naiapp.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:ce:8b:b1:8d:3a:5d:72:99:8f:87:76:f0:d7:1d:7d:78 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=naiapp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:ce:8b:b1:8d:3a:5d:72:99:8f:87:76:f0:d7:1d:7d:78
Serial Number (int): 314355170965596964650263584723045200002424
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:b8:02:fc:ee:e2:89:87:e4:9b:76:65:7a:56:aa:d1:a1:eb:5f:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:72:e4:90:d9:b2:61:c3:05:f8:3b:85:a0:5c:71:16:05:bb:82:08
Fingerprint (sha256): ed:f3:92:8e:82:a3:04:25:2d:de:ac:80:6a:95:b7:f6:bf:c4:c6:1b:6c:70:95:b5:68:2f:6a:1a:76:b1:f9:41

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate naiapp.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naiapp.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bellesdemeure.com
*.benchtop.com.au
*.billierazors.com
*.buspooling.com
*.chirichella.com
*.compasspointnc.com
*.craves.io
*.digitalestateagency.com
*.dreamfootspa.com
*.dulet.com
*.eaglercradt.com
*.elected-lowdowntoviewtoday.info
*.elitesocks.com
*.endipr.com
*.faxenclose.buzz
*.forextrades.com.au
*.freshly.com.au
*.fuelpackage.com
*.golfcad.com
*.jjn.co.in
*.kaigaiseikatsu.com
*.kaulins.com
*.lamvan.com
*.mahtway.com
*.marriutt.com
*.milanaccountant.com
*.millnercy.com
*.mountaineeringdesign.com
*.myherbalie.com
*.naiapp.com
*.nursingtestbankstore.com
*.onlinesaving.com.au
*.passionatewharf.top
*.reperatur-initiativen.de
*.rruelala.com
*.shopcozycore.com
*.shoulditakethecredit.com
*.somerstownmedicalcentre.co.uk
*.spec.no
*.straightenitout.com
*.substrack.com
*.sucessfullucks.com
*.tcfbak.com
*.teknoup.co
*.thefamlyapp.com
*.tobydeals.com
*.trading-positionsrechner.de
*.transportjob.com.au
*.wwwjoannfabrics.com
*.yurtseventeknoloji.com
bellesdemeure.com
benchtop.com.au
billierazors.com
buspooling.com
chirichella.com
compasspointnc.com
craves.io
digitalestateagency.com
dreamfootspa.com
dulet.com
eaglercradt.com
elected-lowdowntoviewtoday.info
elitesocks.com
endipr.com
faxenclose.buzz
forextrades.com.au
freshly.com.au
fuelpackage.com
golfcad.com
jjn.co.in
kaigaiseikatsu.com
kaulins.com
lamvan.com
mahtway.com
marriutt.com
milanaccountant.com
millnercy.com
mountaineeringdesign.com
myherbalie.com
naiapp.com
nursingtestbankstore.com
onlinesaving.com.au
passionatewharf.top
reperatur-initiativen.de
rruelala.com
shopcozycore.com
shoulditakethecredit.com
somerstownmedicalcentre.co.uk
spec.no
straightenitout.com
substrack.com
sucessfullucks.com
tcfbak.com
teknoup.co
thefamlyapp.com
tobydeals.com
trading-positionsrechner.de
transportjob.com.au
wwwjoannfabrics.com
yurtseventeknoloji.com

Other certificates including the domain name naiapp.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for naiapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314355170965596964650263584723045200002424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 21:03:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 21:03:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naiapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874586329983439243882152866140132626100817227122235429002588658385245635979752917596586824306876551686365358968397000695233682535441971922781894593178384828803170807867744033941703974207732289836298702176052091079554891403464749718216956835740232567896752295160273777731626934218141741717616289939961513349181693620799516499208223910135305397577989614095660050179158890287020391982985275794568746924640904357675898739890280135764647909177932278235821946404730123185259115388171289286864267497379618138315531135081517462303393181005917798991675250199155216160124914085190006432307191721735745320833408836486097300014480722133149880404887590253401688560299638897372397576274534799591922142222683613297976309752215843482661948979535101034663884545736081156337012763371105268327461355212357257231489624193790740385585064113912395922967124021164153273931839220225414013051347086221099314606680364863412009313898692858597679754696038051478519472710098576120744132058492889145033199037919885024182932257024551845890919734107230474097784918159929293308598002340244054006592180909386518948494332326665886493524926797687159325482552971255844271889523214074859606772166816628341439534781021787961321797249869054170299419500997980659413578883631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cb802fceee28987e49b76657a56aad1a1eb5fbc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellesdemeure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benchtop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billierazors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buspooling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chirichella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compasspointnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craves.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalestateagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamfootspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eaglercradt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elected-lowdowntoviewtoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elitesocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endipr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faxenclose.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forextrades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuelpackage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.golfcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjn.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaigaiseikatsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaulins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahtway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marriutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milanaccountant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millnercy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountaineeringdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myherbalie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naiapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nursingtestbankstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinesaving.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passionatewharf.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reperatur-initiativen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rruelala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopcozycore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoulditakethecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somerstownmedicalcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spec.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.straightenitout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.substrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sucessfullucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcfbak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teknoup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefamlyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tobydeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trading-positionsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transportjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwjoannfabrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yurtseventeknoloji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellesdemeure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benchtop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billierazors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buspooling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chirichella.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compasspointnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craves.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalestateagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamfootspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dulet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eaglercradt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elected-lowdowntoviewtoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elitesocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endipr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faxenclose.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forextrades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuelpackage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfcad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjn.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaigaiseikatsu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaulins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahtway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriutt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milanaccountant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millnercy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaineeringdesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myherbalie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naiapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nursingtestbankstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinesaving.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passionatewharf.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reperatur-initiativen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rruelala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopcozycore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoulditakethecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somerstownmedicalcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spec.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straightenitout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'substrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sucessfullucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcfbak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teknoup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefamlyapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tobydeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trading-positionsrechner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transportjob.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwjoannfabrics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yurtseventeknoloji.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e39d779a4000004030047304502206bdc32ab737ea8dd51a827743a0fa9a72abcd43d8229ebe51224692633fbd22e022100b89c55986d6da238730189b52576a509dc4834f5864ceb2ea20f121908850eee007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e39d779a50000040300473045022100c0e07ec96f4c79e881cfd2fcc56224eeba69988d44cf23d4aac74969df1d1f860220629968e6fa6ad0c69afc5bc0e08ea77a3932821569e14c2341abba177093146f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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