statenj.us

Issued by R3

About this certificate

This digital certificate with serial number 03:c5:26:2c:e6:72:80:56:e8:cc:47:f3:d5:84:1e:a7:4d:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=statenj.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:26:2c:e6:72:80:56:e8:cc:47:f3:d5:84:1e:a7:4d:a7
Serial Number (int): 328423227877633158092487791741376964021671
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:b4:33:b0:11:f2:9a:22:56:48:d2:d6:e4:93:0a:63:bb:cc:64:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:49:2a:52:af:1b:e6:d9:12:d0:c0:d3:bd:85:e2:21:e7:b4:9d:17
Fingerprint (sha256): cf:15:53:83:8f:55:31:1f:40:00:3e:21:48:13:5d:69:85:d5:31:78:ee:62:35:f2:bd:2f:20:52:d8:1a:94:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate statenj.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for statenj.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agrobase.net
*.aovo.pro
*.aposentar.com
*.asteadyrainonbroadway.com
*.bespokestudio.co
*.budtv-ultra.co
*.carrefour.au
*.cleanwhey.info
*.craigslistchico.com
*.danubioalojamientorural.com
*.dosage.au
*.feride.com
*.garbage.com.au
*.gjcoc.info
*.gluesing.com
*.helsa.pro
*.hernando.us
*.insulin.au
*.jobsgeogroup.com
*.k12ia.us
*.k12mo.us
*.kee.au
*.kok.au
*.ktu.au
*.lordsmobile.club
*.lunatic.live
*.maxes.pro
*.menasa.com
*.mesbahi.com
*.morphe.au
*.myipaddress.io
*.painfreehairremoval.com
*.pathtrack.com
*.peremen.live
*.region59.com
*.rxqc.com
*.secundarias.com
*.shopthangrender.com
*.sofol.com
*.spacetransportation.com
*.state-pennsylvania.us
*.state-texas.us
*.state-virginia.us
*.statenj.us
*.tiendaencasa.com
*.upordown.net
*.veracidad.com
*.vranker.pro
*.wew.au
*.wheatgrassbar.com
agrobase.net
aovo.pro
aposentar.com
asteadyrainonbroadway.com
bespokestudio.co
budtv-ultra.co
carrefour.au
cleanwhey.info
craigslistchico.com
danubioalojamientorural.com
dosage.au
feride.com
garbage.com.au
gjcoc.info
gluesing.com
helsa.pro
hernando.us
insulin.au
jobsgeogroup.com
k12ia.us
k12mo.us
kee.au
kok.au
ktu.au
lordsmobile.club
lunatic.live
maxes.pro
menasa.com
mesbahi.com
morphe.au
myipaddress.io
painfreehairremoval.com
pathtrack.com
peremen.live
region59.com
rxqc.com
secundarias.com
shopthangrender.com
sofol.com
spacetransportation.com
state-pennsylvania.us
state-texas.us
state-virginia.us
statenj.us
tiendaencasa.com
upordown.net
veracidad.com
vranker.pro
wew.au
wheatgrassbar.com

Other certificates including the domain name statenj.us

(limited to 100 certificates)
tenuousretribution.club
ilcorrieredirieti.it
statenj.us
cooles.co
shotsrealm.com

Certificate

The complete raw certificate details for statenj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328423227877633158092487791741376964021671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 17:14:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 17:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'statenj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1009755023020651667314300181059501187979267139091823472404580864486712932949820493383891080514083382696870745367056372899725612862407997886037036032423640448669863529934108289564675620616844440190804581730459331021104133667577617370111152796234328493535196737625939685034317265743702717850953880632528552497408598092640191658716157977134735750996943666546727285530707597199440173042481100513393019091857265302292010378558429912817036806615424895099575618099364903335053220782858585931747854604867167728070265160116354490635766740264882584913029562445412410519138260609793985267046916141683384222798117702473520402252736895410202385493396703160791214479319549364627762429367143926342941135142637868396361018258007039138249414140367522759427671546728240776330940709527399849208703394647407222658750969811350766826523326478106407938104131636008985081135073015053539407428865000797970605572413174197630519627331959312763939627654092329724274186049311230187898220193661465025528353922805544747260214937605732298263013664256565948592233992995638890038759176383270989433277246051520020286616986670304252106052747396221834734204071515201939204066027239123313156586872858919511060091373548233976808767433522887080695469258245230615009007066779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1b433b011f29a225648d2d6e4930a63bbcc6454
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1598 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrobase.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aovo.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aposentar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asteadyrainonbroadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bespokestudio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budtv-ultra.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrefour.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleanwhey.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craigslistchico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danubioalojamientorural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dosage.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garbage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gjcoc.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gluesing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helsa.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hernando.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insulin.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jobsgeogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k12ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k12mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kee.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kok.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ktu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lordsmobile.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunatic.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxes.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesbahi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morphe.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myipaddress.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.painfreehairremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peremen.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.region59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secundarias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopthangrender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sofol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spacetransportation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.state-pennsylvania.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.state-texas.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.state-virginia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.statenj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiendaencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upordown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veracidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vranker.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wew.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheatgrassbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrobase.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aovo.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aposentar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asteadyrainonbroadway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bespokestudio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budtv-ultra.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrefour.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanwhey.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigslistchico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danubioalojamientorural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dosage.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feride.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garbage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gjcoc.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gluesing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helsa.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hernando.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insulin.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobsgeogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12ia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k12mo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kee.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kok.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lordsmobile.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunatic.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxes.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesbahi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morphe.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myipaddress.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painfreehairremoval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peremen.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'region59.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secundarias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopthangrender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacetransportation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'state-pennsylvania.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'state-texas.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'state-virginia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statenj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendaencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upordown.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veracidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vranker.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wew.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheatgrassbar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e86451aba0000040300473045022100db3446bd4033e4cd5bac474ea065a137164851f178931a7c000f3c5730475ced022070ca50de823e84e66d1383f40afdde226899a22447b92f628b8daee110a9425a0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e86451b450000040300483046022100fa447b22526be0f501521f566faf20a00d735ae2ef83aeabe630bae733924e53022100877c1e5ccded370238f4ac034c93e2ede324763897900c0935c55b7897d0ab00
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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