paetsgeek.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a4:8b:2b:da:55:8c:eb:47:5f:0b:27:f6:be:73:87:d8:55 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=paetsgeek.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a4:8b:2b:da:55:8c:eb:47:5f:0b:27:f6:be:73:87:d8:55
Serial Number (int): 404440442290597214644171173338194869999701
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:e3:8b:54:4b:57:0c:70:e9:af:a6:03:17:d2:20:5e:fc:7d:ec:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 45:2f:d5:fd:07:84:b1:cb:f4:27:fa:07:54:bf:b2:af:8e:f7:bc:37
Fingerprint (sha256): ce:ed:0d:86:43:4d:0a:ae:3b:4c:07:96:e5:fc:55:19:3a:fb:3f:8b:9f:3e:56:d5:67:59:47:72:41:5e:83:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate paetsgeek.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paetsgeek.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acabo.com
*.acquavillage.com
*.allmasala.com
*.bellaandcanvas.com
*.cecle.es
*.compuutershare.com
*.contracts4trades.com.au
*.dormie.com
*.elarmamento.com
*.equimenttrader.com
*.ethiopianarilines.com
*.feugo.net
*.freemandarin.com
*.goetzinger.com
*.guitaraoke.com
*.hawaiianairlines.co
*.homcenter.co
*.illian.biz
*.kietz.com
*.lululemon.co
*.madelli.com
*.maroldt.com
*.matimonio.com
*.medaviebc.com
*.mm09com.com
*.moshima.com
*.motionflow.com
*.myfailymobile.com
*.ntvplay.net
*.paetsgeek.com
*.postermywall.co
*.riverfrontrental.com
*.scholarshiips.com
*.scorecaardrewards.com
*.shiphut.com
*.sobralusa.com
*.solicitorcheck.com.au
*.stitchfix.co
*.sunsetridersatv.com
*.superligado.com
*.tecnologiainmobiliaria.com
*.teesprimg.com
*.tenerifeapartments.net
*.thatchedroofhuts.com
*.torguud.com
*.trusinvestin.com
*.vertv0800.com
*.withinga.com
*.wowstick.us
*.wwwpurposegames.com
acabo.com
acquavillage.com
allmasala.com
bellaandcanvas.com
cecle.es
compuutershare.com
contracts4trades.com.au
dormie.com
elarmamento.com
equimenttrader.com
ethiopianarilines.com
feugo.net
freemandarin.com
goetzinger.com
guitaraoke.com
hawaiianairlines.co
homcenter.co
illian.biz
kietz.com
lululemon.co
madelli.com
maroldt.com
matimonio.com
medaviebc.com
mm09com.com
moshima.com
motionflow.com
myfailymobile.com
ntvplay.net
paetsgeek.com
postermywall.co
riverfrontrental.com
scholarshiips.com
scorecaardrewards.com
shiphut.com
sobralusa.com
solicitorcheck.com.au
stitchfix.co
sunsetridersatv.com
superligado.com
tecnologiainmobiliaria.com
teesprimg.com
tenerifeapartments.net
thatchedroofhuts.com
torguud.com
trusinvestin.com
vertv0800.com
withinga.com
wowstick.us
wwwpurposegames.com

Other certificates including the domain name paetsgeek.com

(limited to 100 certificates)
paetsgeek.com
paetsgeek.com
nutrisys6em.com
paetsgeek.com
paetsgeek.com
paetsgeek.com
wesai.co
paetsgeek.com
paetsgeek.com
paetsgeek.com

Certificate

The complete raw certificate details for paetsgeek.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5QmTfJO/lwnbBOu6he2d
oR6uuXX8I23UbRHCYsqz7ELkCuFXs3XCGEWdXdqG+NCN/WCTyJkRZiFlNQ8qi1Za
wgdlbBr/azLHhx6nGpb+Xp30xW/eAC2fUNC07i8OYEdNx5z21pk56yn/kNrCSpwJ
icgGGO9EKUoQflxUo0fmlUzWnwMbnOI3rxlG1NcUA5H3xvcK9NXBLN/pnFuT8FiF
Rg5PEJu4Nv/y2+llTL9Al3+BucE5WmH26dbCdsB5P8Glr1SJycgV1rxHzCzjbzo1
H5If2B6RFhXPMGals5xILA8CA+yfjQr0YaSOBN7GTZ1n66fJgHFadQVDhSKKaXVE
cxBLDcZiFaOp20pecI5JXAkE4teADVedBwqBys9JyB8Kabc1s1g4/1Z/qXT+Ap1f
1jDJuejYB3KgIb1fcjl9ODE9iVEE16rXMFF1SOpc9Adn8+pu/7/4O0BjGF93dmVG
8Zsz1+v4Z09ETGBI4kpG2kc3gXPI3DGUGDnBFnFH6CsMZ9R7vbdiQvf/fEZn9D+a
9uI3iPviMOKG5jK8pr+2ZukUjiQa83jMi371Y8H70kuJVP8XvXd/B4aB5zw85TPK
UCDvPbQjN6He7KG1fDsyOVQn4Kp7EIIacNG0yQF5JUmwbch7ASTZhgyKQCzvDE63
0cQlhCeBQdAJL0wcY+z7COMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404440442290597214644171173338194869999701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 10:17:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 10:17:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paetsgeek.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934391097669225561681445847476445988794283274099776927105771270589535990319971396991863198154690789470972425983577844465268331713768783916580855171277206694859086749850994054922641676791500310418567297677291063991062677267168106312273936172910847181060513003301175199436604467833275793105798066148025293326456246227197461804560507104892225170106483605702698128097076751347710063594960829917466478889826189011522175735194731934567865562592668423652208128148882049228373374623107709817091191962635814306947081940989756482980630343379854910720363250058561990475927286970607307814143644007072793562039521529211288453609608087155194835408946305848287277790015972349859887815189605138655764465734184116369707173992740849699669783083159029215776620489663643316443370137703567010113393138272531057625808623206875572838594361209336356722244363525677727001837370102767630348316427576551372951072634184033611227800435275614198126234018775378735114373038719045454340916931569833390773022847355918728256992149998203909742864847427675968280507162567586823652414151391852820910216676115255678661269647129806566269483884958702249975536678288750270072204786316435155729189653014328162784621760619031681388186200585153671582891222412606401127940557027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40e38b544b570c70e9afa60317d2205efc7dec0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acquavillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allmasala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellaandcanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cecle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compuutershare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contracts4trades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dormie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elarmamento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.equimenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethiopianarilines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feugo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freemandarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goetzinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawaiianairlines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homcenter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illian.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kietz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lululemon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.madelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maroldt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matimonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medaviebc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mm09com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moshima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motionflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfailymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ntvplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paetsgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postermywall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverfrontrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scholarshiips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scorecaardrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiphut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sobralusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solicitorcheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stitchfix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunsetridersatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superligado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnologiainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teesprimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenerifeapartments.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thatchedroofhuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torguud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trusinvestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vertv0800.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withinga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wowstick.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwpurposegames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acabo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquavillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allmasala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellaandcanvas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cecle.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compuutershare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contracts4trades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dormie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elarmamento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equimenttrader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiopianarilines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feugo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freemandarin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goetzinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homcenter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illian.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kietz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lululemon.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madelli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maroldt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matimonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medaviebc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm09com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moshima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motionflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfailymobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntvplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paetsgeek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postermywall.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverfrontrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarshiips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecaardrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiphut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sobralusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solicitorcheck.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stitchfix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunsetridersatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superligado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnologiainmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teesprimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenerifeapartments.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thatchedroofhuts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torguud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trusinvestin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertv0800.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withinga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowstick.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwpurposegames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d028a519c00000403004630440220764e007d996a26fe6505ceb0516fa87b4dbef48b018dfbdfa592b69e1087d4c502203d24e1ac0c05d0572204bf79560b912c818d99286e5277b96824a7aaaa61f74a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d028a51f20000040300473045022100e5dc58f4ea8d7225509aa3f1e307171067c71dab07a0c5b6bb6c0869a6df664f02202b1e8e242b0361313605003c3458e385b8e41c36876df21b1035e813721b1da3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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