hafizcare.com

Issued by R3

About this certificate

This digital certificate with serial number 03:91:e1:78:aa:31:53:e1:dc:cc:6e:12:c3:cb:cb:ef:4d:ec was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hafizcare.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:e1:78:aa:31:53:e1:dc:cc:6e:12:c3:cb:cb:ef:4d:ec
Serial Number (int): 310977503825409220283579000018244314549740
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:d3:95:99:ee:fe:98:b7:de:fd:68:c9:d4:43:3a:02:8f:45:57:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:35:67:ba:57:a7:68:6e:92:5c:ca:67:f0:cf:b8:ca:6c:dd:ed:62
Fingerprint (sha256): e6:7c:cc:b6:98:e3:9f:a8:f4:a5:ec:e2:b6:ea:be:9f:2e:b7:cd:3a:e4:5a:8f:ab:cf:46:d8:a2:e6:34:29:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hafizcare.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hafizcare.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.0-mail.com
*.ameraicanexpress.com
*.annualreportfree.com
*.ashleyfurniturehome.com
*.attpremiere.com
*.barclaysonlinebanking.com
*.bnymellom.com
*.brisbanetowing.au
*.burgundy.au
*.carbuying.au
*.documenten.com
*.dredge.au
*.drugsandbooze.com
*.eroprofle.com
*.esespn.com
*.fliipcart.shop
*.fotever21.com
*.freeorn.com
*.gaslink.org
*.hafizcare.com
*.hillsviewacademy.org
*.hospices.au
*.humanadentalone.com
*.hurricanesheds.com
*.myfile.co.il
*.nflsuperbowlodds.com
*.nordstrims.com
*.norsstroms.com
*.peer46warriorlike.com
*.phonepe.us
*.potatosalad.au
*.powerblocks.com
*.premierelife.com
*.r4-v.com
*.realyields.com
*.reaperstore.com
*.reardlesof.net
*.redinf.com
*.redsexrocket.com
*.scensty.com
*.scrapyourcarfast.com
*.searscrad.com
*.spartin.com
*.stemcellkorea.org
*.tangledupinblues.com
*.taxbonds.com
*.thentt.com
*.umu.au
*.videogames.au
*.wwwwesterunion.com
0-mail.com
ameraicanexpress.com
annualreportfree.com
ashleyfurniturehome.com
attpremiere.com
barclaysonlinebanking.com
bnymellom.com
brisbanetowing.au
burgundy.au
carbuying.au
documenten.com
dredge.au
drugsandbooze.com
eroprofle.com
esespn.com
fliipcart.shop
fotever21.com
freeorn.com
gaslink.org
hafizcare.com
hillsviewacademy.org
hospices.au
humanadentalone.com
hurricanesheds.com
myfile.co.il
nflsuperbowlodds.com
nordstrims.com
norsstroms.com
peer46warriorlike.com
phonepe.us
potatosalad.au
powerblocks.com
premierelife.com
r4-v.com
realyields.com
reaperstore.com
reardlesof.net
redinf.com
redsexrocket.com
scensty.com
scrapyourcarfast.com
searscrad.com
spartin.com
stemcellkorea.org
tangledupinblues.com
taxbonds.com
thentt.com
umu.au
videogames.au
wwwwesterunion.com

Other certificates including the domain name hafizcare.com

(limited to 100 certificates)
metflife.com
shiot.shop
shiot.shop
hafizcare.com
metflife.com

Certificate

The complete raw certificate details for hafizcare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310977503825409220283579000018244314549740
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 09:17:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 09:17:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hafizcare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932306123537425363717627421823716296130980512058785329107619321217509504084242520819587396790371008478864652871990202279082031931140192221033628934359921828354998722693774839881546025006076771770415372400940782913652323894040069891007995139866211931070306241768919242333913336607006336581375716229278712599013078558481713102561360404721092892194074779660813278213519962361546595313093410574272868093569233157039332078506590273246097056877197912796041817027745506570312533189027783216101833308911638839865869563849977938377799358609904275740272743112054060734318948794045920745873382500870018392979980265825203195897631665417218518645424908527777530983937534706327085590025419949448506662239469890963258244368975206192234632286976002109646371361488836489875377859745189989850489977023502722252112318242779635800626894930043818181325637050995975565075032271043424226658379982061305729575587364991004182325764608609611650042193609902491937765833623879096861987523996870237591916802359038112473581250693524401250728828041481498356688123983165684552682967870148328698517963376161898816268325494547629406536143200931872532116098817280982504411185522770782211783104799947500352941067818215688156965879865574055420121806988108133219592844239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32d39599eefe98b7defd68c9d4433a028f4557c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.0-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameraicanexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annualreportfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashleyfurniturehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.attpremiere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barclaysonlinebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnymellom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisbanetowing.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burgundy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbuying.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.documenten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dredge.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drugsandbooze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eroprofle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esespn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fliipcart.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotever21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaslink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hafizcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hillsviewacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hospices.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.humanadentalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurricanesheds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfile.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nflsuperbowlodds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordstrims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.norsstroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peer46warriorlike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phonepe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.potatosalad.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premierelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r4-v.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realyields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reaperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reardlesof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redinf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redsexrocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scensty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrapyourcarfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searscrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stemcellkorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tangledupinblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxbonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thentt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videogames.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwesterunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameraicanexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreportfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyfurniturehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attpremiere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barclaysonlinebanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnymellom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisbanetowing.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burgundy.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbuying.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documenten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dredge.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugsandbooze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroprofle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esespn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fliipcart.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotever21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeorn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaslink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hafizcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillsviewacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospices.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humanadentalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurricanesheds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfile.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflsuperbowlodds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordstrims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norsstroms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peer46warriorlike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonepe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'potatosalad.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerblocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r4-v.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realyields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reaperstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reardlesof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redinf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsexrocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scensty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrapyourcarfast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searscrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellkorea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tangledupinblues.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxbonds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thentt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videogames.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwesterunion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d5f0634740000040300483046022100c799b3e72a3b2f73a53fd49ecdc2d6debe28ff5db9fd78633ebc9af7a8ccf79202210084bf6c019c288c7235ba8282a2691090a4d9af64e27fc74e83c1ad99863f1a0b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d5f0635f5000004030047304502203eb668507d0d2370280f2db3cd7f89d02f3d908ea2d42437cfdfd5f0b2d2ddc802210083d72b6e6b14ab9d0a5a547dce2a00ccb9a37fc6ff0b1e715223fb46b34735fb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000304e26eb4d7373c47d3f80beafa3eb3cb1e2d16b2280af35bd38d1c476eb57deeb58ef88db9bd6fc42f37e0b4ba9b14aae9c36a34a40381ec01d3db3820fc6d9f7faf4d06df462b27f87af65e9dc9f94f73d736584ed2d81c33e525766c5f9f346a0b518ec017a9f19fb39b2d651f4b7d79797babc3b761c9c258c55331c4cda6e2224e24fdd990d748ac33e737b7a7b7887dacc68c160ef1415b28229b36f8b3cb87382bade9b02726c42d9f67da50dd0487ced51f355410f3d179d558a9ff9d1842378c8311ac9dd2451c720f4e69011ae890cb521900ad1fec469bf7987fce55cfe8eaff4d9893b599661421701fded3ec5c7e61cf368936e08e0ea8ad4a