curspan.com

Issued by R3

About this certificate

This digital certificate with serial number 03:85:1f:dd:ea:00:f1:f8:bc:54:cc:47:d0:18:02:a1:5f:49 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=curspan.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:1f:dd:ea:00:f1:f8:bc:54:cc:47:d0:18:02:a1:5f:49
Serial Number (int): 306636770907399358014296677592228935327561
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:5a:a7:0f:6c:9c:84:ad:1e:11:1c:86:4b:2e:c6:19:02:aa:c1:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4b:b8:3a:09:bb:0a:ff:1b:25:38:24:1a:a8:c6:af:58:5c:4b:fa:90
Fingerprint (sha256): d9:24:64:4a:30:a7:83:8c:27:b8:67:a8:75:00:ac:e2:5e:ce:c3:2b:bd:9f:87:33:27:7f:29:d8:31:56:2c:2e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate curspan.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curspan.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2resepta.com
*.amitodigital.com
*.animalclinicbenson.com
*.anoticia.online
*.aseanpinay.com
*.autoguns.com
*.auxnsssforyou.com
*.basah.us
*.bollyflix.store
*.bowflexreviewshq.com
*.budgetwebsite.com.au
*.californiastate.com
*.charliedumont.com
*.clswpay.com
*.crispad.com
*.curspan.com
*.elsazonmexicanfood.com
*.flordiasoccercamp.com
*.freshfreshseafoodbaltimore.com
*.glyff.io
*.goodhealth-goodlife.com
*.graphicskreator.com
*.gurkhatandooriliskeard.co.uk
*.healthwealthjoy.com
*.ineb.net
*.inkscribe.com
*.inturism.com
*.invguide.info
*.irezumitattoo.co.uk
*.jacobowong.com
*.kantotflex.com
*.kochupholsteryrockford.com
*.lsbcorp.com
*.macrorolekism-macrocugabern-underafopudom.info
*.myfiext.com
*.mypetshop.com
*.rejuvenation-spa.com
*.rivershoreused.com
*.rotapower.com
*.scottanthonysalon.com
*.shopchiefs.com
*.sportsinfotv.com
*.strettodimessina.com
*.thecitydinerkansascity.com
*.theeorknumber.com
*.tradingcard.com
*.travelchsnnel.com
*.unlandlord.com
*.vidhunt.com
*.welcometoletterville.com
2resepta.com
amitodigital.com
animalclinicbenson.com
anoticia.online
aseanpinay.com
autoguns.com
auxnsssforyou.com
basah.us
bollyflix.store
bowflexreviewshq.com
budgetwebsite.com.au
californiastate.com
charliedumont.com
clswpay.com
crispad.com
curspan.com
elsazonmexicanfood.com
flordiasoccercamp.com
freshfreshseafoodbaltimore.com
glyff.io
goodhealth-goodlife.com
graphicskreator.com
gurkhatandooriliskeard.co.uk
healthwealthjoy.com
ineb.net
inkscribe.com
inturism.com
invguide.info
irezumitattoo.co.uk
jacobowong.com
kantotflex.com
kochupholsteryrockford.com
lsbcorp.com
macrorolekism-macrocugabern-underafopudom.info
myfiext.com
mypetshop.com
rejuvenation-spa.com
rivershoreused.com
rotapower.com
scottanthonysalon.com
shopchiefs.com
sportsinfotv.com
strettodimessina.com
thecitydinerkansascity.com
theeorknumber.com
tradingcard.com
travelchsnnel.com
unlandlord.com
vidhunt.com
welcometoletterville.com

Other certificates including the domain name curspan.com

(limited to 100 certificates)
curspan.com
alliedtrust.com
331668.com
curspan.com
myarmc.org
curspan.com
cheatsroom.com
xhamsterxxx.xyz
*.acufitworld.com
bushexpores.com
produksi.com
curspan.com

Certificate

The complete raw certificate details for curspan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306636770907399358014296677592228935327561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-25 13:20:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 13:20:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curspan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862968471190166405267781034329936402211008797462593462755610670641566261505179976717271036912954761885380805430975054727385151420252249485910910083320886072796560373383764614622805957341747499467305141666128859485796473796252202548565776746026254241952704742881072131879872384791633814891710735757517153118972891432990606552602004204569563003057151654314123742331798959686973802227772225622769022449253300444857033310685286847246753287334819209205100206275252720917164837826876394350944934242820103601054436043470159415620421059446347443392233774218978630388875401124937351335346568866872056490026358445851280536864023685137556084189125613990743375041795020642184676431232112425653732555775308565356067404105760884326642484966594362463340023984672092373132362318326044001087218275155943376837635220055836828333551608281818993869309349574175412125006207887554174422646353555038431931730553803476600058523582126313446783549909021408953009798126941547850413707400768637559984064460530437799811072975111528999911534241884589485118734400581093603605241641555859007193775310166743339424447448249095219476608275296950410631230923610606479080613807381384229855834069411267125401656252474279538572146033627617912132046061392071494844662355831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe5aa70f6c9c84ad1e111c864b2ec61902aac1ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2resepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amitodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animalclinicbenson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anoticia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aseanpinay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autoguns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auxnsssforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basah.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bollyflix.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowflexreviewshq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budgetwebsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charliedumont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clswpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crispad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsazonmexicanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flordiasoccercamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshfreshseafoodbaltimore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glyff.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodhealth-goodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphicskreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurkhatandooriliskeard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthwealthjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ineb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inturism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invguide.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irezumitattoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jacobowong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kantotflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kochupholsteryrockford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lsbcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macrorolekism-macrocugabern-underafopudom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfiext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rejuvenation-spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rivershoreused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotapower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scottanthonysalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopchiefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsinfotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strettodimessina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecitydinerkansascity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theeorknumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradingcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelchsnnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlandlord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidhunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welcometoletterville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2resepta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amitodigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalclinicbenson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anoticia.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aseanpinay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoguns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auxnsssforyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basah.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bollyflix.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowflexreviewshq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budgetwebsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiastate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charliedumont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clswpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crispad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curspan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsazonmexicanfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flordiasoccercamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshfreshseafoodbaltimore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glyff.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodhealth-goodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphicskreator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurkhatandooriliskeard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthwealthjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ineb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkscribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inturism.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invguide.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irezumitattoo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacobowong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kantotflex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kochupholsteryrockford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsbcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macrorolekism-macrocugabern-underafopudom.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfiext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejuvenation-spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivershoreused.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotapower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottanthonysalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopchiefs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsinfotv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strettodimessina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecitydinerkansascity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theeorknumber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradingcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelchsnnel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlandlord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidhunt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcometoletterville.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c06dae7200000040300473045022034e77317f721b419a1663b4dc4e95683928e028c2ca065e2ae9e13954b2b11760221009a9a602a617703c65db1929f02b0f04038f9d2b38045ad601dbc8c2289d46b8800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c06dae7a3000004030048304602210094155eb7b6249f8f1c5f3ae936b296139a65873f2e94197c23798ac61ae03548022100c9e0d77319ee1cd413c448152ea1f445cc9788d10a0b7a8a149a9bd61da895ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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