bardari.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e9:5d:1c:9f:86:da:9c:80:12:a4:a5:f5:5e:67:5c:de:12 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bardari.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e9:5d:1c:9f:86:da:9c:80:12:a4:a5:f5:5e:67:5c:de:12
Serial Number (int): 427858702043127042411718281563737578855954
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dc:aa:c2:77:79:3f:0c:12:fa:56:da:b0:c7:1d:32:53:be:11:f9:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:95:ad:26:a1:4f:d4:9d:f5:53:72:f0:be:05:c8:06:c8:a1:22:35
Fingerprint (sha256): e8:dc:db:dd:a7:62:9f:50:1c:3b:21:a8:09:aa:07:a9:83:fc:6f:c9:a9:83:36:e0:55:87:6f:a0:b2:5e:24:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bardari.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bardari.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.428.co.in
*.advancedprofitdetectionsystem.com
*.alkexpress.com
*.anualcreditreport.cm
*.asapcart.com
*.bapat.com
*.bardari.com
*.bikeforcerichmond.com.au
*.binchun.com
*.bramalea.com
*.bride.sg
*.buditu.com
*.calise.com
*.caterer.sg
*.childcare.sg
*.crm.sg
*.directivy.com
*.educredito.com
*.ends.com.au
*.escrituraacademica.com
*.facebbk.com
*.firstprivacy.com
*.flowers.sg
*.gebun.com
*.halmahera.com
*.holidayupgrades.com
*.hypnotista.com
*.ijez.com
*.influencer.au
*.jomahsop.com
*.kiemtoan.com
*.laquerida.com
*.library.sg
*.maxillab.com
*.mediamerkt.de
*.mines.net.au
*.multilearn.com
*.musee-du-chocolat.net
*.namereign.top
*.notcanada.com
*.pumado.com
*.reusablefilters.com
*.slipcasting.com
*.stalefish.com
*.steinkjer.com
*.stitchery.com.au
*.stocks.com.sg
*.teacherbook.com.au
*.tfautofinance.com
*.wedcake.com
428.co.in
advancedprofitdetectionsystem.com
alkexpress.com
anualcreditreport.cm
asapcart.com
bapat.com
bardari.com
bikeforcerichmond.com.au
binchun.com
bramalea.com
bride.sg
buditu.com
calise.com
caterer.sg
childcare.sg
crm.sg
directivy.com
educredito.com
ends.com.au
escrituraacademica.com
facebbk.com
firstprivacy.com
flowers.sg
gebun.com
halmahera.com
holidayupgrades.com
hypnotista.com
ijez.com
influencer.au
jomahsop.com
kiemtoan.com
laquerida.com
library.sg
maxillab.com
mediamerkt.de
mines.net.au
multilearn.com
musee-du-chocolat.net
namereign.top
notcanada.com
pumado.com
reusablefilters.com
slipcasting.com
stalefish.com
steinkjer.com
stitchery.com.au
stocks.com.sg
teacherbook.com.au
tfautofinance.com
wedcake.com

Other certificates including the domain name bardari.com

(limited to 100 certificates)
rossevilla.com
bardari.com
zhongfan.com
bardari.com
supmshop.com
bardari.com
zhongfan.com
avtovaz.com
irsgovernment.com
jadeonline.com
bardari.com
bardari.com
jrscigars.com

Certificate

The complete raw certificate details for bardari.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427858702043127042411718281563737578855954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 11:31:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 11:31:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bardari.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711905622874634288984511983066499080509335741858062878516342194311436522972140378252606230498672997499017064578071850187846413963362155692395586251737631084155585926973507274546166457086194758336370542723986806954535919622285184253653090549621232821635815495336177374364889644415600493884241368465259028455548411449230225709949303619097835630485000529288235665738743641283654584320444912164544378195520810416134041011965406053192803862948001170887764933371851417424932767621084192875298810341290386355324547058298886007304525494951001820039976037442307585555590474392047193824846294317502584355328378863138838684278796138367757743887917849251588097174437343323443604028077048590014324325943498545595455913766756026515450125274859232744958470593423515259718819951416034928876457814998276830581945829187895938848235528927583815322461606967098961261605379884255895669441847009493673375638378437161041331756035671065269698256788481088545581303243414440942645606230344758728348971990666228431491019705473622947997108443994833606657430249148896746031128078216234973788942100512792375300319596880838139106552884824103661549305770827343304063936610749381283627162891246213781502794191967383449735857860382493031817987732130518675636442416537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcaac277793f0c12fa56dab0c71d3253be11f9d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1652 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.428.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advancedprofitdetectionsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alkexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anualcreditreport.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asapcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bapat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bardari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bikeforcerichmond.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.binchun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bramalea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bride.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buditu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caterer.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childcare.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crm.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directivy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escrituraacademica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facebbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flowers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gebun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.halmahera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holidayupgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypnotista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.influencer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jomahsop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiemtoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laquerida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.library.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxillab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediamerkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mines.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multilearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musee-du-chocolat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namereign.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pumado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reusablefilters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slipcasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stalefish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steinkjer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stitchery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocks.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teacherbook.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tfautofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wedcake.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '428.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedprofitdetectionsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anualcreditreport.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asapcart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bapat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bardari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bikeforcerichmond.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'binchun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bramalea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bride.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buditu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caterer.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childcare.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directivy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educredito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escrituraacademica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstprivacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowers.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gebun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halmahera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidayupgrades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypnotista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'influencer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jomahsop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiemtoan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laquerida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxillab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediamerkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mines.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multilearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musee-du-chocolat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namereign.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pumado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reusablefilters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slipcasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stalefish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinkjer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stitchery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocks.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherbook.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfautofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wedcake.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d02ce5ea10000040300483046022100e0387b905402564960d5adfe90275da044892f409072cff67fff30fb0f8b65a9022100cb0923aaf698a442db67c7f6fa3b33eb0ac442651fe801328ad4f182c919efb8007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d02ce5ecb0000040300473045022100b81ad480458664dced4d479c7aeb9a85f256e4e10e5bc2fea479df66450a8e9402206ce8547c2545ba3d4838855f3fab218cd628a26d480b7e75322c0e98388f12a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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