ultil.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:3e:11:1b:a2:f6:f1:1a:fb:8e:2f:3c:11:4f:0e:e5:85 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ultil.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ac:3e:11:1b:a2:f6:f1:1a:fb:8e:2f:3c:11:4f:0e:e5:85
Serial Number (int): 407060211802764108595252160484671266678149
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fe:e1:53:21:b9:ee:8a:7b:af:a8:d4:56:cc:00:bd:52:71:a2:63:3a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:67:a1:f3:52:e1:d4:9b:fc:28:d5:75:39:01:f8:b4:e3:e0:96:33
Fingerprint (sha256): ee:b2:3f:ed:37:8f:fc:1e:b6:5e:ff:35:28:8f:66:ff:35:34:da:c5:cf:99:f2:5f:ad:7e:36:91:54:e6:67:ee

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ultil.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ultil.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.acidwash.com.au
*.advisormatch.com.au
*.allround-roofing.co.uk
*.americanfrieght.us
*.annieappleseed.org
*.auzoscout24.de
*.caqh.net
*.chestergate-diy.co.uk
*.chrunchyroll.de
*.constitioncenter.org
*.deccu.org
*.denver-electronics.de
*.endelfox.online
*.escalators.au
*.espaceclientcanalplus.fr
*.experin.co.uk
*.healthallience.org
*.hilltopbaptistnewport.net
*.hostinger.org
*.hymal.net
*.japanesebayonets.net
*.jumstart.org
*.keksy.cz
*.livingpai.com
*.mistake.com.au
*.naturalflooring.com.au
*.njcti.org
*.nzm.us
*.oursainsbury.co.uk
*.papercraftplanet.net
*.paternitytests.com.au
*.postings.com.au
*.researchgat.net
*.rychlehojeni.cz
*.schneider-versand.de
*.securitysafeguards.net
*.servicecaranddriver.com
*.sexyladies.org
*.spartanburg6.org
*.stewartconnect.org
*.taxicaborlando.com
*.tecnovales.com
*.toydogrescue.org
*.truckdrivingcourse.com.au
*.tvlicensong.co.uk
*.ultil.com.br
*.washingtonnea.org
*.waterfrontstorage.co.uk
*.windelmom.de
*.xepedia.com
acidwash.com.au
advisormatch.com.au
allround-roofing.co.uk
americanfrieght.us
annieappleseed.org
auzoscout24.de
caqh.net
chestergate-diy.co.uk
chrunchyroll.de
constitioncenter.org
deccu.org
denver-electronics.de
endelfox.online
escalators.au
espaceclientcanalplus.fr
experin.co.uk
healthallience.org
hilltopbaptistnewport.net
hostinger.org
hymal.net
japanesebayonets.net
jumstart.org
keksy.cz
livingpai.com
mistake.com.au
naturalflooring.com.au
njcti.org
nzm.us
oursainsbury.co.uk
papercraftplanet.net
paternitytests.com.au
postings.com.au
researchgat.net
rychlehojeni.cz
schneider-versand.de
securitysafeguards.net
servicecaranddriver.com
sexyladies.org
spartanburg6.org
stewartconnect.org
taxicaborlando.com
tecnovales.com
toydogrescue.org
truckdrivingcourse.com.au
tvlicensong.co.uk
ultil.com.br
washingtonnea.org
waterfrontstorage.co.uk
windelmom.de
xepedia.com

Other certificates including the domain name ultil.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for ultil.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407060211802764108595252160484671266678149
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 05:53:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 05:53:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ultil.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858372213258677779608701126815197746926242753488839392912121369547042250094019000659510702358546645098218725761349951777325584701833122614521831063113061428367525936274801744368678988833748676584790082664990518689981592323773179705780994749459305572870195914314042722132934068841240619382068288128827797242604369738736828866517441528893814346456294134240143790299718278678662653879654815362843910217180638644097512382660309411205360667929372160641902613444401187334252811439972519953171212718208240575600267819050997937000305491637961059774095510969900577198602674918204111474459751242421406805178604368200664362521682699000024167136420996808449846416018229746980342071882512275125425457749764821728170802902965713333183549889385544304666448972121778868850328761457528591538813058609486484449109828795285852747605517523286046737891138674678336385890366557257444953954019995630902968027897727929184828870320281947187288410012966584076016081046829207354133521417239026802477828051322467470713686035621980905891697133732592118748382345645510435972398789467305337487405825969790878118914223876898338904918925310833506314842231524082489490754484405707251326108332887858324943692565968562353374291684150349714156469534779730205407623028009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fee15321b9ee8a7bafa8d456cc00bd5271a2633a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1936 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acidwash.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advisormatch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allround-roofing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanfrieght.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annieappleseed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auzoscout24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caqh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chestergate-diy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chrunchyroll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constitioncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deccu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.denver-electronics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.endelfox.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escalators.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espaceclientcanalplus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthallience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hilltopbaptistnewport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hostinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hymal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.japanesebayonets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jumstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keksy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingpai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalflooring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.njcti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oursainsbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paternitytests.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.postings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.researchgat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rychlehojeni.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schneider-versand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitysafeguards.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicecaranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexyladies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spartanburg6.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stewartconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxicaborlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tecnovales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toydogrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truckdrivingcourse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvlicensong.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.washingtonnea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterfrontstorage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windelmom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xepedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acidwash.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisormatch.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allround-roofing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanfrieght.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annieappleseed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auzoscout24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caqh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chestergate-diy.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrunchyroll.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constitioncenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deccu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denver-electronics.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'endelfox.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalators.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaceclientcanalplus.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthallience.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hilltopbaptistnewport.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostinger.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hymal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japanesebayonets.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumstart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keksy.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingpai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistake.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalflooring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'njcti.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oursainsbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papercraftplanet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paternitytests.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchgat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rychlehojeni.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schneider-versand.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitysafeguards.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicecaranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexyladies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spartanburg6.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxicaborlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnovales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toydogrescue.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truckdrivingcourse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvlicensong.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtonnea.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterfrontstorage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windelmom.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xepedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f6b93ff3a00000403004630440220489a58fe7b36266f38ea05792317088f3126ef08c8773369ae2461c9f580392f022062b9490d11bcbc02cb2dd92bdd9861e1d39932651095fedbceb6314f79a8da260077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6b93ff3900000403004830460221008b7a3127fc69f3ee699a80cfc9b7cebca243931f1421f32cedc5930d304d212d022100a32a92e64e2c6e0d3f6cd0927e9bff66b260a4b79d997365a9b514f7f2cf31fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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