherbook.com.au
thea.net
ttes.org
tutorailspoint.com
vaycuoi.com
xn--d-3fa.co
yellowstoneriver.com

Other certificates including the domain name satik.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for satik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414772470635177288974547199669004194819820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 12:24:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 12:24:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'satik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909541608428909392830331894456979057965745457142007791760619221407294517711032169839510142964523827190921798890784692934510770821335523061598140051895530893219961804221889453861865986480987840549402950775949712795278040348708123692068169324130049341221140836209786789643204625586430147518632163980019756375755169086861436116566946551272591939127521048606381368777461682646333463491568330618158695355296196201784429647027584138632175089647162293219948077863946168113766714682122700042389438649088433468661455143851302573504460111555586722864333035491633670677043143431285297948740202080849716832052445929348664582291833613844802424547785732158525279201436806281391006140520424978465351211846185696923087069386878777385373247576515305168748706300351615994662113494492182652271370603398483560887374366725927563913666653865221227638563373610708025182992305970040497218959866682593546491093672132495982892529133949282656074461826818481465541151142552018921575168734729626514047045263104502989036791376706052504571533593124939762020923538384723162837259891609616009872133690565628597937798405896525249583784425764137548728544641680000488733100134444319451992767944788141628877597541595765037738201772739778813238902163099569006736886721709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6131ef57e02619d268f0633743e03e1ede4f896b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.948.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aggys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikeforcerichmond.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bouarfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bride.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.car.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caterer.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cestare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childcare.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cipherpost.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuelaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getseg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grontkowskimonument.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hongshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.influencer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kainu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kineticshelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinglun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kustomizedbicyclemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.library.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mines.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpowernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namereign.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orestes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renasnatbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shippingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shirayukihime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stitchery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocks.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taobaol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teacherbook.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutorailspoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaycuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--d-3fa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yellowstoneriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '948.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aggys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeforcerichmond.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouarfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bride.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalina.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterer.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cestare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childcare.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cipherpost.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getseg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grontkowskimonument.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hongshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'influencer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kainu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kineticshelter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinglun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kustomizedbicyclemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mines.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpowernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namereign.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orestes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patn.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renasnatbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revonation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shippingestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirayukihime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartpop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stitchery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocks.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taobaol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherbook.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorailspoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaycuoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--d-3fa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowstoneriver.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001896406284c0000040300473045022069a80a4a844aa72e30173eaae97e47e4ffaf82093780c5989f6e371c3c88d11f022100efed06a4859ad30ec5281dfa1fc6de3794ef5bba257132063d14dc86fc9846c7007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189640628480000040300473045022064f518bc6b68a4957cb0a9b2c4759a92fc5d93f4a20379902967bafe73189c18022100e00e69701b692856b9738e3c384e274311eb04336eee3102137db0c625f598d0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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