samsug.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:27:0e:8b:c6:f7:a0:bf:58:c5:0f:3f:5a:c6:05:95:ae:85 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=samsug.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:27:0e:8b:c6:f7:a0:bf:58:c5:0f:3f:5a:c6:05:95:ae:85
Serial Number (int): 274627205061937871767864681939290283159173
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:96:aa:0b:82:c9:1c:04:ca:f1:82:95:ca:0b:5e:77:9e:eb:0b:8e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:72:e8:77:a7:1b:b3:df:f0:81:4b:96:ab:99:e9:a5:8d:07:7f:b3
Fingerprint (sha256): db:a2:ed:79:23:d7:81:3f:00:c1:23:7b:b8:e5:31:1a:ad:04:af:48:f7:63:07:1c:bd:9b:79:a1:3c:1d:7e:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate samsug.ca

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for samsug.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5uqrf.com
*.achenbachsjewelers.com
*.ajgabryel.com
*.ancestrialfindings.com
*.aprontv.com
*.arnoid.com
*.bangke123.com
*.byzobdidwaojr1zer0kxlzmn2ehm.com
*.carroceriasperimetral.com
*.censiaworkforce.com
*.ecmasters2013.com
*.fastwire.net
*.guns4pennies.com
*.healthysuccessblog.com
*.matunoya.info
*.metintalks.com
*.motability.co
*.mountaincountrysoap.com
*.osegredodasgrandeslojas.com
*.pragyaedu.com
*.pratilipi.co
*.rock-electronics.co.uk
*.rueschenbluse.de
*.rvu.de
*.rxtrahealth.com
*.ryabnair.de
*.ryanaiur.de
*.saiblinge.de
*.salatpflanzen.de
*.samsug.ca
*.sandwiches.be
*.santanedr.de
*.savetxkids.org
*.simnettguitars.co.uk
*.smiling-sun.net
*.sottosopradrink.com
*.sparklechat.net
*.spunkyco.com
*.tabletopsmash.com
*.tecnilak.com
*.texasnscu.org
*.thelegitmateway.com
*.timartinho.com
*.trucktreeguys.com
*.ttowntree.com
*.urlscan365.com
*.vayallevando.com
*.weimarrepublichistory.com
*.with-info.com
*.xwb66.com
5uqrf.com
achenbachsjewelers.com
ajgabryel.com
ancestrialfindings.com
aprontv.com
arnoid.com
bangke123.com
byzobdidwaojr1zer0kxlzmn2ehm.com
carroceriasperimetral.com
censiaworkforce.com
ecmasters2013.com
fastwire.net
guns4pennies.com
healthysuccessblog.com
matunoya.info
metintalks.com
motability.co
mountaincountrysoap.com
osegredodasgrandeslojas.com
pragyaedu.com
pratilipi.co
rock-electronics.co.uk
rueschenbluse.de
rvu.de
rxtrahealth.com
ryabnair.de
ryanaiur.de
saiblinge.de
salatpflanzen.de
samsug.ca
sandwiches.be
santanedr.de
savetxkids.org
simnettguitars.co.uk
smiling-sun.net
sottosopradrink.com
sparklechat.net
spunkyco.com
tabletopsmash.com
tecnilak.com
texasnscu.org
thelegitmateway.com
timartinho.com
trucktreeguys.com
ttowntree.com
urlscan365.com
vayallevando.com
weimarrepublichistory.com
with-info.com
xwb66.com

Other certificates including the domain name samsug.ca

(limited to 100 certificates)
fietsewinkel.nl
gurneys.de
luzdelaesperanza.com
zirkus-meert.at
sanotebook.co.za
collinsdeben.co.uk
luzdelaesperanza.com
lu99.co
gastby.com
porm.es
samsug.ca

Certificate

The complete raw certificate details for samsug.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274627205061937871767864681939290283159173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 09:33:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 09:33:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'samsug.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728705598145889950826679713383696689161414530938349186953976950091027746101013239896249440403422371207421365808319073525459303409867193811234963468969756735048948334995013454215167099026218654923617170213623887993729325774140776324054266621141214714570659915968589728418470708645738855107317826027193494898000632073340638172115178991873920304680442342369020810623779640932960411231365706799585973720137608485037137791944682585619945089449543763288875085294927722740347398783796945073347370807603314565856352351289223268346744173909853462037292421184516630316296485843474843022223627320667144716053997205160632296424758902831430526325545845378950258857561723895189679249162001024366490775453481990122466740423145265975542990717702657169137616771914590716237763598303844441903208122479035752288604463461876487609389589689601992031564549881006915338316965078175267220934110376093661564949554128156386359580139554975700267072314082729159058054341112943948944153864584483209684854726107977501954436141307173727378415600867711934970415428652371221374264245992786817042927791421820718412588746423113908069260765710429603910123707483691730035368377151619974717215131268623615310919505805726639837128296983853188494324275694220013190159744871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e96aa0b82c91c04caf18295ca0b5e779eeb0b8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5uqrf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achenbachsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajgabryel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancestrialfindings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arnoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bangke123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byzobdidwaojr1zer0kxlzmn2ehm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carroceriasperimetral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.censiaworkforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecmasters2013.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastwire.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guns4pennies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthysuccessblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matunoya.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metintalks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motability.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountaincountrysoap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osegredodasgrandeslojas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pragyaedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pratilipi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rock-electronics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rueschenbluse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxtrahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryabnair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryanaiur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saiblinge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salatpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsug.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandwiches.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanedr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savetxkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simnettguitars.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smiling-sun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sottosopradrink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sparklechat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spunkyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabletopsmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnilak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texasnscu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelegitmateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timartinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trucktreeguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttowntree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urlscan365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vayallevando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weimarrepublichistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.with-info.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xwb66.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5uqrf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achenbachsjewelers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajgabryel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancestrialfindings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprontv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arnoid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bangke123.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byzobdidwaojr1zer0kxlzmn2ehm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carroceriasperimetral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'censiaworkforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmasters2013.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastwire.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guns4pennies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthysuccessblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matunoya.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metintalks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motability.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaincountrysoap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osegredodasgrandeslojas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pragyaedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pratilipi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rock-electronics.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rueschenbluse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxtrahealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryabnair.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryanaiur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saiblinge.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salatpflanzen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsug.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandwiches.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santanedr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savetxkids.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simnettguitars.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiling-sun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sottosopradrink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparklechat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spunkyco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletopsmash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnilak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnscu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelegitmateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timartinho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trucktreeguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttowntree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urlscan365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vayallevando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weimarrepublichistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'with-info.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xwb66.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c81a37d5d0000040300473045022100c58f4f39372507db88c0536d017b83d7fa62f08b9e5dd2cb42763deb29b36bc10220490a492785c45a90aeba3f17eae935c176917b25dad73ed84aca999ab7d943ad00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c81a37e2900000403004730450220374509a0b2d34ca4c1793ec02f94a416b6bae00b7803dcc4d0723606657f4a9a022100f4d573531f58f762232e2c44bd47522921d4879d9d09689538d8a6012a78433d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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