lasana.com

Issued by R3

About this certificate

This digital certificate with serial number 04:6d:77:d5:64:1c:dd:31:0d:7c:11:32:a8:2d:88:1b:7e:42 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lasana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:77:d5:64:1c:dd:31:0d:7c:11:32:a8:2d:88:1b:7e:42
Serial Number (int): 385699207842680356414945382260653327875650
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:11:27:89:3e:f5:9c:09:2b:34:87:89:90:79:28:f5:3e:1a:95:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:99:1f:fe:81:4c:64:9a:20:80:a2:93:09:38:56:2c:5d:9e:f9:75
Fingerprint (sha256): e9:44:bd:42:a0:58:18:e9:96:26:aa:8a:c8:f3:07:70:fc:06:5d:91:4c:50:32:80:ce:80:69:0a:68:e3:e4:ac

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lasana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lasana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.activeseniorlivingfl.com
*.ajudandotodos.com
*.anobesecat.com
*.auntie.com.au
*.badens.com
*.bitbump.com
*.bitcoinangola.com
*.bitcoiniran.com
*.bitcoinnigeria.com
*.bitcoinparaguay.com
*.bitpronto.com
*.bittickets.com
*.bolsabitcoin.com
*.brannick.com
*.camera-freaks.com
*.carrucho.com
*.cobinca.com
*.colostrum100.com
*.cungcap.com
*.feeders.com.au
*.gasroenterologie.de
*.gears.com.au
*.hooks.com.au
*.inscape.online
*.kiamba.com
*.lahistoriadelrock.com
*.laptopcase.com.au
*.lasana.com
*.leathercoat.com.au
*.lucyalexandra.uk
*.managingstress.com.au
*.meatgrinders.com.au
*.melonstobe.com
*.mysocialscene.com
*.naples.com.au
*.nmx.au
*.obbligato.com
*.onawa.me
*.realtshirts.com
*.restaurantlelamparoplage.com
*.rogt.com
*.ryeapartments.com.au
*.schokopralinen.de
*.sharadkhare.org
*.twinhouse.me
*.valteau.com
*.wearesacred.org
*.xueshengdang.org
*.yehui.com
*.yujinxiang.com
activeseniorlivingfl.com
ajudandotodos.com
anobesecat.com
auntie.com.au
badens.com
bitbump.com
bitcoinangola.com
bitcoiniran.com
bitcoinnigeria.com
bitcoinparaguay.com
bitpronto.com
bittickets.com
bolsabitcoin.com
brannick.com
camera-freaks.com
carrucho.com
cobinca.com
colostrum100.com
cungcap.com
feeders.com.au
gasroenterologie.de
gears.com.au
hooks.com.au
inscape.online
kiamba.com
lahistoriadelrock.com
laptopcase.com.au
lasana.com
leathercoat.com.au
lucyalexandra.uk
managingstress.com.au
meatgrinders.com.au
melonstobe.com
mysocialscene.com
naples.com.au
nmx.au
obbligato.com
onawa.me
realtshirts.com
restaurantlelamparoplage.com
rogt.com
ryeapartments.com.au
schokopralinen.de
sharadkhare.org
twinhouse.me
valteau.com
wearesacred.org
xueshengdang.org
yehui.com
yujinxiang.com

Other certificates including the domain name lasana.com

(limited to 100 certificates)
rollingpaper.us
lasana.com
4697.com
lasana.com
lasana.com
amazulu.com
www.shetta.com
hambre.net
theplush.com
loal.mn
hambre.net
geigermeatstore.com
basepads.com
geigermeatstore.com
hambre.net
lasana.com

Certificate

The complete raw certificate details for lasana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385699207842680356414945382260653327875650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 14:45:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 14:45:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lasana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 859490805389831609764347747507329562573975642801888339528695626581230937140451849647458108333304710798401660283407285572353856193993935943407498325882324042064595037872649070105442101605329061058469826749246603776892026134408632477153466665001674362513358208573766206168804537512894338365267072652891501630464544099313914224745071491329610880615182820012090077342362251222727983827670337061863383515323910570905172866567850820173483502054788172678425611868727083063051040785100928259311371723653495944396553347152039346446831335022173856569443676540932338239140003872060533608880214183468103852914039110989082476110844573256544250048756001276678353254273006869254513896400906589286661273079370924807947027063519476652739944931907903001166237483799295706551759323495840197270798254673795232942984782595970918576214373176887714569364358975184302525850341643744369370997842178436023938234012983798288135179546832104684852174699680222949771648806305926802036792381026432660198578882259193103719539240386189469585015369558561289869011316962559862576697072300548767929178481669827922958269404477223503485897913793482220066034091930924529302749649968347763968264555710010498499966757658551974214836984910014931037885807535084432711865124199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							401127893ef59c092b348789907928f53e1a954b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1772 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activeseniorlivingfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajudandotodos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anobesecat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auntie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitbump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoiniran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinparaguay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitpronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bittickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bolsabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camera-freaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrucho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cobinca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colostrum100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cungcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feeders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gasroenterologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gears.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inscape.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lahistoriadelrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laptopcase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leathercoat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucyalexandra.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.managingstress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meatgrinders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melonstobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysocialscene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naples.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obbligato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onawa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurantlelamparoplage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryeapartments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schokopralinen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharadkhare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinhouse.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valteau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wearesacred.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xueshengdang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yehui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yujinxiang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activeseniorlivingfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajudandotodos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anobesecat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auntie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitbump.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinangola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoiniran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinnigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinparaguay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitpronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bittickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolsabitcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camera-freaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrucho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobinca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colostrum100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cungcap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gasroenterologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gears.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscape.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiamba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lahistoriadelrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laptopcase.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leathercoat.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucyalexandra.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'managingstress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatgrinders.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melonstobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysocialscene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naples.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmx.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obbligato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onawa.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtshirts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantlelamparoplage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rogt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryeapartments.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schokopralinen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharadkhare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinhouse.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valteau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearesacred.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xueshengdang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yehui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yujinxiang.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa3d1b7c90000040300473045022052e2b846d8ce3162161600a5c3f3532c79837f9cbd8be8ce0cc3b491202f7c82022100cca3e25a033fb5bb6aefa42a490f3f2c92d501498c33634b33bb72c5b92aae2f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aa3d1b7f5000004030047304502210087520900df77d06e1ec0d7ee337c5930b8c8dfcdf7d388717ed76e85b6c077d6022051d8fc988c5f6add1d921677c9583484d8ba93ae743a2208b12e7292070229ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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