lucita.com

Issued by R3

About this certificate

This digital certificate with serial number 04:51:45:76:b2:94:e1:aa:ac:2c:60:2e:28:5a:74:31:e7:14 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lucita.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:51:45:76:b2:94:e1:aa:ac:2c:60:2e:28:5a:74:31:e7:14
Serial Number (int): 376104348492439986391692687365775803148052
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:ce:46:06:30:25:a0:51:ce:eb:6f:be:59:fe:fe:39:34:8b:39:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 37:3c:79:92:39:8e:bf:d0:de:81:18:09:48:4a:a3:81:c7:bd:f7:5e
Fingerprint (sha256): ef:41:7c:bf:13:ca:56:7a:75:14:ef:2a:0f:ed:cd:fb:f8:46:50:11:99:b1:2b:55:c1:61:32:4d:79:63:44:d3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lucita.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucita.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ajuma.com
*.akepe.com
*.alexmackxxx.co
*.angelhelp.com
*.aplikacije.com
*.asbos.com
*.bunao.com
*.chengyao.com
*.christeen.com
*.compareseguros.com
*.compucuerna.com
*.connett.com
*.crepike.co.uk
*.cristello.com
*.cuentame.com
*.cuentoslossilos.com
*.familybounce.com
*.floresdelalba.com
*.franciscadecarmen.com
*.gamersbarg.com
*.goodrejinterio.com
*.guanjiu.com
*.haded.com
*.hasubhaipendavala.com
*.koulu.com
*.kuzhel.com
*.losunicos.com
*.lucita.com
*.mangoshop.us
*.minimensajes.com
*.mioto.com
*.musallam.com
*.nesportphoto.com
*.pandhi.com
*.piste.net
*.prodigytell.com
*.softcomputers-org.download
*.solismammo.co
*.strahovski.com
*.surfey.com
*.tattoli.com
*.thecouponcard.com
*.threeadvantagesandtwodisadvantagesofusinge-mail.com
*.unquantified.com
*.yasushi.com
*.yeileng.com
*.young-finance.com
*.yourtvseries.com
*.zanutto.com
*.zilma.com
ajuma.com
akepe.com
alexmackxxx.co
angelhelp.com
aplikacije.com
asbos.com
bunao.com
chengyao.com
christeen.com
compareseguros.com
compucuerna.com
connett.com
crepike.co.uk
cristello.com
cuentame.com
cuentoslossilos.com
familybounce.com
floresdelalba.com
franciscadecarmen.com
gamersbarg.com
goodrejinterio.com
guanjiu.com
haded.com
hasubhaipendavala.com
koulu.com
kuzhel.com
losunicos.com
lucita.com
mangoshop.us
minimensajes.com
mioto.com
musallam.com
nesportphoto.com
pandhi.com
piste.net
prodigytell.com
softcomputers-org.download
solismammo.co
strahovski.com
surfey.com
tattoli.com
thecouponcard.com
threeadvantagesandtwodisadvantagesofusinge-mail.com
unquantified.com
yasushi.com
yeileng.com
young-finance.com
yourtvseries.com
zanutto.com
zilma.com

Other certificates including the domain name lucita.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lucita.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376104348492439986391692687365775803148052
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 06:24:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 06:24:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucita.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750842602557470067811632132076658526021055110104753285194219771050092208645049861011252033938710710670308307801104043258125523867827021745786672642495234482080651885152302103037343501188221731573411372820681639312911681650564951157431226117849076708829852790711459919635416503152527543424568437746966790453532401391856513393849376885701723037003948094285334560089169675460229557544174037677272942796459860786071514359548561113634521966023097716392182793771739745018977739609916743721281106369779659577721029171363826425766593483890269630093180066882812596088888826661329842332712936869513849720862221535402099617016145591468636456206617257334691451096758082640038908508467351539572172629361701911114586731661279020204526543526273207984597053896572782146847632874626425757990295635834932852192492913794647700899885786297780830950913994548892195198837495728278308065227108626620403856586441217124899420411792914872301894561742595144893011765606810682234453571321000666269552341051255434605170549510923687586855888820308872845214376941029227893422911140776818556981840997959804737762751996332410203478194308263374146424460029245898222806897037696188817723822684254722998377948955038365494974857112606962340834346768406508258811389226037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1ce46063025a051ceeb6fbe59fefe39348b390a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1712 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexmackxxx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aplikacije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chengyao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compareseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compucuerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.connett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crepike.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cristello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuentame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuentoslossilos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familybounce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floresdelalba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.franciscadecarmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamersbarg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodrejinterio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guanjiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hasubhaipendavala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuzhel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losunicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangoshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minimensajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mioto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musallam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nesportphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prodigytell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.softcomputers-org.download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solismammo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strahovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tattoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecouponcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threeadvantagesandtwodisadvantagesofusinge-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unquantified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yasushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeileng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.young-finance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtvseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zanutto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zilma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexmackxxx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplikacije.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chengyao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compareseguros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compucuerna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connett.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crepike.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuentame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuentoslossilos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familybounce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floresdelalba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franciscadecarmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamersbarg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodrejinterio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guanjiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hasubhaipendavala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuzhel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losunicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangoshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minimensajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mioto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musallam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nesportphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodigytell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softcomputers-org.download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solismammo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strahovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecouponcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threeadvantagesandtwodisadvantagesofusinge-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unquantified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yasushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeileng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'young-finance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtvseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zanutto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zilma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c80f63f440000040300463044022077492c515fa73c836bb38fe7ec19d509a46a4a3bbabb8643e1723e1ded9e1d28022051459f902bb5dd312de070bd6e1fda7efde210056c00391f94e21a46b3d2d07f00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c80f640880000040300463044022023a6e1d12ad403e472f0c429f6ebec4368845fc0d621c9aa5846a122d829ede20220599ada81263305293e41fbbc9ae0c236284a7f8fad0c90f3e4c8ed1476d40dd0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000647ef13e27f428844a648cace794284acac9d2ca4b56feb0209e3bc818bfa9445edf6b3bc02bec5360fd48b3a93e2b933fe0d03607f265e69c5304eb2c92c6763924ed4f5833cf79bffb229a1134a2d379c315930d37578b6f07a03c0c2c3f7298b5fc33f802feebb3bd8e3becbca88f5b707de4eaf6bf53101f68415decf3509e68d8ef1705a13a8559d3ca2071bb0680f8ab4746252b3eb78b79cc8737b4d254e35ee4f4e29f5372b63d91d8a9c47bfc52426db3f64a453824cac735d0ea0f0b21a1e8d1c9ffe1e7ed5c2012bf6b800f131f462b95a094e7a879e37e9ba3b74218faa83db858dee58c977241b6fcf1b2bbac79b26e9eeb706e558153b3bee