bobbarrettmassage.com

Issued by R3

About this certificate

This digital certificate with serial number 04:52:dc:a3:61:00:9f:75:1f:bd:22:0f:2e:e7:31:10:f1:ba was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bobbarrettmassage.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:52:dc:a3:61:00:9f:75:1f:bd:22:0f:2e:e7:31:10:f1:ba
Serial Number (int): 376645576285461644524411373574905578713530
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 00:bb:5d:7b:18:74:9f:d5:4b:b1:59:6a:6a:64:1b:fa:d1:b8:92:e5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bb:db:63:cd:ab:98:d2:8e:65:54:c6:ba:3c:31:e7:0e:20:5b:6c:38
Fingerprint (sha256): d8:be:c5:14:12:4d:41:7c:7a:3b:5d:4f:d3:1b:6c:b0:7e:7d:56:3a:e1:a0:dd:e3:d3:36:d2:f9:e9:d3:2e:f5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bobbarrettmassage.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bobbarrettmassage.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2hot2handle.com
*.5480.au
*.acepiremarketing.com
*.aksjhdkajs.com
*.alpineseotools.com
*.applications74.com
*.areasgray.com
*.artonmain.tattoo
*.asianmassagehendersonnv.com
*.askmeforthetelegram.com
*.autopartswerehouse.com
*.aviationdtn.com
*.balibecause.com
*.be-the-fan.com
*.benjaminwestinternational.com
*.besthealthyjuicerrecipes.com
*.bobbarrettmassage.com
*.cafeagog.com
*.caminasyoga.com
*.cougarpornhq.com
*.crciinfo.com
*.dicoverynews.com
*.giveladieslove.com
*.lahoramarcada.com
*.lhsaaonline.com
*.limanbet454.com
*.lustyfantasy.com
*.mariefoleo.com
*.michaelnwilliamsdds.com
*.mifes.com
*.moontrade.org
*.mountianview-hospital.com
*.mukti-invest.com
*.nairobinights.net
*.naukrihelp.com
*.penrithweb.com
*.questionsatdyson.com
*.readnaturlly.com
*.rodneypike.com
*.rongkunkmeanmnus.com
*.sexydynamitelondon.com
*.slottyway24.com
*.tipobet2088.com
*.toysareus.uk
*.typingcloub.com
*.utewater.com
*.vagaga.com
*.vipgarazh.com
*.volaweb.net
*.yoursandmayanonline.com
2hot2handle.com
5480.au
acepiremarketing.com
aksjhdkajs.com
alpineseotools.com
applications74.com
areasgray.com
artonmain.tattoo
asianmassagehendersonnv.com
askmeforthetelegram.com
autopartswerehouse.com
aviationdtn.com
balibecause.com
be-the-fan.com
benjaminwestinternational.com
besthealthyjuicerrecipes.com
bobbarrettmassage.com
cafeagog.com
caminasyoga.com
cougarpornhq.com
crciinfo.com
dicoverynews.com
giveladieslove.com
lahoramarcada.com
lhsaaonline.com
limanbet454.com
lustyfantasy.com
mariefoleo.com
michaelnwilliamsdds.com
mifes.com
moontrade.org
mountianview-hospital.com
mukti-invest.com
nairobinights.net
naukrihelp.com
penrithweb.com
questionsatdyson.com
readnaturlly.com
rodneypike.com
rongkunkmeanmnus.com
sexydynamitelondon.com
slottyway24.com
tipobet2088.com
toysareus.uk
typingcloub.com
utewater.com
vagaga.com
vipgarazh.com
volaweb.net
yoursandmayanonline.com

Other certificates including the domain name bobbarrettmassage.com

(limited to 100 certificates)
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
www.bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
www.bobbarrettmassage.com
www.bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com
www.bobbarrettmassage.com
www.bobbarrettmassage.com
bobbarrettmassage.com
bobbarrettmassage.com

Certificate

The complete raw certificate details for bobbarrettmassage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376645576285461644524411373574905578713530
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 22:30:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 22:30:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bobbarrettmassage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 989101661446719274441824959432927428465928714335580333182630289823249940394322483278672206370754740026590698886117341367578033781765493755578330803204261888929994430163637254415939797466540465787617926612638632203497220186475345321642532561278039729904058118861294762975788957961304081563064573991592941214433068343261871827869186110097427835607126219849428616145318153380260633363015609064010351717618501768145750140672749133500394751397512579855793356785048485289041247321700146881316528097883322855851445831156928105412611553473559504657709273123402205138123008057204055133288870120598563422657105785156584614412338833721994109162737726326666940070149236281600724673031477303722439085107883329946902700669611077047919350932742158238189079738683722630866524920529336309414496558933930763446304754559976960793183848063482838025564589844801060453295866889412496006070272972164110867104550164092921493956553077031903504440218267073105012386346281507319170459496993264411121893118485964238785475704516190408170189577387196592578035635550461980120556119742186944521839809519970558627791960013801441420077673810237128296666825440373648475063524342346114075529340267543654721249610783185156509093682337789740966325144415929703054785348621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00bb5d7b18749fd54bb1596a6a641bfad1b892e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2hot2handle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5480.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acepiremarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aksjhdkajs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alpineseotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applications74.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.areasgray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artonmain.tattoo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asianmassagehendersonnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askmeforthetelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autopartswerehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviationdtn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balibecause.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.be-the-fan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benjaminwestinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besthealthyjuicerrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobbarrettmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafeagog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caminasyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cougarpornhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crciinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dicoverynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giveladieslove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lahoramarcada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lhsaaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limanbet454.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lustyfantasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mariefoleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelnwilliamsdds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mifes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moontrade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountianview-hospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mukti-invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nairobinights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naukrihelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penrithweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.questionsatdyson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readnaturlly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rodneypike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rongkunkmeanmnus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexydynamitelondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slottyway24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipobet2088.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toysareus.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.typingcloub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.utewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vagaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vipgarazh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.volaweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yoursandmayanonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2hot2handle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5480.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acepiremarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksjhdkajs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpineseotools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applications74.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'areasgray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artonmain.tattoo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asianmassagehendersonnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askmeforthetelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autopartswerehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviationdtn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balibecause.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-the-fan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benjaminwestinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besthealthyjuicerrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobbarrettmassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafeagog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caminasyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cougarpornhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crciinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicoverynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giveladieslove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahoramarcada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhsaaonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limanbet454.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lustyfantasy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariefoleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelnwilliamsdds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mifes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moontrade.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountianview-hospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mukti-invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nairobinights.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naukrihelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penrithweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'questionsatdyson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readnaturlly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodneypike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rongkunkmeanmnus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexydynamitelondon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slottyway24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipobet2088.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toysareus.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'typingcloub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utewater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vagaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipgarazh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volaweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoursandmayanonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c03ac006b00000403004730450220409575a38d19f4506ba6a89626b3143364e44dc7290a0b1668f9f152422614ef022100fcff5e9189a1949dfe4ce340da9ca84d877e70c4b614baa5fa1e8861a664ad2f0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c03ac025f00000403004630440220291bf52694cc758f99ff3b30d1934abddf317a6d07d1d3adfd33c1916d15de4f02204443c24b9b8e43b71818c0eb9844434257c151cb6e8f85327cc9074e3ab6403b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020a5599a7572a450a296c2b4f8a5855376be2c6e7dd306197a56374239bd569fb1535e6f074b293b22ce8149a3114829826d9356a485b8637a7b7f82caa9647680ca965097b4458ec43a8a7f017fd8284efe89cb7c0b7b5ff36149796ae3d7b022dbd5dea78a40226efa8d582c62385a2b499f0034a9da75b80a975c7fcfdab21942810c871025611b7a79ea5412e3315166578c512fec54835d2cf307ff760a9019b2c9f0672f1834aaf1a9c9727c7d288fc1557b53dd691cf34651c4c0f313694591bdcbdc4c71563492774e6ac95991b43724aa09dcbec3cdaf5b5310bb3c38ccbcc2bf874f756c9f0b30195d3bf9c631aaed0e4ba29aad7761d636218517