giotnuoc.com

Issued by R3

About this certificate

This digital certificate with serial number 04:02:6f:28:45:e3:01:91:2c:d6:b6:ce:37:a6:c8:a3:64:5f was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=giotnuoc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:6f:28:45:e3:01:91:2c:d6:b6:ce:37:a6:c8:a3:64:5f
Serial Number (int): 349277461877760871102121641386120153621599
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9f:1c:db:5f:84:53:a6:e9:67:8c:7e:51:36:47:65:3a:83:64:99:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:7e:b1:fe:a4:e4:1c:78:91:ba:f1:3b:7e:4d:3c:d1:4e:74:48:e2
Fingerprint (sha256): e2:06:1c:6b:1d:f2:5c:7d:ef:85:77:77:eb:16:86:a2:77:5f:34:09:42:2b:5a:c4:fa:7e:bd:c0:b5:64:14:e3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate giotnuoc.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giotnuoc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.akamaipestsolution.com
*.alemu.com
*.ampong.com
*.anado.com
*.anandkumar.com
*.annapoorani.com
*.aprenderchino.com
*.arejonandlizmarriedyet.info
*.arkco.com
*.blendred.com
*.burquest.com
*.cemiteriomemorial.com
*.christefer.me
*.comedores.com
*.crpuzzles.com
*.diegel.com
*.eletrohouse.com
*.eralivingcare.com
*.fietsroutes.net
*.fiyatlari.com
*.fokken.com
*.giotnuoc.com
*.godescarga.com
*.gulver.com
*.harib.com
*.hironaga.com
*.kabaren.com
*.karamelka.com
*.ketzwellness.com
*.kexian.com
*.ladyboypeck.me
*.mismaterias.com
*.moon-page.com
*.okhotsk-chocolatier.com
*.partyinheaven.com
*.pixelect.com
*.portugalparabrasileiros.com
*.prepaidreload.com
*.quitartatuajes.com
*.removalcosts.com
*.rte23.org
*.tamou.com
*.thementallyill.com
*.topaztan.com
*.twinstarcompany.com
*.westsideoptometry.com
*.www-philips.com
*.wyles.com
*.yesica.com
akamaipestsolution.com
alemu.com
ampong.com
anado.com
anandkumar.com
annapoorani.com
aprenderchino.com
arejonandlizmarriedyet.info
arkco.com
blendred.com
burquest.com
cemiteriomemorial.com
christefer.me
comedores.com
crpuzzles.com
diegel.com
eletrohouse.com
eralivingcare.com
fietsroutes.net
fiyatlari.com
fokken.com
giotnuoc.com
godescarga.com
gulver.com
harib.com
hironaga.com
kabaren.com
karamelka.com
ketzwellness.com
kexian.com
ladyboypeck.me
mismaterias.com
moon-page.com
okhotsk-chocolatier.com
partyinheaven.com
pixelect.com
portugalparabrasileiros.com
prepaidreload.com
quitartatuajes.com
removalcosts.com
rte23.org
tamou.com
thementallyill.com
topaztan.com
twinstarcompany.com
westsideoptometry.com
www-philips.com
wyles.com
yesica.com

Other certificates including the domain name giotnuoc.com

(limited to 100 certificates)
giotnuoc.com
giotnuoc.com
propetysex.com
giotnuoc.com
keshishyan.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
tefillah.com
giotnuoc.com

Certificate

The complete raw certificate details for giotnuoc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349277461877760871102121641386120153621599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 21:04:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 21:04:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giotnuoc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757290710634827676118517026749632936797639382139440252437237520329765809952912399199794206852096727283728981944171801128735085845389746882888580024671431704491727071560017689883850742494316263661530759377599099551500873574793048131583460852823872848697454908261493533284310473038844165462121888764979248835664982920630482726378091776851998706634217210539636972647493823906316430012432607313134451343894101881255604958750872546524951513261065033225469766746330702609705612010572476001656638352876471821484036719474932319408806310267267692861840014915626779899864218941860300297410898892072266536079290404795749135609110253761232576848613871228276114870647501966094046594864104402405855554853976447952717825541746195560210936744250130248057549216373550677967896264467168430130891800219387581719966523179983597139554738988077601448840977680333678977284955688732849499828154853382000626795267624825726713227096505619630092706123765975058484516978813715021679420572652700397805383886278742981955244138528654677577154374857392288879901680034341763700770573907392247708953756637601128575881640434073886058493650071816670604746560452206960268221602658112929907969979865907922294171981419279766123035856056102995341606495062992458248638300713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f1cdb5f8453a6e9678c7e513647653a83649992
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1692 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akamaipestsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anandkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annapoorani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprenderchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christefer.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comedores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eletrohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eralivingcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiyatlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fokken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karamelka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ladyboypeck.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mismaterias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thementallyill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topaztan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinstarcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westsideoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaipestsolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alemu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anandkumar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annapoorani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprenderchino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burquest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christefer.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comedores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eletrohouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eralivingcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fietsroutes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiyatlari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fokken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gulver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kabaren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karamelka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladyboypeck.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mismaterias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyinheaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removalcosts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thementallyill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topaztan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinstarcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westsideoptometry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-philips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bda29b05600000403004630440220621b0e777feb3ddfd5c04ca389bfdfcc711b6c99e4b40f439df2e9e6c4310a0602203ab48472ba3567ed72b61bbe8189c5a0b9352673525eb5048b7f69a5d53dfc290076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bda29b0540000040300473045022100a6dcdeb7e7b2baf6aa25590f36ab3b2ee733da45c284b2f0fa198d71d705c0030220510a290557798c46abd68842e6a784c6353eceec01acfa930997f0bd606dfd55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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