goyaa.io

Issued by R3

About this certificate

This digital certificate with serial number 04:3f:59:6e:83:80:3f:0e:53:58:60:72:83:b8:31:de:ef:53 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=goyaa.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:3f:59:6e:83:80:3f:0e:53:58:60:72:83:b8:31:de:ef:53
Serial Number (int): 370005807954495783882777336873163975225171
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b3:78:cb:c8:a0:10:e4:2a:a1:ad:de:2d:8e:40:2c:6c:98:92:3b:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0f:fa:0f:2b:9e:4e:64:b0:a6:6c:f6:e6:07:7f:54:66:7d:75:21:1a
Fingerprint (sha256): e8:94:7e:bb:f3:ab:62:8b:4c:a5:63:8f:1c:8a:42:2a:e8:d4:12:a0:fe:bd:51:69:f4:c6:3c:78:61:f9:6b:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate goyaa.io

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goyaa.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.24dose.net
*.2kmovies.net
*.adamsmarkhotel.com
*.adventurescuba.com
*.alexandergrahambell.com
*.baret.com
*.bigthundergoldmine.com
*.billpatrianakos.me
*.bowelmovements.com
*.century21dnd.com
*.contesto.me
*.creativewebdesigns.com
*.devanlowe.com
*.frontiertel.com
*.ggarvin.com
*.glcmcrusaders.org
*.goolfstat.com
*.gotanyx.com
*.goyaa.io
*.gracecarrers.com
*.hoshinosora.com
*.hsbcrewards.com
*.hurtom.me
*.informaitauapp.info
*.jmttw.me
*.ltf.com.au
*.luftansaair.com
*.managerock.com
*.mobilnigeria.com
*.mwulqouyyc.com
*.mytrailgroomer.com
*.nerflux.com
*.oleron-caravanes.com
*.olkowiczcvk.com
*.poodleskirt.com
*.royalcaribeancruiseline.com
*.smartdeals360.com
*.stagingdomain864.com
*.stapeseasyrebates.com
*.stillsmokingwi.com
*.studiotex.pro
*.surecutter.com
*.tasteofthecityny.com
*.threewheelbike.com
*.tvkim02.com
*.urdupiont.com
*.webpagecontest.com
*.wiltonprinting.com
*.zubasearch.com
*.zypherhillswater.com
24dose.net
2kmovies.net
adamsmarkhotel.com
adventurescuba.com
alexandergrahambell.com
baret.com
bigthundergoldmine.com
billpatrianakos.me
bowelmovements.com
century21dnd.com
contesto.me
creativewebdesigns.com
devanlowe.com
frontiertel.com
ggarvin.com
glcmcrusaders.org
goolfstat.com
gotanyx.com
goyaa.io
gracecarrers.com
hoshinosora.com
hsbcrewards.com
hurtom.me
informaitauapp.info
jmttw.me
ltf.com.au
luftansaair.com
managerock.com
mobilnigeria.com
mwulqouyyc.com
mytrailgroomer.com
nerflux.com
oleron-caravanes.com
olkowiczcvk.com
poodleskirt.com
royalcaribeancruiseline.com
smartdeals360.com
stagingdomain864.com
stapeseasyrebates.com
stillsmokingwi.com
studiotex.pro
surecutter.com
tasteofthecityny.com
threewheelbike.com
tvkim02.com
urdupiont.com
webpagecontest.com
wiltonprinting.com
zubasearch.com
zypherhillswater.com

Other certificates including the domain name goyaa.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for goyaa.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370005807954495783882777336873163975225171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 17:23:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 17:23:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goyaa.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 704154699389371745698167925883083914569378661399642601389533167988628099599137318052588483120145181385524625068939720967094710444212429583525897105531889840121044089813618679700823845786862944546598241559010129807190058212524662714156273672135584703236828797604843694968077902044340384547669610232943032563864470897953621953410891534524140369741133428841293045411425563758112562633765504571251122683363433943351087406082988943519422352761638512970195983488108837788838092078541182068468211611068769988035631670437192664909067148710475347377890717946026178312832117970480747390930169357547249663359457613649726721047562394731988926916008267471403491185915857173878266928763886048630740759069327735563465471355582788425814228538242891905222731585175707806557455487416522207585716820736618765656180247390915792474039698554716506944548074478685726104505833053109320172353671016130637908985443745190201529434107327653930186914009714062016553770659795495880888850271386581292549287494082776568976171084201119971520695612892937332690261484061029694688411336720427643109311648578114056016189458797525603969068297121866212517149960670589792728205461361316338871808721407477326117654003446411496164236098707041171281215138628749619338924858407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b378cbc8a010e42aa1adde2d8e402c6c98923b1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1858 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24dose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2kmovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billpatrianakos.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contesto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glcmcrusaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goolfstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotanyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goyaa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gracecarrers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoshinosora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hurtom.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informaitauapp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmttw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managerock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mwulqouyyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mytrailgroomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nerflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oleron-caravanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olkowiczcvk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartdeals360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stagingdomain864.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stillsmokingwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studiotex.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surecutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tasteofthecityny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvkim02.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zypherhillswater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24dose.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2kmovies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamsmarkhotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventurescuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexandergrahambell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigthundergoldmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billpatrianakos.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowelmovements.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'century21dnd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contesto.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativewebdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devanlowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiertel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggarvin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glcmcrusaders.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goolfstat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotanyx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goyaa.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gracecarrers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoshinosora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsbcrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hurtom.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informaitauapp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmttw.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luftansaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managerock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwulqouyyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytrailgroomer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nerflux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oleron-caravanes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olkowiczcvk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poodleskirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalcaribeancruiseline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartdeals360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingdomain864.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stapeseasyrebates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stillsmokingwi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studiotex.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surecutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasteofthecityny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threewheelbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvkim02.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urdupiont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpagecontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiltonprinting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zubasearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zypherhillswater.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f87cb2c4400000403004630440220706f3230ea61504b61669f1269843e18d7fe77944b7aba2b0bc1073f61ab21bb022056e45164c5bf1006f18e1d170dc76ee47f775f9019bf901674876be61c1993c0007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f87cb2d05000004030046304402200670eef2e78aeb0ad7ffd3f9cbaa33e7ec3d2b7e17471be41ab6e3b1fefb434a02200e85cdbbda4f5d53154eb3c760ba847c861593b6f0fd2f82039b64168d9569e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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