bushutopia.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7d:89:38:ea:0f:d5:ff:a9:dd:7b:32:09:9f:72:1e:a1:83 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bushutopia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7d:89:38:ea:0f:d5:ff:a9:dd:7b:32:09:9f:72:1e:a1:83
Serial Number (int): 391166839343543405021898778925448178868611
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:81:b6:58:e3:0d:72:b7:1d:59:9b:21:aa:ee:50:08:28:16:2c:70
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:7b:98:39:37:d5:42:cb:27:a9:37:a0:4e:fd:f6:da:28:dd:a8:ff
Fingerprint (sha256): d5:09:44:58:ca:ae:5d:06:46:b0:b5:64:ef:1d:b8:0e:19:f8:ef:94:83:39:ac:dd:8d:a0:07:90:c4:04:c0:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bushutopia.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bushutopia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9print.co
*.advodays.com
*.almightytank.com
*.bakjahealth.com
*.baliaka.com
*.barleysante.com
*.bbrwatch.com
*.bmxgameszone.com
*.bulliten.co
*.bushutopia.com
*.capital-investment.co
*.ciaeexpo.com
*.collegekafunda.com
*.diverforhire.com
*.dontplaymepayme.com
*.elderlybright.com
*.exipedia.com
*.flagship1.com
*.footybit.cc
*.foplodge35.org
*.frapsfull.com
*.fraterniterebellion.com
*.geoitec.com
*.haniman.tv
*.home-health-care.co
*.ifbbperu.com
*.inspirate.me
*.inter-city.online
*.islandlifemag.com
*.karmasup.net
*.kurumazaki.com
*.larrbuy.com
*.maylanhchinhhieu.com
*.monova.tv
*.multimillionairethailand.com
*.multisim.online
*.ndtv24.com
*.ourposthubexpress.com
*.sectioniiiwrestling.com
*.siakadukri.online
*.supermldrooms.com
*.ticketmediator.com
*.tigersplace.net
*.touchofeleganceboutique.co
*.traddex.co
*.wall-b.com
*.whattheydontteachatuni.com
*.winspectator.com
*.worthestimate.com
*.wwwmudra.com
9print.co
advodays.com
almightytank.com
bakjahealth.com
baliaka.com
barleysante.com
bbrwatch.com
bmxgameszone.com
bulliten.co
bushutopia.com
capital-investment.co
ciaeexpo.com
collegekafunda.com
diverforhire.com
dontplaymepayme.com
elderlybright.com
exipedia.com
flagship1.com
footybit.cc
foplodge35.org
frapsfull.com
fraterniterebellion.com
geoitec.com
haniman.tv
home-health-care.co
ifbbperu.com
inspirate.me
inter-city.online
islandlifemag.com
karmasup.net
kurumazaki.com
larrbuy.com
maylanhchinhhieu.com
monova.tv
multimillionairethailand.com
multisim.online
ndtv24.com
ourposthubexpress.com
sectioniiiwrestling.com
siakadukri.online
supermldrooms.com
ticketmediator.com
tigersplace.net
touchofeleganceboutique.co
traddex.co
wall-b.com
whattheydontteachatuni.com
winspectator.com
worthestimate.com
wwwmudra.com

Other certificates including the domain name bushutopia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bushutopia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391166839343543405021898778925448178868611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 16:53:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 16:53:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bushutopia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903675764801070239235714399067845860983925819058936494278263756290074219842557664038466707721947612471846497761473238105888675760149022191649807309683987129133542776738529101340616166991050230372090814857486213649856623551591501343973759970130989941804470393789459013184222185094919385112680983733532820757563718623297538969007940291204901074764259174617042154972903556347927406960070468403290169530878172454671180951971602506244641282719159720079652608429936341770053802239240535287786758774194003938453686583044139567553398766036836116502286283395358398367364643164834855614113604030277932550027464050274347299257896143653390089769958436166294527198600913163385520916097567520153708607377300167166225139716738257112809742092770462669358966008575094188221260914340159385500759498865228838834615152319429642210300475170262307090939406937618376775093915393608954197055521786192264201843678611563430000022734656760795885505481149442901451918591619435212104450907866534655839521943537479159489523543070966496363846911607454833208537103567885902140905490609727623006857624433899509958095371110061028837224949036595962258908833793284945214729714747865354887206125225336863407109907252794218019975889216975651163689728194931929719631490267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba81b658e30d72b71d599b21aaee500828162c70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9print.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advodays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almightytank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bakjahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baliaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barleysante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbrwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmxgameszone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulliten.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bushutopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capital-investment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciaeexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegekafunda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diverforhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dontplaymepayme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elderlybright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exipedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flagship1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.footybit.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foplodge35.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frapsfull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fraterniterebellion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geoitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haniman.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.home-health-care.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifbbperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inspirate.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inter-city.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islandlifemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karmasup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurumazaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larrbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maylanhchinhhieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monova.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multimillionairethailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multisim.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ndtv24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourposthubexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sectioniiiwrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siakadukri.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supermldrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmediator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigersplace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.touchofeleganceboutique.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traddex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wall-b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whattheydontteachatuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winspectator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worthestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmudra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9print.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advodays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almightytank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakjahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baliaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barleysante.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbrwatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmxgameszone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulliten.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushutopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capital-investment.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciaeexpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegekafunda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diverforhire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontplaymepayme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elderlybright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exipedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagship1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footybit.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foplodge35.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frapsfull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraterniterebellion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoitec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haniman.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home-health-care.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifbbperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirate.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inter-city.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandlifemag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karmasup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurumazaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larrbuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maylanhchinhhieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monova.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multimillionairethailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multisim.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndtv24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourposthubexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sectioniiiwrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siakadukri.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supermldrooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmediator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigersplace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchofeleganceboutique.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traddex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wall-b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whattheydontteachatuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winspectator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worthestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmudra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb537e4ab00000403004630440220405ff3214022d73313113174376234255e9cda4e55dd68377eae82bda0a170e902203ad2df7776cbb19b9db8d2a2d90bde4d7af605bd4c4194f05afc4fab70441fe7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bb537e4b20000040300473045022051406886ed769e3c560ab57b6b9d919ebbfb2317187096c1a454b40aa6998d0d022100b90e97459bb4cd0d1443d0b31d11880cb352e0017060038730c048ceff0edb14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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