gaiasurfhouse.com

Issued by R3

About this certificate

This digital certificate with serial number 03:bf:51:4b:51:b9:61:56:5d:8d:01:0b:64:78:e8:63:15:be was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gaiasurfhouse.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bf:51:4b:51:b9:61:56:5d:8d:01:0b:64:78:e8:63:15:be
Serial Number (int): 326438848424665467175432109896040718734782
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:aa:47:22:e8:0b:db:55:00:d3:af:aa:81:c1:43:ff:cf:64:06:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:8c:bf:ae:5a:96:ed:a3:87:2f:7e:78:35:d5:00:47:dc:9e:40:30
Fingerprint (sha256): dd:9c:a3:d7:08:bf:1c:39:de:47:3f:9d:0b:4d:b7:ed:63:2a:82:a3:80:2e:86:de:32:aa:2e:aa:da:6c:17:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gaiasurfhouse.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gaiasurfhouse.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2travlrs.com
*.644209.com
*.ahmetoglusapbeton.com
*.alwostaplas.com
*.anahuarquehotelcusco.com
*.atlantisinsurrection.com
*.attelage.net
*.axhadh.com
*.bequite.com
*.chaparro.com
*.cocaigi.com
*.dangkytenmien.com
*.deafdevelopers.com
*.derecholegal.com
*.diegogonzalez.co
*.dijanaphoto.com
*.easyhealthyskin.com
*.eromosuikyou.com
*.excellentsupplieslimited.com
*.figarochicago.com
*.finefairbd.com
*.fordwindstarrecall.info
*.freepawpatrolprintables.com
*.freerhymes.com
*.funciona.me
*.gaiasurfhouse.com
*.getfriendfund.com
*.housecleaningsuperior.com
*.houstonhousingauthority.org
*.ia.cn
*.kouwakai.info
*.maldeojo.com
*.mediumwriterblog.com
*.mycampusnotes.com
*.nagesheducationtrust.org
*.perihan.com
*.pisosgranilite.com
*.posicionweb.net
*.roadwayinn.com
*.rocketlawer.com
*.roenskeep.net
*.seriesonlinebr.me
*.sylphds.net
*.takasu-pta.net
*.thefourgives.com
*.thepeoplesmarketperth.com.au
*.toelatingsexamen.org
*.urbanridgehomes.com
*.vastatetaekwondo.com
*.winado.me
2travlrs.com
644209.com
ahmetoglusapbeton.com
alwostaplas.com
anahuarquehotelcusco.com
atlantisinsurrection.com
attelage.net
axhadh.com
bequite.com
chaparro.com
cocaigi.com
dangkytenmien.com
deafdevelopers.com
derecholegal.com
diegogonzalez.co
dijanaphoto.com
easyhealthyskin.com
eromosuikyou.com
excellentsupplieslimited.com
figarochicago.com
finefairbd.com
fordwindstarrecall.info
freepawpatrolprintables.com
freerhymes.com
funciona.me
gaiasurfhouse.com
getfriendfund.com
housecleaningsuperior.com
houstonhousingauthority.org
ia.cn
kouwakai.info
maldeojo.com
mediumwriterblog.com
mycampusnotes.com
nagesheducationtrust.org
perihan.com
pisosgranilite.com
posicionweb.net
roadwayinn.com
rocketlawer.com
roenskeep.net
seriesonlinebr.me
sylphds.net
takasu-pta.net
thefourgives.com
thepeoplesmarketperth.com.au
toelatingsexamen.org
urbanridgehomes.com
vastatetaekwondo.com
winado.me

Other certificates including the domain name gaiasurfhouse.com

(limited to 100 certificates)
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
leliene.eu
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
gaiasurfhouse.com
remoch2022.xyz
wbsex.com
gaiasurfhouse.com
gaiasurfhouse.com

Certificate

The complete raw certificate details for gaiasurfhouse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326438848424665467175432109896040718734782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 15:33:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 15:33:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gaiasurfhouse.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744200352429285355260092492269204164851086723547697730348308569185972111241104011663533570429674038889949313368259301443040276883090780166809420838937275377651857584100921970062276942780844274084718978250961769978288396929192982212824403736058882065922655248450778361322027161895885751002643056959082028086187883980648097725257165486266935331259070466582577159906104134242088334662692947019614506771125153627009467289523310336160662451578496941102033367744700268880183789250107452631380954006621520116440934756364581042759022005701784773507532157071881587920847559182108322393395499675034039145910965951172628031433848394632989921013144887267686829174878833718763239846914031296573103127857785036806792405237317362166072285304920724215460779860010726936547051855268978537377517853273807793174791465319143481536005825279075188725490294373709077719390649448859907767090376671159184726948069890709524559464417745267454402607940593884128592796776889617337096899019960434554135148143754160047728285984215536355342232882942789732551756851476583420336581611459389055515603679395540506873127816499779564503318002479682244790314235289526512395290652277462570026014897087860880287246513338575220407332787974042425904770721121848782653936962919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0daa4722e80bdb5500d3afaa81c143ffcf6406ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2travlrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.644209.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahmetoglusapbeton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alwostaplas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anahuarquehotelcusco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantisinsurrection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attelage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.axhadh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bequite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaparro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocaigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dangkytenmien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deafdevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derecholegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diegogonzalez.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dijanaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easyhealthyskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eromosuikyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excellentsupplieslimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.figarochicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finefairbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fordwindstarrecall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freepawpatrolprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freerhymes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funciona.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaiasurfhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getfriendfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.housecleaningsuperior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houstonhousingauthority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kouwakai.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maldeojo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediumwriterblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycampusnotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nagesheducationtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perihan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pisosgranilite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.posicionweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roadwayinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketlawer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roenskeep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seriesonlinebr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sylphds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.takasu-pta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefourgives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepeoplesmarketperth.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toelatingsexamen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanridgehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vastatetaekwondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winado.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2travlrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '644209.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahmetoglusapbeton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alwostaplas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anahuarquehotelcusco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantisinsurrection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attelage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'axhadh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bequite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaparro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocaigi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dangkytenmien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deafdevelopers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derecholegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegogonzalez.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dijanaphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyhealthyskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eromosuikyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excellentsupplieslimited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figarochicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finefairbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fordwindstarrecall.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freepawpatrolprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freerhymes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funciona.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaiasurfhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getfriendfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housecleaningsuperior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonhousingauthority.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kouwakai.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maldeojo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediumwriterblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycampusnotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagesheducationtrust.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perihan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pisosgranilite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posicionweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadwayinn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketlawer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roenskeep.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seriesonlinebr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylphds.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takasu-pta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefourgives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepeoplesmarketperth.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toelatingsexamen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanridgehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vastatetaekwondo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winado.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d4bc4d39e000004030047304502203262516f30f948a85fdec33c4da8392a8e8f2e2618041e9ee00f33801a4368b8022100aa081c7a88c046eb61eacc4d3ddf51d6d5761c8966307220e4e0960f082ddef9007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d4bc4d396000004030047304502202e6c0c36a744029a17f38c30bb377b05b99918bcb4db325e17a537c43ab35941022100af4b313acd23341baae5db81dfa43ca95a6d4a6616819c57e669a36f92170765
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00299b2990f3ba3c667b819f16578cf9643012a19697030aebaeab87d8d37fe7d316898213acdbfa814868fcb6feb0d7ef4bd5f2052147a45e9944d490f3723ed1f775ebd6a866a2befb97b3214815995f4e2f0f0e95ecfe1a848188853482a99bd0d13987fe240eedfd0543b8ce6d931bcd6adc136fb31c6cde1c029ef568ef93d6ea9451cdc64fc88bd4496159361088aa7352645c57d6e3721a64279f7aaffe36e450f793053a51c774d13c9fb905ee592afa25b347d1700cb53e9455800c920a5c191770e093b084dac6d0b8c9d1cac31cf4bae2d4743cbc73425e611eb005d93e97caf14943abf6f3c56fe468ffb29a610113e333dd08b9c16ce51263c917