ultil.com.br

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:01:f4:dd:45:e3:15:d0:02:b3:1b:e4:ed:70:c2:58:6c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ultil.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:01:f4:dd:45:e3:15:d0:02:b3:1b:e4:ed:70:c2:58:6c
Serial Number (int): 324631978678954106645350729048080978696300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:94:6f:e5:36:69:75:f0:b1:be:87:3c:bf:c7:4d:fb:1e:24:b6:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:b3:d3:3a:fc:62:8c:bd:27:56:3f:66:e2:40:88:58:02:d7:58:8b
Fingerprint (sha256): d8:c7:47:b9:91:9f:0b:ca:12:b5:1d:4d:22:82:e2:4e:16:20:93:1e:a1:f9:d6:b4:30:9d:18:b1:e5:15:4d:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ultil.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ultil.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adventuerquest.com
*.apneview.com
*.atelierjuju.it
*.bazrealitky.cz
*.beachsurf.com.au
*.belsize-music-rooms.co.uk
*.boomboom.com.au
*.cepcasa.info
*.clearances.com.au
*.cloudvid.org
*.cuencamedeceniceros.org
*.cultureducoeur.org
*.dallasmuseumofarts.org
*.early911s.com
*.estatersales.net
*.fliesen-renner.at
*.geekclothing.com.au
*.handwashing.com.au
*.jahody-samosber.cz
*.killerheels.com.au
*.kitplanes.com.au
*.kursnet-arbeitsagentur.de
*.ledlantern.com.au
*.matureamateurporn.org
*.melekdrivingschol.co.uk
*.moravak.cz
*.myaccounttalkmobile.co.uk
*.mydpd.co.uk
*.nextsurprise.be
*.nku.com.au
*.papercraftplanet.net
*.pasteurmedicalcenter.com
*.pc-workshop.net
*.penkaof.net
*.pipspanel.net
*.pronounceit.net
*.retrobush.net
*.roseberryquilts.co.uk
*.sandromoscolini.com.br
*.serviceslocator.org
*.shoesgoodshoes.info
*.sledujemefilmi.cz
*.sofad.com
*.spiceloungechapel.co.uk
*.streetcarads.co.uk
*.sunandshade.co.uk
*.topappetizerrecipes.net
*.tourdates.com.au
*.trttraining.org
*.ultil.com.br
adventuerquest.com
apneview.com
atelierjuju.it
bazrealitky.cz
beachsurf.com.au
belsize-music-rooms.co.uk
boomboom.com.au
cepcasa.info
clearances.com.au
cloudvid.org
cuencamedeceniceros.org
cultureducoeur.org
dallasmuseumofarts.org
early911s.com
estatersales.net
fliesen-renner.at
geekclothing.com.au
handwashing.com.au
jahody-samosber.cz
killerheels.com.au
kitplanes.com.au
kursnet-arbeitsagentur.de
ledlantern.com.au
matureamateurporn.org
melekdrivingschol.co.uk
moravak.cz
myaccounttalkmobile.co.uk
mydpd.co.uk
nextsurprise.be
nku.com.au
papercraftplanet.net
pasteurmedicalcenter.com
pc-workshop.net
penkaof.net
pipspanel.net
pronounceit.net
retrobush.net
roseberryquilts.co.uk
sandromoscolini.com.br
serviceslocator.org
shoesgoodshoes.info
sledujemefilmi.cz
sofad.com
spiceloungechapel.co.uk
streetcarads.co.uk
sunandshade.co.uk
topappetizerrecipes.net
tourdates.com.au
trttraining.org
ultil.com.br

Other certificates including the domain name ultil.com.br

(limited to 100 certificates)
ultil.com.br
teamworld.com.au
gams2win.com
persafe.net
ultil.com.br
persafe.net
nylotteryny.org
ultil.com.br
bikeriding.com.au
ktht.info
ultil.com.br

Certificate

The complete raw certificate details for ultil.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324631978678954106645350729048080978696300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 11:11:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 11:11:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ultil.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643202074387928340622543576187519300320605449105520552295579806766266210020133129833573763722689764331134138646864665441711225596425078355838305988270146433480690233975756170796331852464861655889217770944934423578904911106708859374510344002383598757816782293755161523173466464619086048677331455787626709431722239560037609322499073177124681621031662475745819117591807150687196336016973502537054427113466771416346111460593455621522313810888716018488193083841140544570987459132286364003167303445123698019789811794971829624167317855094094032031137006562648499177849511436605635533082771506382548537036305230508110743553379735189612974538016458227237355587180176627119382637919368953433895571150752726824297958171461042169209514918717640380760938868307625155793075810776272741564825838331982705408496046342160170090799106484476033336092421333987093975694512411527960489213033917053972033718561703447864799810320068684357612573825650591692306764512296154553254519202002376606272343261114867609045370111760754550013984224930368272461245125304080155969943508299743909897538415994505631685110489942485351960378978497618818294723222389046585964861658289657225014443704390144089889564740315620983254401468970159582400227205593460252360227176869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b946fe5366975f0b1be873cbfc74dfb1e24b6a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2008 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventuerquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apneview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atelierjuju.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazrealitky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beachsurf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belsize-music-rooms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boomboom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cepcasa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clearances.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudvid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuencamedeceniceros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cultureducoeur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dallasmuseumofarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.early911s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.estatersales.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fliesen-renner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geekclothing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handwashing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jahody-samosber.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.killerheels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitplanes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kursnet-arbeitsagentur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ledlantern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matureamateurporn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melekdrivingschol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moravak.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myaccounttalkmobile.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydpd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextsurprise.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nku.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasteurmedicalcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pc-workshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penkaof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pipspanel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pronounceit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retrobush.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roseberryquilts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandromoscolini.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serviceslocator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoesgoodshoes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sledujemefilmi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sofad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiceloungechapel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetcarads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunandshade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topappetizerrecipes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tourdates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trttraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventuerquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apneview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierjuju.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazrealitky.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachsurf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belsize-music-rooms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boomboom.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cepcasa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearances.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudvid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuencamedeceniceros.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cultureducoeur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallasmuseumofarts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'early911s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estatersales.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fliesen-renner.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geekclothing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handwashing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jahody-samosber.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'killerheels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitplanes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kursnet-arbeitsagentur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledlantern.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matureamateurporn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melekdrivingschol.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moravak.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccounttalkmobile.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydpd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextsurprise.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nku.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasteurmedicalcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc-workshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penkaof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipspanel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pronounceit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrobush.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseberryquilts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandromoscolini.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviceslocator.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoesgoodshoes.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sledujemefilmi.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiceloungechapel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streetcarads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunandshade.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topappetizerrecipes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourdates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trttraining.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultil.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b0dcd9907000004030048304602210090f7343beed2473bc8a7d58c9d4d7377f2dcd9835241bcd2f20cd1b6068ae800022100eaea402642cd49ba2a80d684aea723dc35af1a58cddaacec5b980c74ccfe76f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b0dcd98fb0000040300473045022100991be84035e12da1e6bd6ff6a1f904535d3e0e29615628c724143028f5d59408022002e4038e9e111ecc4d269e94dc4c33099074aa22e54f23844bc23b1100cb5cd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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