40berkeley.com

Issued by R3

About this certificate

This digital certificate with serial number 03:bd:64:09:e4:d1:57:e3:67:02:2e:86:be:aa:a9:ad:be:c7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=40berkeley.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:64:09:e4:d1:57:e3:67:02:2e:86:be:aa:a9:ad:be:c7
Serial Number (int): 325783199314563603641710143351856569368263
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:ce:6e:d5:a6:96:a7:e7:33:7d:61:41:3c:80:a8:3e:d6:73:da:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:d0:fd:73:c9:be:bd:ba:62:3c:f5:75:dc:7b:ab:a3:a2:82:2a:22
Fingerprint (sha256): eb:28:b6:ea:55:97:de:b5:9b:21:05:e8:cd:e6:6b:06:2e:ee:9e:23:a7:74:be:5c:68:89:46:48:da:2f:14:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 40berkeley.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 40berkeley.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.40berkeley.com
*.929542.cc
*.arikytsya.com
*.atlanticemployment.com
*.blueincboston.com
*.bodyrubchicago.com
*.bodyvisionsgym.com
*.cankersorespedia.com
*.datingdeserving.com
*.dittgarn.com
*.dogworks.org
*.doublear.com
*.easatbay.com
*.electronicaregia.com
*.elpasomex.com
*.eltacagaza.com
*.email-scraper.com
*.engki.com
*.epdon.com
*.epson2720.com
*.eri-zu.com
*.explainckcd.com
*.findjaxkwalten.com
*.fitnitymassagegun.com
*.fluidink.com
*.flyingaero.com
*.futebolaovivo.com
*.giftcard-promotions.com
*.greatstamps.com
*.hajodaenh.com
*.hpspocket.com
*.ihdstream.xyz
*.integridadydesarrollo.org
*.internetstreaming.com
*.kamboh.tv
*.larozavideo.tv
*.mediayass.com
*.meentristece.com
*.ministryofspeed.net.au
*.newly.io
*.nickcock.com
*.online-sh24.com
*.oppeol.com
*.shamanic-center.org
*.the-beauty-pages.com
*.thiraipaadal.com
*.tourism.cm
*.tronomy.us
*.uniqdatingplace.com
*.wawaflix.net
40berkeley.com
929542.cc
arikytsya.com
atlanticemployment.com
blueincboston.com
bodyrubchicago.com
bodyvisionsgym.com
cankersorespedia.com
datingdeserving.com
dittgarn.com
dogworks.org
doublear.com
easatbay.com
electronicaregia.com
elpasomex.com
eltacagaza.com
email-scraper.com
engki.com
epdon.com
epson2720.com
eri-zu.com
explainckcd.com
findjaxkwalten.com
fitnitymassagegun.com
fluidink.com
flyingaero.com
futebolaovivo.com
giftcard-promotions.com
greatstamps.com
hajodaenh.com
hpspocket.com
ihdstream.xyz
integridadydesarrollo.org
internetstreaming.com
kamboh.tv
larozavideo.tv
mediayass.com
meentristece.com
ministryofspeed.net.au
newly.io
nickcock.com
online-sh24.com
oppeol.com
shamanic-center.org
the-beauty-pages.com
thiraipaadal.com
tourism.cm
tronomy.us
uniqdatingplace.com
wawaflix.net

Other certificates including the domain name 40berkeley.com

(limited to 100 certificates)
40berkeley.com
remoteam.com.au
ssl7.symphonyhotelmarketing.com
40berkeley.com
ssl7.symphonyhotelmarketing.com
40berkeley.com
ssl7.symphonyhotelmarketing.com
40berkeley.com
ssl7.symphonyhotelmarketing.com
40berkeley.com
40berkeley.com
freedominsidechristyaltomare.me
40berkeley.com
ssl7.symphonyhotelmarketing.com

Certificate

The complete raw certificate details for 40berkeley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325783199314563603641710143351856569368263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 23:15:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 23:15:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '40berkeley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 827194896231279867793336661289813833176900964631850034498625378460290212747135117334218434863609003731634001776104886493868063517284072216089645520138239242923444808901442490249843235494801289487822004631269565294289242325661222272731617126886855964156678045958991568661588971525596140172324433149947117157370800716084667534429988830645373794819448472854505690600198065718631066448171162804209953559305435107956364802990871451452852740220754067633454870748774960591152901796682991059661270731070274897902903281875229931466893582258009404502063948580361341625589505963922886067412137054859267260764892024293478749357780594344500058281269519459046891434832409083181267860026440634888458099346543929178787713941164344992857663748618888941436243596583144096217069425568093540010508237627699110298437465507264828613859427175986573635365043913669498734885715418218787417727766877432165689819722674284045912084751033866836892088872300580656565513729964509522560302503653907031489598070533723914805830452809879405962822937692143208333071699548001224306362291592861431950320795167049637391298807397831695876999254737883782111098665217177013856766896115420591326072750696685284328386148093702041638848023001112791919929485952652414285222092829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ace6ed5a696a7e7337d61413c80a83ed673daed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1800 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.40berkeley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.929542.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arikytsya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlanticemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueincboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodyrubchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodyvisionsgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cankersorespedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datingdeserving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dittgarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doublear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easatbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electronicaregia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpasomex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eltacagaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.email-scraper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epdon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epson2720.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eri-zu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.explainckcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findjaxkwalten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitnitymassagegun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fluidink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingaero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futebolaovivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giftcard-promotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatstamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hajodaenh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpspocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihdstream.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integridadydesarrollo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internetstreaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamboh.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larozavideo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediayass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meentristece.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ministryofspeed.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickcock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online-sh24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oppeol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shamanic-center.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-beauty-pages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thiraipaadal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tourism.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tronomy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uniqdatingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wawaflix.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '40berkeley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '929542.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arikytsya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueincboston.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyrubchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyvisionsgym.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cankersorespedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datingdeserving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dittgarn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogworks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doublear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easatbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electronicaregia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpasomex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eltacagaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-scraper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epdon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epson2720.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eri-zu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explainckcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findjaxkwalten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitnitymassagegun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingaero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futebolaovivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcard-promotions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greatstamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hajodaenh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpspocket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihdstream.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integridadydesarrollo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internetstreaming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamboh.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larozavideo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediayass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meentristece.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ministryofspeed.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newly.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickcock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-sh24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oppeol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamanic-center.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-beauty-pages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thiraipaadal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tourism.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tronomy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniqdatingplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wawaflix.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a3ea55b9600000403004730450221009982e8bc8fbe5a16442ba98925d48507ecf953334399a840b56bae7be4cff450022014b2ccc996fc3e495217e0252466c2653af0fc2a7acd7b8fd9ab37dbf9143d5d007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a3ea55b9a00000403004630440220462a636bad23e80751b94836d82af53f0f679c5681881b3e37ff3fa834aecf13022021863bc9ba0164b9480f6105d93b6513a6f83808fe5eb6cedc44d0e3e176f467
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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