geointeriors.com

Issued by R11

About this certificate

This digital certificate with serial number 04:bb:ed:e4:ad:f0:0d:aa:f8:8c:57:1b:12:b7:8a:08:51:55 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geointeriors.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:bb:ed:e4:ad:f0:0d:aa:f8:8c:57:1b:12:b7:8a:08:51:55
Serial Number (int): 412398160747817100688139301717575475941717
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 80:13:d4:d7:fd:a4:4b:a2:3c:05:38:08:d7:d2:6f:56:18:3f:58:e2
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): ce:75:07:02:1e:fb:8a:29:70:21:04:7d:1c:1a:fb:4d:01:1b:98:21
Fingerprint (sha256): de:0f:fb:36:78:50:7f:8c:e2:5e:02:2e:77:8a:e8:f2:56:26:16:75:8c:f2:ef:9f:93:53:c8:43:d8:62:fa:3e

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate geointeriors.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geointeriors.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.10000wx.com
*.analfolter.de
*.astonpacificmonarch.com
*.beachliguria.com
*.bozemantango.com
*.clubpenguin.cc
*.cocinandoencasa.com
*.crye-leikerealtors.com
*.darmdurchbruch.de
*.datouandalicia.com
*.draham.com
*.dunkys.com
*.farbsprhsystem.de
*.filmez.eu
*.fussballkuchen.de
*.gave-syndrom.de
*.geointeriors.com
*.hellojunghana.com
*.hpgrowandwin.com
*.hzisa.com
*.iguazubookers.com
*.ikhwan-muslimoon-syria.org
*.insaneyetisquirrel.com
*.jmerchanfotografia.com
*.juicy-fat-ass.com
*.lapulik.com
*.lifeand100books.com
*.maquinasarcade.com
*.memostack.net
*.meyourpa.com
*.payambar-azam.com
*.prikollar.com
*.readvitality.com
*.restaurantsinkuwait.net
*.richrecruiter.com
*.saboresdelhogar.com
*.sauerkraut.com.au
*.smartgames.com.au
*.sociedadfinancierapichincha.com
*.studystiaid.com
*.titrologie.net
*.tramega.com
*.vcainternational.org
*.vidadentalcentral.com
*.virtualpymes.com
*.weekeinde.com
*.wwwaffinitywater.co.uk
*.xn--frhlingsdekoration-n6b.de
*.xn--spermaksse-geb.de
*.xn--u2ua769m.com
10000wx.com
analfolter.de
astonpacificmonarch.com
beachliguria.com
bozemantango.com
clubpenguin.cc
cocinandoencasa.com
crye-leikerealtors.com
darmdurchbruch.de
datouandalicia.com
draham.com
dunkys.com
farbsprhsystem.de
filmez.eu
fussballkuchen.de
gave-syndrom.de
geointeriors.com
hellojunghana.com
hpgrowandwin.com
hzisa.com
iguazubookers.com
ikhwan-muslimoon-syria.org
insaneyetisquirrel.com
jmerchanfotografia.com
juicy-fat-ass.com
lapulik.com
lifeand100books.com
maquinasarcade.com
memostack.net
meyourpa.com
payambar-azam.com
prikollar.com
readvitality.com
restaurantsinkuwait.net
richrecruiter.com
saboresdelhogar.com
sauerkraut.com.au
smartgames.com.au
sociedadfinancierapichincha.com
studystiaid.com
titrologie.net
tramega.com
vcainternational.org
vidadentalcentral.com
virtualpymes.com
weekeinde.com
wwwaffinitywater.co.uk
xn--frhlingsdekoration-n6b.de
xn--spermaksse-geb.de
xn--u2ua769m.com

Other certificates including the domain name geointeriors.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for geointeriors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412398160747817100688139301717575475941717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 22:06:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-09 22:06:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geointeriors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 993517375339760718411908492403474222835808123804679709534604198007061549561967433820132570023134932866531579312095441142701741378048436952664068612351726671319255509242285318376159170504035498857493361694977407400696739398532280590334084094087227133373869909729539303613664702352530776176359127010705971914987707850912786567971665363440345066928720571495849235105796368599986977700315319406527683502999976910146617683229679206360425956358948635893616652934746004881115515829411412480590309800748275433765815121920265149991200674110187758216824422265520597191818656898713038858837780573598230957988915342703465203644338586711397527821982470580723857016745089631868827429627314188329553901408995685060575731131481500138947589927420348301743900840701954493441659362594091832756957695389800972191828009348085799143649888176585368428536144975235784933486399826537863438797472329246841553348620957372554236962562351008879619278043524615178863891870396072908330436467155567950715949495204528135174869871433251329522084385679195731243265097814780916742074777212890732886736709033895545453265409355315097737121391517624753687187169392195009262607435374775672561987591823682240198965397387609738104640790331637536468616779377862695593059305601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8013d4d7fda44ba23c053808d7d26f56183f58e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2004 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.10000wx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.analfolter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astonpacificmonarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beachliguria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bozemantango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubpenguin.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocinandoencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crye-leikerealtors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darmdurchbruch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datouandalicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.draham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dunkys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farbsprhsystem.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmez.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fussballkuchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gave-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geointeriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellojunghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpgrowandwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hzisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iguazubookers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikhwan-muslimoon-syria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insaneyetisquirrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmerchanfotografia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juicy-fat-ass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lapulik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifeand100books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maquinasarcade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memostack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meyourpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payambar-azam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prikollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.readvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurantsinkuwait.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.richrecruiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saboresdelhogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sauerkraut.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartgames.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sociedadfinancierapichincha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studystiaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titrologie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tramega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcainternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidadentalcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualpymes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekeinde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwaffinitywater.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--frhlingsdekoration-n6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--spermaksse-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--u2ua769m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10000wx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analfolter.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astonpacificmonarch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachliguria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bozemantango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubpenguin.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocinandoencasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crye-leikerealtors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darmdurchbruch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datouandalicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'draham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunkys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farbsprhsystem.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmez.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fussballkuchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gave-syndrom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geointeriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellojunghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpgrowandwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hzisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iguazubookers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikhwan-muslimoon-syria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insaneyetisquirrel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmerchanfotografia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juicy-fat-ass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapulik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeand100books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maquinasarcade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memostack.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyourpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payambar-azam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prikollar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantsinkuwait.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richrecruiter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saboresdelhogar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sauerkraut.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartgames.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sociedadfinancierapichincha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studystiaid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titrologie.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tramega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcainternational.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidadentalcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualpymes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekeinde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwaffinitywater.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--frhlingsdekoration-n6b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--spermaksse-geb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--u2ua769m.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e00000190098d67470000040300483046022100840bcd3401ab6aef3f93d736a090ec3247b5984b23e4270a8b1f1b290540b89f02210088112c59be5cd5071b2645071c9e118172dbf394e9e91394c22b3a755d099bf000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000190098d67860000040300473045022100eb0bb1fbb36338f7eb0d7a9e1c361e34d75af0dcbdaa4ea946574d5bb824095a022014d731b7405932c264bd9b9a910669c79fcdb00edb4cfd32ee12b68b5f0ab714
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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