studija.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3b:11:a4:bf:fb:94:3e:db:f1:a0:b3:aa:84:cf:e3:6a:43 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=studija.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3b:11:a4:bf:fb:94:3e:db:f1:a0:b3:aa:84:cf:e3:6a:43
Serial Number (int): 281436969750101635427840523811350298978883
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:c7:8f:80:b5:26:e9:2b:fb:41:85:60:d4:d8:ef:cc:27:88:2f:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:9d:34:75:d8:55:f4:17:bc:e4:b2:ee:e6:37:9c:a4:84:f4:24:fa
Fingerprint (sha256): f1:e8:d5:82:bd:1e:94:db:c5:c8:43:07:57:2e:1d:8e:28:34:19:34:13:ed:6a:61:1b:57:e4:66:ed:70:87:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate studija.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studija.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.achorusline.com
*.afacial.com
*.aguadevida.com
*.anaquel.com
*.bavand.com
*.bayerdiabetes.co
*.bemviverimoveis.com
*.buerger.com
*.chizai.com
*.conscience-politique.org
*.creditoydeudas.com
*.dawnofnations.com
*.dinaremas.com
*.edbert.com
*.fm5.com
*.gandiva.com
*.hegley.com
*.huntgun.com
*.ilutas.com
*.jivraj.com
*.kingsley.net
*.lumaj.com
*.manualesdetodo.com
*.mystanford.com
*.newcit.com
*.nitetek.com
*.oeje.com
*.orientaldances.com
*.pacificcityproperties.com
*.pantanal.com
*.perderabarriga.com
*.praktyka.com
*.raestate.com
*.riverviewcourt.com
*.sacredfruit.com
*.shamier.com
*.shqiptaret.com
*.shuffletruffle.com
*.studija.com
*.tameika.com
*.thedaddys.com
*.thehideaways.com
*.ticozzi.com
*.unkefer.com
*.usdepartmentofagriculture.com
*.vardhaman.com
*.veselko.com
*.woosang.com
*.wyrok.com
*.xn--nn-3ia.com
achorusline.com
afacial.com
aguadevida.com
anaquel.com
bavand.com
bayerdiabetes.co
bemviverimoveis.com
buerger.com
chizai.com
conscience-politique.org
creditoydeudas.com
dawnofnations.com
dinaremas.com
edbert.com
fm5.com
gandiva.com
hegley.com
huntgun.com
ilutas.com
jivraj.com
kingsley.net
lumaj.com
manualesdetodo.com
mystanford.com
newcit.com
nitetek.com
oeje.com
orientaldances.com
pacificcityproperties.com
pantanal.com
perderabarriga.com
praktyka.com
raestate.com
riverviewcourt.com
sacredfruit.com
shamier.com
shqiptaret.com
shuffletruffle.com
studija.com
tameika.com
thedaddys.com
thehideaways.com
ticozzi.com
unkefer.com
usdepartmentofagriculture.com
vardhaman.com
veselko.com
woosang.com
wyrok.com
xn--nn-3ia.com

Other certificates including the domain name studija.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for studija.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281436969750101635427840523811350298978883
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 18:54:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 18:54:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studija.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910802891413903620052629031794432437792956847837090256430225423561900095538916508080643686343831815693677280851725259428141930524273427417724323419874995332045425241481950689927031276740723366384422823682418724295039540537195745018513037474922715774325821554799171813944450694163682453526049994823704182974406342658785516714009910880516214526319172820209195067061477444945005213401087014694349533469670302211064179810180571561514334429057602776906466770893487085637955424455518589019160132807173332494617512758967849724159845404245590425774325951831821981746033850528809396638734115615621610950658091629746456671268342093059643096301145532115725702028193279161103846301170670138812090771536679201660999336589255120955453235692707664709767350018440682696917344783688914406403789409294596020666440921263444762738202383386349204963121702176193197017907283328594981290730715523043553123552786156389265802956254717731321824049930037532247356982735093387074275930644839955444244673756878391960880919251063181215453804719530834540935471161327329932425333761507938828263845728441971362178822528014935962275885702197668485519410025338364839657450330546589548999580557930181172127716438965011334167952699768821822985865098140985324450986211317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ec78f80b526e92bfb418560d4d8efcc27882fc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.achorusline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aguadevida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anaquel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bavand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayerdiabetes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bemviverimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buerger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chizai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conscience-politique.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.creditoydeudas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dawnofnations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dinaremas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fm5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gandiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hegley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huntgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilutas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jivraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingsley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manualesdetodo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mystanford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newcit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oeje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orientaldances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacificcityproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pantanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perderabarriga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.praktyka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riverviewcourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sacredfruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shamier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shqiptaret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuffletruffle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tameika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedaddys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehideaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticozzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unkefer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usdepartmentofagriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vardhaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veselko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woosang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyrok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--nn-3ia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achorusline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afacial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aguadevida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaquel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bavand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayerdiabetes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemviverimoveis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buerger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chizai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conscience-politique.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditoydeudas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dawnofnations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinaremas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fm5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gandiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hegley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntgun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilutas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jivraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsley.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumaj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manualesdetodo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mystanford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newcit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitetek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oeje.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orientaldances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacificcityproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pantanal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perderabarriga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praktyka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverviewcourt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredfruit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shamier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shqiptaret.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuffletruffle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studija.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tameika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedaddys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehideaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticozzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unkefer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdepartmentofagriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vardhaman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veselko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woosang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyrok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nn-3ia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f4e12f04700000403004630440220371122b5ff802ec4b8cab142f65fa5349318e9f27689c3fa011939404a5894f2022069487a2c8c51dce07f76e389f47de7f0620982abbf0f987d78848e2dfb6bd7a8007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f4e12f1da0000040300483046022100e05f8ec61a3bf312ab352a17f611ae6dd3de8c9f14efb80b065b468d40929f88022100f0eac0b1e49a5591e8392e71f236814f9f3050cb1767857ba1a852a2537d71ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e13a40ec5a72f0170bd60b0f3ea3879e1ea13e5832e4e837dc2fa0f10905b851a6d8679e5e08a747fb703a7a74a6b56ee45558a14b233bdc34735aa47e12be8b8ff6b85e95b22645d55fae3a639bad032f35be4219bc00a481549be021010547f4f91c917c9d6dd54c1b6d82b203c4cb600af94bbe308995eccbfcbb75ce96e9cfc917e2579813789d0166a0dea2fb26b797439b6a2492c574d72eb759a3343a38677413b6fabb93e4b989afee76b46f9d92c09ae3eb5dfc81fc60786aa3ca8225b6362f58edd596ea02d255cb929925d9ac8dc8b328059a790c5e5a16a46f9edb5cee2f3a8be329fcdb3520dab5417e6e6bdfa88a0461fc1907382876741df