envptucson.org

Issued by R3

About this certificate

This digital certificate with serial number 03:82:27:c8:e5:a9:5c:c6:d9:a0:0c:90:43:aa:81:fd:cb:eb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=envptucson.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:27:c8:e5:a9:5c:c6:d9:a0:0c:90:43:aa:81:fd:cb:eb
Serial Number (int): 305626448504300130591744310760904620624875
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:f5:39:de:9b:c3:8f:02:d6:51:78:69:1f:9b:cb:3b:bf:52:6f:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:e7:3e:7b:7c:50:69:15:ff:e6:9c:e6:fd:2c:48:7b:ae:0e:b2:b0
Fingerprint (sha256): d7:ef:b5:be:fb:58:d9:12:19:48:20:5e:61:a0:47:11:a3:bc:1d:dc:b8:ef:90:15:dd:13:48:2d:75:d3:ac:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate envptucson.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for envptucson.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amandascakery.net
*.andreazoppforsenate.com
*.appliance-repsir-manuals.org
*.astromembers.com
*.bitchesgirl.com
*.boomerangtshirts.com
*.bszoocam.org
*.budgetfunnels.com
*.buytramadolrx.info
*.campsciencesafari.com
*.cathayairline.com
*.cdqrlsnsgoxh.com
*.ddthol.com
*.downloadnicovideo.com
*.envptucson.org
*.farmaciachiefalo.com
*.fasokemoas.online
*.friarsboon.com
*.fs20mobile.com
*.fynfkjanenwh.com
*.gammarecordingstudio.com
*.infoarmat.com
*.ix3.cc
*.jessie.club
*.keusccjw.com
*.ksp149.me
*.kwiknotes.com
*.lalocuralocura.net
*.lightforleadership.com
*.mangadop.com
*.manhua.se
*.mascovilla.com
*.meditest.au
*.movies-central.com
*.mqefgyes.com
*.of-3600.info
*.patrickleighfermorsociety.org
*.rentalbondloan.au
*.saddlerepairs.com
*.safetymelbourne.com.au
*.sahshockey.com
*.sommovies.com
*.super-xbody.com
*.takeastringbreak.com
*.theprodentims.com
*.tsigrado.com
*.umniella.com
*.wellrides.info
*.wlounge-montreuil.com
*.ytvqmajja.com
amandascakery.net
andreazoppforsenate.com
appliance-repsir-manuals.org
astromembers.com
bitchesgirl.com
boomerangtshirts.com
bszoocam.org
budgetfunnels.com
buytramadolrx.info
campsciencesafari.com
cathayairline.com
cdqrlsnsgoxh.com
ddthol.com
downloadnicovideo.com
envptucson.org
farmaciachiefalo.com
fasokemoas.online
friarsboon.com
fs20mobile.com
fynfkjanenwh.com
gammarecordingstudio.com
infoarmat.com
ix3.cc
jessie.club
keusccjw.com
ksp149.me
kwiknotes.com
lalocuralocura.net
lightforleadership.com
mangadop.com
manhua.se
mascovilla.com
meditest.au
movies-central.com
mqefgyes.com
of-3600.info
patrickleighfermorsociety.org
rentalbondloan.au
saddlerepairs.com
safetymelbourne.com.au
sahshockey.com
sommovies.com
super-xbody.com
takeastringbreak.com
theprodentims.com
tsigrado.com
umniella.com
wellrides.info
wlounge-montreuil.com
ytvqmajja.com

Other certificates including the domain name envptucson.org

(limited to 100 certificates)
envptucson.org
movetime24.com
envptucson.org
envptucson.org

Certificate

The complete raw certificate details for envptucson.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305626448504300130591744310760904620624875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 22:49:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 22:49:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'envptucson.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862682819275266981916269164726208913579739374785315515818139729127038346338575229522185141305514679157400674616789124572093759437573591621258726953173810317919444046864959136373725286859223389924092627389421526620826990148861693632568108662163198103183920014285126564174000208401313012258586620987153712774904880153970473315602401387137175110273111631772166884072196668463342416418849314605957709049657918552203595575403998276420866422669245336174616755461326996363839687628772259860575504675887316062562700280588000586662402541542691559709534894453242330512884616182718858546923495082415922963502476814146806106364377943259527223657784360378890520194345414565874513223709249071222169767438530396144891787501056246212547451582298868020234484881922075922030348789731704191317066378320460292897744742575391326236946198817098860321394566868222841858910123781394170077475931891659759106771544704000616151212372814988591915428090153399729302436832308269707467637642017302862130829121191344388553453360528517501949479232154967600550362563310153439708354418158804720110386608535687579841800708555796635968686743408571202993114414438749532918673117540953454913409179064613664113901072738152231080528580002524888844774429403219378166848402857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40f539de9bc38f02d65178691f9bcb3bbf526f00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1900 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amandascakery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andreazoppforsenate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appliance-repsir-manuals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astromembers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitchesgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boomerangtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bszoocam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgetfunnels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buytramadolrx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campsciencesafari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cathayairline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdqrlsnsgoxh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddthol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downloadnicovideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.envptucson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farmaciachiefalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fasokemoas.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friarsboon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fs20mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fynfkjanenwh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gammarecordingstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infoarmat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ix3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jessie.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keusccjw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ksp149.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwiknotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lalocuralocura.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightforleadership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangadop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manhua.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mascovilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meditest.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movies-central.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mqefgyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.of-3600.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patrickleighfermorsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentalbondloan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saddlerepairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetymelbourne.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sahshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sommovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.super-xbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takeastringbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theprodentims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsigrado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umniella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellrides.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wlounge-montreuil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ytvqmajja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amandascakery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andreazoppforsenate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliance-repsir-manuals.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astromembers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitchesgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boomerangtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bszoocam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgetfunnels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buytramadolrx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campsciencesafari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathayairline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdqrlsnsgoxh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddthol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadnicovideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envptucson.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmaciachiefalo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fasokemoas.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friarsboon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs20mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fynfkjanenwh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gammarecordingstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infoarmat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ix3.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessie.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keusccjw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksp149.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwiknotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lalocuralocura.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightforleadership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangadop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhua.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mascovilla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meditest.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies-central.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mqefgyes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'of-3600.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patrickleighfermorsociety.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentalbondloan.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saddlerepairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetymelbourne.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahshockey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sommovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super-xbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takeastringbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theprodentims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsigrado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umniella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellrides.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlounge-montreuil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytvqmajja.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca36286da000004030046304402201e8aabd52cb48fd8b6b281cc818d674a46652a42d7ed2a7e9e748d27d8ec347702207e95d891c595c2206c2b76b9be79fef1d061296be06a1c8ff490a47dcc639099007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ca36286dd000004030047304502210092b6bc2f33df6218b065986b5fc8075cfbcaaab3b96095d3506c51560634fa0f02206789f39370013981250abc3ac2662927f93bfabaa521bb7e606a8ffd9f7b3170
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a774845dc9e357ef20ec64f03257d600556cc8ea859e879569b7e3377d043573fa4b45c651ad128740e164973da00230609c48faecd899318bdf935a0d75ab254af05b8e707ecb14306ed7b44a5455a0fd66f0531225b7a6e354d98e3ce4636070e37a05ee874b330d8e0c4f9b81f61fb7f9ba74b1626a7d02264676788b5c7d341d2d8d8d285006efd09fc4d2bf972462328acdac72342d7faa71060b5caa3018bf73a24849bc9db326ff53bc154db90336d23c50a332cb94a45004366987a74dd055bf52929f69e76725bfdcbb8f79d7bb340aa6078b7ec96686844b93a207dbe84a5d85673a215abe4d218e7bf216e1074764eb890e35ac2c79ec6ebf6e3