safepointis.com

Issued by R3

About this certificate

This digital certificate with serial number 03:81:90:e7:cc:cf:51:15:9e:4c:4c:56:35:c4:64:19:b0:5d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=safepointis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:90:e7:cc:cf:51:15:9e:4c:4c:56:35:c4:64:19:b0:5d
Serial Number (int): 305425895534086034363699944338629099892829
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:ee:7e:0a:ae:33:0f:c9:20:1c:a2:b0:8b:42:84:8b:d9:54:2b:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:05:02:91:d4:88:11:07:e7:56:72:d9:18:5e:83:39:38:1a:fb:92
Fingerprint (sha256): d4:4b:7e:ef:31:b5:a0:68:d7:38:36:c5:a0:fb:f3:d6:15:cc:96:24:af:3c:f3:16:a6:e7:a7:22:08:a9:6f:11

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate safepointis.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safepointis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1840.org
*.18plusteens.net
*.3gf.me
*.adsierra.org
*.ahbindia.com
*.automotivediscount.eu
*.bsimports.us
*.canlibahiszone.info
*.charlevillenews.com.au
*.cll14.xyz
*.danielsjewelry.com
*.deaconplacewake.com
*.deluxenailportsmouth.com
*.donatellafabio-shop.com
*.drnataschasantos.com
*.drumexpert.net
*.ejc2009.org
*.epui-ci.org
*.extremerestrainsts.com
*.find-on.me
*.forexkereskedelem.info
*.fundsassetbank.com
*.garutigioielli.com
*.globaloutsourcingagency.com
*.hgldh3.live
*.ihufbih.cn
*.khanhxnguyen.com
*.leiting993.com
*.liferadio.org
*.panamerican.tv
*.parisuhde.net
*.personalizationwithsystems.com
*.ppsford.co
*.queenslandtourism.com.au
*.radyolove.net
*.reveremag.com
*.rufusstarlight.com
*.safepointis.com
*.searchcode.co
*.shingogames.com
*.soghsorhosruuosrfhx.info
*.somethingforeveryone.net
*.startupdepression.com
*.storageinabox.net.au
*.ta39.xyz
*.tbart.net
*.teamrosin.com
*.voicesfromthevillage.com
*.xahuisuo.life
*.xiaosaobao.cn
1840.org
18plusteens.net
3gf.me
adsierra.org
ahbindia.com
automotivediscount.eu
bsimports.us
canlibahiszone.info
charlevillenews.com.au
cll14.xyz
danielsjewelry.com
deaconplacewake.com
deluxenailportsmouth.com
donatellafabio-shop.com
drnataschasantos.com
drumexpert.net
ejc2009.org
epui-ci.org
extremerestrainsts.com
find-on.me
forexkereskedelem.info
fundsassetbank.com
garutigioielli.com
globaloutsourcingagency.com
hgldh3.live
ihufbih.cn
khanhxnguyen.com
leiting993.com
liferadio.org
panamerican.tv
parisuhde.net
personalizationwithsystems.com
ppsford.co
queenslandtourism.com.au
radyolove.net
reveremag.com
rufusstarlight.com
safepointis.com
searchcode.co
shingogames.com
soghsorhosruuosrfhx.info
somethingforeveryone.net
startupdepression.com
storageinabox.net.au
ta39.xyz
tbart.net
teamrosin.com
voicesfromthevillage.com
xahuisuo.life
xiaosaobao.cn

Other certificates including the domain name safepointis.com

(limited to 100 certificates)
safepointis.com
safepointis.com
safepointis.com
monkies-shoes.com
monkies-shoes.com
safepointis.com
safepointis.com

Certificate

The complete raw certificate details for safepointis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305425895534086034363699944338629099892829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 17:59:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 17:59:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safepointis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825286822365682848479098196786175379123968647595033863140665708278292875140635548817073425687411828112806901858077659514319757905076276873656824452313735686865677507353265327977866982421948470807300132211590599323099096599187327943425771288906000655537913493938348916948018880049071448250321180315119831119933836160542807628134918304413845357419059360861299772336607510746761346771917077200081242620240763878860937578204651997531613035111462479687660893988024445422683581252057476237382610753917719181988580237381695378332440252371653223093180624447186418413591458398494919731895818384366574079483207346025662439756794434899457444342535762553914198783486154619082287215773428072651670008587115171382100406028760029647536316028966933430086314177746258705616590462314917607555900521359205086713376234397244598814311599262336158925486155960727587469534415744010320033688393950682406712846776540570486286550673166565018973066515988615663280852804795289486325692778281208740369748590938034177278640846922433641039188962191634618308425685680907612352451074934657772660549472516737984784423078876748588147077478586505745962532173143467357891606854701315632000470862585101083245067184463706746348025354919279931258884512190288819896451005597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73ee7e0aae330fc9201ca2b08b42848bd9542bb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1840.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18plusteens.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3gf.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adsierra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahbindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automotivediscount.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bsimports.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canlibahiszone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charlevillenews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cll14.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielsjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deaconplacewake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deluxenailportsmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donatellafabio-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drnataschasantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drumexpert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ejc2009.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epui-ci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extremerestrainsts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.find-on.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forexkereskedelem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundsassetbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garutigioielli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globaloutsourcingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hgldh3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihufbih.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khanhxnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leiting993.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liferadio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panamerican.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parisuhde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalizationwithsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ppsford.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queenslandtourism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radyolove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reveremag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rufusstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safepointis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shingogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soghsorhosruuosrfhx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somethingforeveryone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.storageinabox.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ta39.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamrosin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voicesfromthevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xahuisuo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaosaobao.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1840.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18plusteens.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3gf.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsierra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahbindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automotivediscount.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsimports.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canlibahiszone.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlevillenews.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cll14.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielsjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deaconplacewake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deluxenailportsmouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donatellafabio-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drnataschasantos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drumexpert.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejc2009.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epui-ci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremerestrainsts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'find-on.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexkereskedelem.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundsassetbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garutigioielli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaloutsourcingagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgldh3.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihufbih.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khanhxnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leiting993.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liferadio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamerican.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parisuhde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalizationwithsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppsford.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queenslandtourism.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radyolove.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reveremag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rufusstarlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safepointis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchcode.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shingogames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soghsorhosruuosrfhx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somethingforeveryone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupdepression.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storageinabox.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ta39.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamrosin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicesfromthevillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xahuisuo.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaosaobao.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8c419ba200000403004830460221009c5f373de06c5efbf658269068f7e4971132cb186a2f4df3bacf654c4685d874022100faa0a98ce927f218cbccf806d8ecfac6407f44f572b830364e3782dbb8a8593000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b8c419c09000004030047304502210091c605a015d816c02b979b69fbb23b16f983744c863195531c4b9f8422208a9c02207816dcfcc2a490dea9823222b6070f12f6b438ae1da21960e9d34fdc09798e39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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