quindio.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:17:7f:93:81:09:0c:86:04:65:ec:4d:4c:06:99:c9:d8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=quindio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:17:7f:93:81:09:0c:86:04:65:ec:4d:4c:06:99:c9:d8
Serial Number (int): 312750729857683980117238994527105528220120
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:5f:79:43:56:39:30:d1:ac:7b:75:ae:87:7b:c3:36:b7:9f:35:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:31:8e:4b:15:3d:e7:76:d5:f6:4e:55:94:86:0e:92:8d:cb:2b:fa
Fingerprint (sha256): d1:1e:0d:27:c5:6a:33:df:5f:33:6c:89:66:54:ff:40:9e:e9:5e:fa:9c:e6:97:ef:20:50:7a:11:bd:4a:53:13

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate quindio.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for quindio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adae.com
*.adventurebiketours.com
*.amigosecretognp.com
*.antics.com.au
*.appleemail.com
*.batido.com
*.bestmusichitsapp.com
*.cgvyapam.com
*.cochinas.com
*.converter.au
*.createmyllc.com
*.digitallicense.com
*.flaminghair.com
*.gomola.com
*.gonesse.com
*.hanoians.com
*.harwitt.com
*.hayt.com
*.hiyoriartcenter.com
*.irrita.com
*.joymodels.com
*.langoog.de
*.laplazita.com
*.lindome.com
*.lotfi.com
*.mepresta.com
*.norihiko.com
*.ohiomarriage.com
*.ordern.com
*.pantalonetas.com
*.quindio.com
*.raiceshebreas.com
*.rebajo.com
*.ripudaman.com
*.rizzello.com
*.rufflebun.com
*.seniorcitizencard.com
*.seokeywordi.com
*.sidelineclub.com
*.skurk.com
*.subastasdeinmuebles.com
*.the3dstore.com
*.thebestshapeofyourlife.com
*.txphoto.com
*.ursulines.com
*.ventaropa.com
*.walkware.com
*.waternet.com
*.winphonecloud.com
*.wvweather.com
adae.com
adventurebiketours.com
amigosecretognp.com
antics.com.au
appleemail.com
batido.com
bestmusichitsapp.com
cgvyapam.com
cochinas.com
converter.au
createmyllc.com
digitallicense.com
flaminghair.com
gomola.com
gonesse.com
hanoians.com
harwitt.com
hayt.com
hiyoriartcenter.com
irrita.com
joymodels.com
langoog.de
laplazita.com
lindome.com
lotfi.com
mepresta.com
norihiko.com
ohiomarriage.com
ordern.com
pantalonetas.com
quindio.com
raiceshebreas.com
rebajo.com
ripudaman.com
rizzello.com
rufflebun.com
seniorcitizencard.com
seokeywordi.com
sidelineclub.com
skurk.com
subastasdeinmuebles.com
the3dstore.com
thebestshapeofyourlife.com
txphoto.com
ursulines.com
ventaropa.com
walkware.com
waternet.com
winphonecloud.com
wvweather.com

Other certificates including the domain name quindio.com

(limited to 100 certificates)
jazz-radio.us
gmajl.com
igview.me
tunte.com
quindio.com
quindio.com
ripudaman.com
hayt.com
ripudaman.com
quindio.com
ripudaman.com
wavefarmpower.com

Certificate

The complete raw certificate details for quindio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312750729857683980117238994527105528220120
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 08:52:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 08:52:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'quindio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627163856514163479731160738747382280227142856700501919999376260004080632027324596372450856342377904753430206848240023159288348923749457976004885446557863190053912851396670038980002788495406950721078982163217888105723328498096396778104871609829989203895767873876610316785235229132274094505686970039934934265371783309150970107702740005523685776691257272218919361033098084061335575004749092871635786731031050267384945244430772843422801776838627002576854283759948226908176188194657909637748984001541960589597759695011505507999479926141257036481933074736221488940800505308381430964330323545341177653516249623881676062235476827155998454127705497080522980048192636989318505229971463311889917896570829714790391343046253052169506287409243327945090846039148358714317595848389686070483064254054850984023043798891556308440410318490493151166459757895759582184179385661176293476296217419950351106052171744906031132752560890398208594457916276497876386836275114273460295217848863903298137435159871418548688369360244484934171477367741160655134770539500237545434576439167081514061522765934203225310549182756151519519816746288812164363014614724598767698251967795856640415703485636872423165387174120565918705243609065474873247061770709209754090958987203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e5f7943563930d1ac7b75ae877bc336b79f3514
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1672 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventurebiketours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amigosecretognp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appleemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestmusichitsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgvyapam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cochinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.converter.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.createmyllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitallicense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaminghair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gomola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gonesse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanoians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harwitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hayt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiyoriartcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irrita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joymodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.langoog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laplazita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lindome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mepresta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norihiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohiomarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ordern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pantalonetas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quindio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raiceshebreas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rebajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ripudaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rizzello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rufflebun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seniorcitizencard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seokeywordi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sidelineclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skurk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subastasdeinmuebles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the3dstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebestshapeofyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ursulines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventaropa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walkware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winphonecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wvweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventurebiketours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amigosecretognp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antics.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestmusichitsapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgvyapam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cochinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'converter.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createmyllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitallicense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaminghair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gomola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonesse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanoians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harwitt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiyoriartcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irrita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joymodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langoog.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laplazita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotfi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mepresta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norihiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohiomarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantalonetas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quindio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raiceshebreas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rebajo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripudaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rizzello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rufflebun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorcitizencard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seokeywordi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidelineclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skurk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subastasdeinmuebles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the3dstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestshapeofyourlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ursulines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventaropa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walkware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waternet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winphonecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvweather.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcd3f594a000004030046304402206c08a0497461b659e99752d0eb08d21a63f8a2cce99f795c309156787d9d101702201003d50404f54fcc548238c004fe011cee7ca1180a61b3549c2172c6ebc12f3700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bcd3f5b370000040300483046022100ff3644e07eac735a802a7fc966e28c076f3e77007c496ca61d01ff08941e5d4f02210089c4697081e44837600b3700a5b54ab654e2b82b53a7c685d7738b861f288d75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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