luzmundo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:fe:0b:ad:c1:05:7d:68:7a:b0:18:97:dd:55:31:a2:53:1f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=luzmundo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fe:0b:ad:c1:05:7d:68:7a:b0:18:97:dd:55:31:a2:53:1f
Serial Number (int): 434896388615209523157208157511545763549983
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:78:04:f2:8f:5f:9d:22:8d:18:c0:43:72:ee:09:43:b9:84:b0:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:ad:7e:67:35:d9:27:50:ec:70:40:f2:25:85:1f:00:51:f5:c5:65
Fingerprint (sha256): d4:73:bb:f8:9f:4d:13:39:51:66:7a:e5:6b:25:bd:a0:a0:31:63:ad:d4:e2:78:34:14:7b:62:a9:f2:d2:4d:8d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate luzmundo.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for luzmundo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.annajolie.com
*.antirape.com
*.betelgeusesupernova.com
*.betrieblicheversicherung.com
*.biomarketer.com
*.bitcoinizados.com
*.broadwaysounds.com
*.cashsmoke.com
*.cleanenergyfusion.com
*.codingsecret.com
*.dishpay.com
*.e-depot.net
*.easydevelopments.com
*.gleitlacke.com
*.gotgarlic.com
*.handycbd.com
*.healthacquisitions.com
*.healthywayeveryday.com
*.hirecontact.com
*.hmts.net
*.identachild.com
*.incredibletrust.com
*.jerichoedge.com
*.joleenskipworth.com
*.leafcoins.com
*.luckpoint.com
*.luzmundo.com
*.mailigator.com
*.mattdabrowski.com
*.mduwallet.com
*.morgenshow.com
*.ninjaliving.com
*.outfitdirect.com
*.personalpatents.com
*.pharma-insider.com
*.pollnation.com
*.powerstrollers.com
*.profitgalaxy.com
*.rigaslaw.com
*.sansdieu.com
*.studychineseonline.com
*.toolomatic.com
*.unbreacher.com
*.usclever.com
*.usedporschespares.com
*.venturescard.com
*.vibrapay.com
*.viking-fitness.com
*.wholeprotein.com
*.winningbuilders.com
annajolie.com
antirape.com
betelgeusesupernova.com
betrieblicheversicherung.com
biomarketer.com
bitcoinizados.com
broadwaysounds.com
cashsmoke.com
cleanenergyfusion.com
codingsecret.com
dishpay.com
e-depot.net
easydevelopments.com
gleitlacke.com
gotgarlic.com
handycbd.com
healthacquisitions.com
healthywayeveryday.com
hirecontact.com
hmts.net
identachild.com
incredibletrust.com
jerichoedge.com
joleenskipworth.com
leafcoins.com
luckpoint.com
luzmundo.com
mailigator.com
mattdabrowski.com
mduwallet.com
morgenshow.com
ninjaliving.com
outfitdirect.com
personalpatents.com
pharma-insider.com
pollnation.com
powerstrollers.com
profitgalaxy.com
rigaslaw.com
sansdieu.com
studychineseonline.com
toolomatic.com
unbreacher.com
usclever.com
usedporschespares.com
venturescard.com
vibrapay.com
viking-fitness.com
wholeprotein.com
winningbuilders.com

Other certificates including the domain name luzmundo.com

(limited to 100 certificates)
luzmundo.com
luzmundo.com
m.luzmundo.com
luzmundo.com
m.luzmundo.com
luzmundo.com
m.luzmundo.com
luzmundo.com
wolfwtyd.com
m.luzmundo.com
luzmundo.com
m.luzmundo.com
luzmundo.com
m.luzmundo.com
luzmundo.com

Certificate

The complete raw certificate details for luzmundo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwyRebT7KxYi6k++QEfWt
XWtM2CC9CF/wkgl1CoL2YLm/RtE0np+paxIevtRMLS8K+Zx0eZfYzmtK9v4n40OY
Ey+x8U7zgdh/+D+5MMFxFjvi6E6PwHdGqBkAZD9s4G9To2PptdPfLopo1mfkJohH
YGr7gJd7VwJGwSUXI7PtzdS4bv/Y09Wr+pHaXdC3MJDehU0EdOvhG8sAf1RA8RBc
Zkqi9RqpgdZQJeWNcklI5YJu/p0/OFXZdF0DCD+y6o4icXRI2I0KBhs5As9vYwXD
wTJZQnk9yhc/E/dhzokHabOW3HwFw039J3ySCIfYoGyL8IL7ZXQIr1sfIXVEH2yt
WXo2mcvobwlDdanEk0iRjHQSGvRXnqKB6ZNN29wykmhXHdzshavFH6y97lSZKyIm
7uqbLd2pxZ25K9ujGF+tAaFVPFkWUYxj76x/d3GgvnuaY0pHZc5GQh/8qOrnWbrL
IsXxs6NcYUP9cfNfvsrp4AouyxmhJW92lEzsVtsKvihB/sUb1H6LYLeZiU06vhqJ
qCcjLsHDDk80guZmkYn64i4rEBli8R/Bi4fi++10FdSSgGeZuT89OWjFTXltKdNi
djQ+iKbeBUwXQvPA/lAn5VmD6j6gFBzXkulb0qyB5n1RvsEfua8vHfzPVmqd4SiE
dioFh+NDMthd7p63n6k1spMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434896388615209523157208157511545763549983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 08:17:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 08:17:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luzmundo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796110171315958023316233720799857282011121448615182624478009205685868473726906394029432763533059287464175216549423937680810004790545922775910766929306478647754456405655523104469570868293998760358268926553022580232777346131004769156676136490207643382063239160278756548840643348368080604927142511469198625653572221734837811172165865616899956652644291876074558618775497159514921594883807318593915948182347320208171828758806665237243393383067573926371011099844874463304595983303834046435274220951025197546097232969222105474595141220996226305025682221414601678258860082820769753323526299610220650885284966602159810813522878616442817539198374470782630224061944615778695005702786852237461536012627397992578643017027598711230396177593308827562067809029831855993748243283419031444617561748506212137899656536519751066135554232848927343051651595568555129473340444392867638634167671166722452515801920230691024705077484718480297530865074304900706147190379675155097824289991381789757798265124010901322171683423072804442831488655850162933052237453299008396508830184454448453467798869829569114249462879633303868366814232022295009040156389406235670551643434799909240061700759533146444586757292577715334390364544009218075791028106282664643680305263251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							807804f28f5f9d228d18c04372ee0943b984b000
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annajolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antirape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betelgeusesupernova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betrieblicheversicherung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biomarketer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinizados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broadwaysounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cashsmoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleanenergyfusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codingsecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dishpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-depot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easydevelopments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gleitlacke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotgarlic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handycbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthacquisitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthywayeveryday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirecontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hmts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.identachild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.incredibletrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerichoedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joleenskipworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leafcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luzmundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattdabrowski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mduwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgenshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ninjaliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outfitdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.personalpatents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharma-insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pollnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerstrollers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profitgalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rigaslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sansdieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studychineseonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toolomatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unbreacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usclever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usedporschespares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venturescard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vibrapay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viking-fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wholeprotein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winningbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annajolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antirape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betelgeusesupernova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betrieblicheversicherung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biomarketer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinizados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadwaysounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashsmoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleanenergyfusion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codingsecret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dishpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-depot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easydevelopments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gleitlacke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotgarlic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handycbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthacquisitions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthywayeveryday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirecontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmts.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identachild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incredibletrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerichoedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joleenskipworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luzmundo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattdabrowski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mduwallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morgenshow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninjaliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outfitdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personalpatents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharma-insider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pollnation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerstrollers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profitgalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rigaslaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sansdieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studychineseonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolomatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unbreacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usclever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedporschespares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venturescard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vibrapay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viking-fitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wholeprotein.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winningbuilders.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b32a093f5000004030046304402201455ed8ff29d623c5fcc6daa76f582c12b87b8327ee1404740e802ebcf38b463022061a9799e8474c2aa09fe8a08d0b775f1b41c352e589b59af37a90dc73ca8ff770076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b32a093d4000004030047304502207e70f570af4ec2f9f549f5347d902385ad5eb6ac8184ef8743e41022e5cf0565022100e371d4b501c76ea954fa748f165c12db3782208f048931a78f06ad3e5e6fb949
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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