knutzen.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:43:79:86:58:a6:c3:63:16:9c:f7:37:a3:07:6b:f3:96 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=knutzen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:43:79:86:58:a6:c3:63:16:9c:f7:37:a3:07:6b:f3:96
Serial Number (int): 312809184468846495911144558888029520655254
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:66:c8:a8:1b:6e:ec:06:55:a3:5e:3b:78:db:bf:ac:60:28:0a:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:2a:cb:d0:1b:27:0a:3d:10:f6:68:5c:c8:c2:76:f0:2c:f6:84:ab
Fingerprint (sha256): e1:0b:c6:0c:5b:42:49:f9:58:2b:fd:3c:f3:66:8c:da:7f:17:fc:7a:09:01:cb:ba:ce:ac:80:10:1b:87:7a:fa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate knutzen.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knutzen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aljohraa.com
*.bellsblinds.com
*.bikeboy.co
*.blain-rp.com
*.blinddates.com.au
*.bluedotmovies.com
*.brahmapur.org
*.campusyformacion.co
*.car26joy.fun
*.chantrellcreekestates.com
*.cryptomanagementcapital.com
*.csteven.io
*.earthlingsplaytime.com
*.eier.nl
*.eversofond.com
*.facemagz.asia
*.feliznatalmondial.com
*.flameera.com
*.getrentoown.com
*.goddessmeme.com
*.gregoriobeads.com
*.gustavoquiroslicona.com
*.intelenyx.com
*.knutzen.com
*.lac2u.com
*.lcdkorea.net
*.lincolnfinancil.com
*.liquidcheese.com
*.makemoney.one
*.matrixfillmore.com
*.mbaijx.com
*.meanybook.net
*.mhcheng.com
*.mtualofomaha.com
*.mynicegram.net
*.naijarhymes.com
*.nandemoya.asia
*.netthediyhub.com
*.ontopmart.com
*.rainbowisland.co
*.refrainbow.co
*.rvevvy.co
*.schuelerfragen.de
*.sub2m.co
*.thacom.co
*.www-kukoin-com.com
*.xbmc4stb.net
*.xn--chi-joa.de
*.xn--nietenarmbnder-fib.de
*.younglivng.org
aljohraa.com
bellsblinds.com
bikeboy.co
blain-rp.com
blinddates.com.au
bluedotmovies.com
brahmapur.org
campusyformacion.co
car26joy.fun
chantrellcreekestates.com
cryptomanagementcapital.com
csteven.io
earthlingsplaytime.com
eier.nl
eversofond.com
facemagz.asia
feliznatalmondial.com
flameera.com
getrentoown.com
goddessmeme.com
gregoriobeads.com
gustavoquiroslicona.com
intelenyx.com
knutzen.com
lac2u.com
lcdkorea.net
lincolnfinancil.com
liquidcheese.com
makemoney.one
matrixfillmore.com
mbaijx.com
meanybook.net
mhcheng.com
mtualofomaha.com
mynicegram.net
naijarhymes.com
nandemoya.asia
netthediyhub.com
ontopmart.com
rainbowisland.co
refrainbow.co
rvevvy.co
schuelerfragen.de
sub2m.co
thacom.co
www-kukoin-com.com
xbmc4stb.net
xn--chi-joa.de
xn--nietenarmbnder-fib.de
younglivng.org

Other certificates including the domain name knutzen.com

(limited to 100 certificates)
www.yogafacial.com
swcarpet.com
catalise.com
crightlist.com
cienciassemfronteiras.com.br
carmencitas.com
knutzen.com

Certificate

The complete raw certificate details for knutzen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312809184468846495911144558888029520655254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-10 23:56:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 23:56:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knutzen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780742634347145084887911710140435964873037457355127960687099921208418548249341367973969830108563878875214424027606862565794000456266899250597709259510494403598174392544953337737610707642583068528140925956618633871687255426371109968294773383451086908013145167040501191371327259309773382273581621383624284152446952110095088818380108297664551250299247539582331819518777290975538338121223972502514388185236065963568996158342005748890453532619453187557008163539914916958074661256222771058580786468037714564595579335343838207582898929918573833335931717702075452028262060168301825151531367342821518681214038007734561011575808941183859635042039292006152676911489015729270594190270261229730334152349294839628090201935454320847827379944794198020691097613173638866745949493427238909399712330547033991018360395057737086536071114747339512207175232633065546852694979994327077351272422916740052322387643896163395652060820537947326404900185150957132188265136240475550019219926248889688325704307533836497149772952783172357824712757802025095052285945476439078592128454586175278142680568272305246936108202584190699774605820420012750763748882924028574399239210438480765861004464933398996022941931558087370114811062068221856804096594711086175464081836009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f966c8a81b6eec0655a35e3b78dbbfac60280a60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aljohraa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellsblinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikeboy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blain-rp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blinddates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluedotmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brahmapur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campusyformacion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.car26joy.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chantrellcreekestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptomanagementcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csteven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthlingsplaytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eier.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eversofond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facemagz.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feliznatalmondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flameera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getrentoown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goddessmeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gregoriobeads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gustavoquiroslicona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelenyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knutzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lac2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcdkorea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lincolnfinancil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liquidcheese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makemoney.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrixfillmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mbaijx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meanybook.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mhcheng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtualofomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mynicegram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naijarhymes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nandemoya.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netthediyhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontopmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rainbowisland.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refrainbow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvevvy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schuelerfragen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sub2m.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thacom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-kukoin-com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xbmc4stb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--chi-joa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nietenarmbnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.younglivng.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aljohraa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellsblinds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeboy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blain-rp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blinddates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluedotmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brahmapur.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusyformacion.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car26joy.fun'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chantrellcreekestates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptomanagementcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csteven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthlingsplaytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eier.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eversofond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facemagz.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feliznatalmondial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flameera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getrentoown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goddessmeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregoriobeads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gustavoquiroslicona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelenyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knutzen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lac2u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcdkorea.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnfinancil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liquidcheese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makemoney.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrixfillmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbaijx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meanybook.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhcheng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtualofomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynicegram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naijarhymes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nandemoya.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netthediyhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontopmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rainbowisland.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refrainbow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvevvy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schuelerfragen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub2m.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thacom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-kukoin-com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbmc4stb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--chi-joa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nietenarmbnder-fib.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'younglivng.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f6000001828a67870e000004030046304402204be46151e3857e10947d7cec80f691b50182144c2e0fc483933b2449f107254c022049a8ec86f57ae602c5705a0e4946a451a1dfc058fdfb6a7d9c5b8e11662d395c0076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001828a6787660000040300473045022100c7c5c407c6ce8cd313c6d680768856be7e99d8d20c66fa6a6ac20637a40a202002201fb5eb3bb5e232fe81e6286aa8723d9fe742a33f8669c2171876b5ea7943c559
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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