crisna.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f3:72:8c:2a:db:6f:d3:ff:ba:c6:64:fb:b1:c2:66:09:4e was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crisna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:72:8c:2a:db:6f:d3:ff:ba:c6:64:fb:b1:c2:66:09:4e
Serial Number (int): 344177732739395241917931755473358280853838
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:39:6b:a7:99:95:7f:71:b2:46:73:07:3c:66:48:fc:29:7f:54:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:a9:5f:57:a2:09:93:b6:dd:5e:58:53:d8:97:70:79:9d:bf:05:83
Fingerprint (sha256): eb:b7:ed:12:58:cd:7b:16:0a:9e:be:26:ed:20:f7:31:c7:d7:6f:a6:d0:3c:a9:ce:16:69:93:c9:e6:1e:ee:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crisna.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crisna.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acadiainsurance.cm
*.ahri.xyz
*.astro2day.net
*.b54m4qbmt0b9.com
*.biddho.com
*.bramer.com
*.bundleware.com
*.cenkhoca.net
*.charlottats.com
*.cheapesttee.com
*.crisna.com
*.dazzie.com
*.deltasig.com
*.depkhong.com
*.dontdateherman.com
*.facekora.com
*.faizul.com
*.fakedegrees.co.uk
*.fetayo.com
*.h0og6.top
*.healthmegastore.com.au
*.heuvelmans.com
*.howtowriteanapp.com
*.jizao.com
*.justmattressessanantonio.com
*.lashuba.com
*.leimer.com
*.liburuak.com
*.massoni.com
*.megaterra.com
*.mitchie.com
*.model-hovercraft.com
*.mykhaylo.com
*.ohnet.com
*.pixer.com
*.pokienet43.com
*.poletti.com
*.preteenmodeling.com
*.remobil.com
*.sms-peeper.com
*.songtinh.com
*.sproviero.com
*.sustentable.com
*.sylena.com
*.tbue.com
*.thepokie59net.com
*.tinhangngay.com
*.varlimetal.com
*.werthmann.com
*.xies.net
acadiainsurance.cm
ahri.xyz
astro2day.net
b54m4qbmt0b9.com
biddho.com
bramer.com
bundleware.com
cenkhoca.net
charlottats.com
cheapesttee.com
crisna.com
dazzie.com
deltasig.com
depkhong.com
dontdateherman.com
facekora.com
faizul.com
fakedegrees.co.uk
fetayo.com
h0og6.top
healthmegastore.com.au
heuvelmans.com
howtowriteanapp.com
jizao.com
justmattressessanantonio.com
lashuba.com
leimer.com
liburuak.com
massoni.com
megaterra.com
mitchie.com
model-hovercraft.com
mykhaylo.com
ohnet.com
pixer.com
pokienet43.com
poletti.com
preteenmodeling.com
remobil.com
sms-peeper.com
songtinh.com
sproviero.com
sustentable.com
sylena.com
tbue.com
thepokie59net.com
tinhangngay.com
varlimetal.com
werthmann.com
xies.net

Other certificates including the domain name crisna.com

(limited to 100 certificates)
crisna.com
crisna.com
crisna.com
rinnovamento.com
crisna.com
crisna.com
sangama.com
crisna.com
badessa.com
crisna.com
crisna.com
crisna.com
dasual.com
crisna.com
dejaynes.com

Certificate

The complete raw certificate details for crisna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAySRFriIhaByQygHwKd8b
e4BuMlTe5C67Rw5lGH6IzNlUwHOIEm/pzpbrG+NCXJenZL1yUUdWXoiNhjscdK4w
hDcpEHjeSOPADdNdvF2iyef+SlRtQVBa4BUMQAWL3IrwBISdsA/YGEWbkfyCRHEq
F7srXngqvykrHBbeytXaoUGJjzFgfSCXihiYDCTG7x1w1YTORu2gyQNFpJslJsHQ
mxbCuLN2+RJew7GKWFSFpFto4dJ53J8YAOhdAbHh8jdARPFDICj1TgHe0DhnEzdx
nlDu40JqdpcIA8sfr4JeLp69Tccy55Ziciy556JYBBWGDYus6jfCiLAgpmo8sgDN
n0ILeVoyBLH8pUwu2m03VtwcY8mpI7IOb/gD7rGHwSceWlg7JWplAjuXYkxqdSMT
5h2Pa7H6Y34PMMsQ4PLXpAMdEUDYCJKuEUpAKbDnvI6hF+y01ifRWPekmsAsMzu7
UHh7RAejBLr9KaREy/uWQczqNyqe6zwgZt+jslP+EyY3DzF1jmTEm/tetszEPBkd
sM+u3X2db/v6GpN1yRbvs5tWM0NbV0dAo9Nrldpd7APHSQCFH39yoloPPhrgBj7d
Es1o4YDgQyR68Ldnv8a18DGWUiIozVZsSAJhbLIN3kZp2h3ioYVice8xNA03SFz7
tNb/A/iyDW0CHqlcjVSt3Y0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344177732739395241917931755473358280853838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 09:24:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 09:24:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crisna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820586495241919825267951755563325564015294616736382423745524516887035436632514594053976104988938093170809808618677063330530418015024388577145806362715368002439584619032142150261747940758007941556354555649384962683722232803288748388863275829183771787094042248173371416038730594324183106200965198066219426265428791651605310909814632591843684809608875203314874810771479551234417248767760586036508542102793048118681395236419422950930118876886996583009318500079405917256658675256956156065265972378296876919140358581327166655108115203987816361023052809824221539948838040963681230286576190165466609016155879440035153757256296181722334517852148347106585070042568046702976005654258189098475435903913480135753725099703356618394803196252890907013972871023110217800123305190414931751494464566404865054032663645720506989848961164845599593051053370387338559166016411129954123523492176937394416464447643389414093394749177977093801469592909493679715756913153285710118754827286246666513914967296193667931881099347951758263025473113084678325917880809330833645237111328983936329585127710541307673796017646221572262769566258730994430517918062550248315971025772286181120521652666406777375362778762863221194574110631834119812095186727149796285594989354381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a396ba799957f71b24673073c6648fc297f5419
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acadiainsurance.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahri.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astro2day.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b54m4qbmt0b9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biddho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bramer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bundleware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cenkhoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charlottats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapesttee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crisna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dazzie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deltasig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.depkhong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dontdateherman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facekora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faizul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fakedegrees.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h0og6.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthmegastore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heuvelmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtowriteanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jizao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justmattressessanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lashuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liburuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.massoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitchie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.model-hovercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mykhaylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokienet43.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poletti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preteenmodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sms-peeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.songtinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sproviero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sustentable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sylena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepokie59net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinhangngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.varlimetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.werthmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acadiainsurance.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahri.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astro2day.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b54m4qbmt0b9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biddho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bramer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bundleware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cenkhoca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charlottats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapesttee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dazzie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deltasig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depkhong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dontdateherman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facekora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faizul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fakedegrees.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetayo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h0og6.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthmegastore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heuvelmans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtowriteanapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jizao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justmattressessanantonio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lashuba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leimer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liburuak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'massoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaterra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitchie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'model-hovercraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykhaylo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokienet43.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poletti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preteenmodeling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remobil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-peeper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songtinh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sproviero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustentable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sylena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepokie59net.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinhangngay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varlimetal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werthmann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xies.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001882e63cbbc0000040300473045022100d2c483951d02019f91a89335ff8928a35cc6d4f0d7d1511a2b789a85ebff37bc022073279ce76faa4c9ec3fdd5498117bacd0b2a10515c5de536d87083f706b6110a007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001882e63cbaf000004030046304402206df7e5051f7c88a77e1bef4f31ca30d6d6b8f0caf8f0a3c814d6986776b9ee9a0220522b0938dcf8be4d1d814b2e351ad72eff853f5b43f5055bbd590c38d224186d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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