doajewelry.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f5:4c:62:15:3a:e8:49:fc:b3:28:d1:48:3a:b6:48:9c:8f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=doajewelry.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f5:4c:62:15:3a:e8:49:fc:b3:28:d1:48:3a:b6:48:9c:8f
Serial Number (int): 431919854226040425224187718647120415726735
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 93:ce:d4:c5:bc:dd:c1:1a:16:cd:ae:c0:34:7d:f0:b9:02:d4:db:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 87:21:8e:02:80:54:3e:07:88:23:64:6e:a5:07:56:48:01:06:7f:5b
Fingerprint (sha256): db:3b:a9:4d:38:cf:c3:88:24:8b:b1:cd:2f:60:23:47:57:33:2c:45:8b:0b:32:72:54:fe:26:d7:75:55:10:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate doajewelry.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for doajewelry.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acceptancenoe.com
*.ambetterhomestatehealth.com
*.appscenter.in
*.atworkamedisys.com
*.awesomecarsllc.com
*.banksecurityreturns.com
*.bathroomrepairtudor.com
*.belletirerebates.com
*.bemis-parts-store.com
*.bitgoldmine.net
*.blindagalore.com
*.buildingwork.net
*.caboodlescosmetics.com
*.cottonseptic.com
*.decimastore.com
*.demandjewellers.com
*.dessertsonthespot.com
*.doajewelry.com
*.dx4s.com
*.earlymomentsbook.com
*.empowermytetirement.com
*.fivesaturdays.com
*.fixlaudry.com
*.getidm.cc
*.gwenvibancos.com
*.healthheal.info
*.irishknits.com
*.masshealthchoice.com
*.masshealthcoices.com
*.merdianfurniture.com
*.meritere.es
*.misyar.net
*.myhealthca.com
*.neweyesglasses.com
*.nmcindia.com
*.ownsneakers.com
*.paramountmc.us
*.piscopio.com
*.pygamagram.com
*.riversidemegroup.com
*.somethingnewvideos.com
*.ticare-west.com
*.timetocareny.org
*.tutorsforacure.com
*.tvshowshubb.com
*.walletinvestors.com
*.watchepisodenow.com
*.wewthertech.com
*.wwwdynacraftwheels.com
*.wwwnpaloan.com
acceptancenoe.com
ambetterhomestatehealth.com
appscenter.in
atworkamedisys.com
awesomecarsllc.com
banksecurityreturns.com
bathroomrepairtudor.com
belletirerebates.com
bemis-parts-store.com
bitgoldmine.net
blindagalore.com
buildingwork.net
caboodlescosmetics.com
cottonseptic.com
decimastore.com
demandjewellers.com
dessertsonthespot.com
doajewelry.com
dx4s.com
earlymomentsbook.com
empowermytetirement.com
fivesaturdays.com
fixlaudry.com
getidm.cc
gwenvibancos.com
healthheal.info
irishknits.com
masshealthchoice.com
masshealthcoices.com
merdianfurniture.com
meritere.es
misyar.net
myhealthca.com
neweyesglasses.com
nmcindia.com
ownsneakers.com
paramountmc.us
piscopio.com
pygamagram.com
riversidemegroup.com
somethingnewvideos.com
ticare-west.com
timetocareny.org
tutorsforacure.com
tvshowshubb.com
walletinvestors.com
watchepisodenow.com
wewthertech.com
wwwdynacraftwheels.com
wwwnpaloan.com

Other certificates including the domain name doajewelry.com

(limited to 100 certificates)
noguarantorbadcreditloans.co.uk
doajewelry.com
doajewelry.com
hardpan-band.com
doajewelry.com
doajewelry.com
doajewelry.com
doajewelry.com

Certificate

The complete raw certificate details for doajewelry.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431919854226040425224187718647120415726735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 22:10:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 22:10:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'doajewelry.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666694947824976292336420052648700851856752103343112068265158567861711779604968072393099866469718483945129630019356237539317091918233265605234509245061963622552336117438012313894022104924775579301722248478529793949870846047238391359143487319236451671701346795044731201823236000654350025645476652560056643729711357544005075106644113656488425608713236852149362872366768103582523861417121038757806884445457969575818535749592236199823966256010307501094468543882947740486593506774193165559446009136282566038013145797372003993609563686738533229082812366379696202919353433192021733821544442415954222210945187030142682505902715816262763400290378386294755162788677708355051797770892742792248030021432711286493565946853903095769982020984577130673270119576077885838810740781123168455054764523168767004843164447838188713196852286025176141358684795886987706055890650830417806509163403313905553384620632821814729181028284499953940407949795806069912759325617470672904688518253695683047760800786941056612800460722407950887532240880533101419514527903719102292096392423177486991713421070604525120800969405219301588479302954647523940106430734245684766721416232450450208001287326855500866510779128409579169725032596115530791517778481960158743374318430647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93ced4c5bcddc11a16cdaec0347df0b902d4db30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1992 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acceptancenoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ambetterhomestatehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appscenter.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atworkamedisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awesomecarsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banksecurityreturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bathroomrepairtudor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.belletirerebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bemis-parts-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitgoldmine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blindagalore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildingwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caboodlescosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cottonseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decimastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demandjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dessertsonthespot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doajewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dx4s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earlymomentsbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empowermytetirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fivesaturdays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fixlaudry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getidm.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwenvibancos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthheal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irishknits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masshealthchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masshealthcoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merdianfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meritere.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.misyar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhealthca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neweyesglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmcindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ownsneakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramountmc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piscopio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pygamagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riversidemegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somethingnewvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticare-west.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timetocareny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tutorsforacure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvshowshubb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walletinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchepisodenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wewthertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdynacraftwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwnpaloan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acceptancenoe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambetterhomestatehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appscenter.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atworkamedisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awesomecarsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banksecurityreturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathroomrepairtudor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belletirerebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemis-parts-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitgoldmine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blindagalore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingwork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caboodlescosmetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cottonseptic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decimastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandjewellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dessertsonthespot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doajewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dx4s.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlymomentsbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowermytetirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fivesaturdays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fixlaudry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getidm.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwenvibancos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthheal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishknits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masshealthchoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masshealthcoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merdianfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meritere.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misyar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neweyesglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmcindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownsneakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramountmc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piscopio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pygamagram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riversidemegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somethingnewvideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticare-west.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timetocareny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutorsforacure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvshowshubb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walletinvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchepisodenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wewthertech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdynacraftwheels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwnpaloan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189e1b73a680000040300483046022100f770f131f10d13a7c69453f2e4a70129d5458181c5cbe595c31c34d78314799e022100b77a7c12cb8f7d242b727405d7251bac25f32b14d027de0b96212b1534f6d891007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189e1b73acc0000040300473045022074f91063f2229d57ecd0d487997cf255bbc961760e9594a63fc346b0418a3042022100e070e42a4480f683ec550166d85ca10d57fbd3de9dfe9047da3a3cbab9879a92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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