fleishmann.com

Issued by R3

About this certificate

This digital certificate with serial number 03:36:10:5c:16:27:2b:78:b6:98:00:8a:d5:bd:81:b3:9c:b3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fleishmann.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:36:10:5c:16:27:2b:78:b6:98:00:8a:d5:bd:81:b3:9c:b3
Serial Number (int): 279733851397571324232190587174020084636851
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:fa:9a:41:27:2f:17:b2:4e:7e:7b:8b:db:1d:7c:ff:c5:78:b1:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 21:af:de:7c:4f:e9:67:a4:12:a2:14:53:8f:6f:ff:9b:a0:ad:f3:3e
Fingerprint (sha256): cf:aa:73:f1:a5:62:a2:d1:1e:2f:2d:6a:28:2c:80:6d:d0:5a:6e:42:94:9e:77:05:4d:dc:a8:95:9a:e1:42:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fleishmann.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fleishmann.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.677us.com
*.advancedhandymanservice.com
*.amyaarpmedicare.com
*.bataviagaragedoor.com
*.bellevuenews.net
*.bestbuyhr.com
*.bicyclegirl.com
*.bisutiermateriales.com
*.breitbat.com
*.camconnevada.com
*.caninecookiesncream.com
*.capitalairtool.com
*.conroeobgyn.com
*.daintyworks.com
*.davisdrug.com
*.deansconstruction.net
*.doume.eu
*.dumupsychiatryllc.com
*.e-seennet.com
*.ecciwindows.com
*.fleishmann.com
*.formsswift.com
*.freebiefrenzy.com
*.freecashappmoney.com
*.girlsgame.co
*.h-b-h.online
*.healthfusionlogin.com
*.hotcamgirl.pw
*.johnnyseds.com
*.kuwaitcitynews.com
*.laughtersoundhealing.com
*.leadbykeyword.com
*.lilachousemillis.com
*.lyonstownship.com
*.mcsitemps.com
*.mojebpress.com
*.molpo.pw
*.mtbiker.com
*.mtschoolbucks.com
*.my31bags.com
*.mymanilabakes.com
*.nfsw247.to
*.palaminorv.com
*.pepertoilet.com
*.pornbly.co
*.promosports47.com
*.thednw.net
*.vacuumworldhuntsville.com
*.vrbeneficios.com
*.wetransfrer.com
677us.com
advancedhandymanservice.com
amyaarpmedicare.com
bataviagaragedoor.com
bellevuenews.net
bestbuyhr.com
bicyclegirl.com
bisutiermateriales.com
breitbat.com
camconnevada.com
caninecookiesncream.com
capitalairtool.com
conroeobgyn.com
daintyworks.com
davisdrug.com
deansconstruction.net
doume.eu
dumupsychiatryllc.com
e-seennet.com
ecciwindows.com
fleishmann.com
formsswift.com
freebiefrenzy.com
freecashappmoney.com
girlsgame.co
h-b-h.online
healthfusionlogin.com
hotcamgirl.pw
johnnyseds.com
kuwaitcitynews.com
laughtersoundhealing.com
leadbykeyword.com
lilachousemillis.com
lyonstownship.com
mcsitemps.com
mojebpress.com
molpo.pw
mtbiker.com
mtschoolbucks.com
my31bags.com
mymanilabakes.com
nfsw247.to
palaminorv.com
pepertoilet.com
pornbly.co
promosports47.com
thednw.net
vacuumworldhuntsville.com
vrbeneficios.com
wetransfrer.com

Other certificates including the domain name fleishmann.com

(limited to 100 certificates)
xn--j2v26x.com
saratogalady.com
offfic.com
mtbon.co
saratogalady.com
saratogalady.com
mtschoolbucks.com
humanithe.com
fleishmann.com
saratogalady.com
healthfusionlogin.com
*.aerotekjobs.com

Certificate

The complete raw certificate details for fleishmann.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA149+kFHFrvzBPY9mMUYI
xZIiOTKX2nvfB12T/4z6VjUHxY9JwAW8KVoqtxd7Sj8ceqlBxnCp+LeOCXB3EL1m
ZwE1798xU8RbKPQQUHy0moRTYeS2/3hooyo4cIduMKMjBiOM8EqoxhlnZjMbr2iU
M9LIJECEUYvjhk2HvCX1TaqeTor6fRqNZYIyi4AfvP0Q8u50DSnWeQ0uLRXJj+EY
+sRQxnp38Ir5lRgth2cRD73b1qUMprb7BEH6Pr8O/oO4U7ObMcmNHVizo2YVxNJ9
c2SphNqBxWHINVcgtsxH5///wXOwIPaRSYteCPrYJeH+qMmYKGyD/+j5thmb5LQk
REDX56wctuw07biUgVFMm4bju0k0zqtYJwurjA2v30cof5uNvQ5oisGhLQ5mjF0K
+R6VOdVCPHbYvBEJd7HiNLBqQsqg+CmnPBgn2NGiRyNlwAg41nwiULkN3GCzWl1l
N8QneWeMmgpwQYuQO2IF9KbG1M6S7kOU11h0R4NIaNufZCS+GfrZONjAEZEX74fn
ry9/aqren8j8n8mAopUaYm1Rh/nHYNxbU1I1rhbhalP1828EBnVT41UE18k+Br4H
/IfbkwEWLoM+uRDc8idUagLCuniHgs1MHqevskny30I84lUpPrYojEvbbfVQetn0
g79vdJCQ38XbbN9JrxuL500CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279733851397571324232190587174020084636851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 11:16:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 11:16:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fleishmann.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879410216950450258324008584155524157057854270998355761371799647192514350535629242798086043732041604269238858575744678897924059704110802452232768601497215572343209435889249274252947369007815378416765962575341194385815984093271869822906772361928121099617673835945252411582176691951909059551908458339811403141113868422946484786627291704534408906175426476717119312694966554373569284319577078677712087937708571019080214948869760824756649962482566630915967672349869633971707358671874167344356268071496544320935956003249466817954007610464144768411198167239375420490007863169837181543746340551613468135061310365137948950463075374155736840128826562793782061911539384385000708717739564791186125609863178078372646273605740032067083018609471063442311380099322828705501500090558502696668972956337985340830081673284282082527375309917169765289955542404196473140119951227223339958946771328636805748770040898743961922125640323038850817678573484490995871057242021875901696228531081807562000654579346795549770475407888475738456560172377096080974233886499180332700544402070633031234751455482923460587823915985647160485172592896655202374868268480359001316775283217964698542440745934180639257419890092140241091052679260777859327060668186152411251331557197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15fa9a41272f17b24e7e7b8bdb1d7cffc578b19c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1882 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.677us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advancedhandymanservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amyaarpmedicare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bataviagaragedoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellevuenews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestbuyhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bicyclegirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bisutiermateriales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breitbat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camconnevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caninecookiesncream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capitalairtool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conroeobgyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daintyworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davisdrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deansconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doume.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dumupsychiatryllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-seennet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecciwindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fleishmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formsswift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freebiefrenzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freecashappmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girlsgame.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h-b-h.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthfusionlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotcamgirl.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.johnnyseds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuwaitcitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laughtersoundhealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leadbykeyword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lilachousemillis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyonstownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcsitemps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mojebpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.molpo.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtbiker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtschoolbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.my31bags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymanilabakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nfsw247.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palaminorv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pepertoilet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornbly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promosports47.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thednw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacuumworldhuntsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrbeneficios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wetransfrer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '677us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedhandymanservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amyaarpmedicare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bataviagaragedoor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellevuenews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbuyhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicyclegirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bisutiermateriales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breitbat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camconnevada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caninecookiesncream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalairtool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conroeobgyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daintyworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davisdrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deansconstruction.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doume.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumupsychiatryllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-seennet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecciwindows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleishmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formsswift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freebiefrenzy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecashappmoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girlsgame.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h-b-h.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthfusionlogin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotcamgirl.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnnyseds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuwaitcitynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laughtersoundhealing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadbykeyword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilachousemillis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyonstownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcsitemps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojebpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molpo.pw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbiker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtschoolbucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my31bags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymanilabakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfsw247.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palaminorv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepertoilet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornbly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promosports47.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thednw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacuumworldhuntsville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrbeneficios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wetransfrer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0668e8b60000040300473045022068b3fc6de724438758a04f94c942a2ad254e7ca9ab9af20192da697edf0def470221008808f7477e40c950dfcdc3836cddf027fcf934332def6ba8ad8e3f1e2a53bc1f007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0668e91c0000040300473045022100cad87f104a377e0611959ddd2c94c9fb63112bcfb42c9afd3d51a26dad96ea54022056f48c21a684966cfc5110f14cee136bc8367cd4137977e08b7914e2e1781b7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c57e474fedba7d8176d2f7876b86ea02d5863b808ac94eef2b1ba2ddca635ea116b645e8280a6f592539b87bca044b82543c858588f08adb7c60a38ceb786702fa90bd515098b64f832e447ec01516ccb42c496796b6169b55f6a71e491aef2d6a7f3990fb6b04aaa175a19018c94b50986edabb7daac58e989a35bd74c4a2fc8201367df6cbadb4c8a83029fc1d36b1bb57dfb60362fa98ede51bc4cb1cc1a8385a979e8a764232ec81604c08f8975e8725ec553508bc32528b0ddf927d2bdc92eb6c3a64009d5ec7f5599daa261652a0f395cb3ec72c7e5c9e8597b41845515262cd8652b4472df1f3f20bca61d352017f83acc88bc63f84e2e5554b81e2b