pedrasdecorativas.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:49:52:2d:ae:4c:3e:15:eb:7f:4d:78:d2:f2:f7:44:67 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pedrasdecorativas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:49:52:2d:ae:4c:3e:15:eb:7f:4d:78:d2:f2:f7:44:67
Serial Number (int): 312816955538894874996897037915477050344551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:ca:ca:a4:25:11:08:c9:35:53:9d:67:0e:6e:a8:07:6a:e6:58:7f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fd:de:52:c1:a6:24:19:e8:96:38:cb:b5:d5:41:b5:2e:61:f5:69:a2
Fingerprint (sha256): f4:57:08:47:b1:d2:98:fc:69:9f:bf:da:2e:30:75:72:75:d8:b6:49:2f:d8:4d:fd:51:71:44:09:37:f9:d0:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pedrasdecorativas.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pedrasdecorativas.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1900flowers.com
*.5a5x.cc
*.758yes.com
*.aiatedu.org
*.anaonymousemail.me
*.bernard.es
*.brandles.tv
*.cintastransportadoras.com
*.cjklib.org
*.cryptoassetholder.com
*.djurkovic.com
*.drawingninja.com
*.drechtsteden.com
*.drivingrecordcheck.com
*.dynacity.com
*.easymaterials.com
*.eljugador.com
*.errea.pro
*.freetradeschool.com
*.glrm2021.org
*.goreshto.com
*.holybeans.com
*.informaticaavanzada.com
*.iwebo.me
*.jeevak.com
*.juegosx.com
*.just-right.pro
*.moriya.com
*.motorisation.com
*.music-app.me
*.nooijens.com
*.nootv.tv
*.onlyhigh.com
*.pedrasdecorativas.com
*.politiques.com
*.samup.me
*.serialgharr.me
*.startupca.net
*.tamtay.com
*.tauben.de
*.thekingsway.com
*.tonefire.com
*.tube2017.co
*.tulunademiel.com
*.ultraaustraliamerchandise.com
*.unb.com.au
*.ustvgotv.tv
*.weguild.com
*.xclenergy.com
*.yourtexasenefits.com
1900flowers.com
5a5x.cc
758yes.com
aiatedu.org
anaonymousemail.me
bernard.es
brandles.tv
cintastransportadoras.com
cjklib.org
cryptoassetholder.com
djurkovic.com
drawingninja.com
drechtsteden.com
drivingrecordcheck.com
dynacity.com
easymaterials.com
eljugador.com
errea.pro
freetradeschool.com
glrm2021.org
goreshto.com
holybeans.com
informaticaavanzada.com
iwebo.me
jeevak.com
juegosx.com
just-right.pro
moriya.com
motorisation.com
music-app.me
nooijens.com
nootv.tv
onlyhigh.com
pedrasdecorativas.com
politiques.com
samup.me
serialgharr.me
startupca.net
tamtay.com
tauben.de
thekingsway.com
tonefire.com
tube2017.co
tulunademiel.com
ultraaustraliamerchandise.com
unb.com.au
ustvgotv.tv
weguild.com
xclenergy.com
yourtexasenefits.com

Other certificates including the domain name pedrasdecorativas.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for pedrasdecorativas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312816955538894874996897037915477050344551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 10:49:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 10:49:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pedrasdecorativas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 920361177165031440806320337166974646184338597353537272536408868295858290214597515382613047191249019044513050685811549012662599375834347834731390218304944102806377116549863661416282734134160039160905631582244759356552600701344836985622246481855206275963459004045521800719282486868072744435160195015620624868166335010802069100564062908717407771081203819766865165595688966652942495395893933623345970920876993591266726010430729897806038034710151916146952274152412210743387103419130743803981979038619591370022121360444465803139890773971452244387105102798233990538839494017804377862041913596854167744019800090044606038866188698804281880687630864181670412883703602125803911772443499935049212457135484284045531604799655807634849689517503281432510652271719166397343756357877500184215536445433278954411997909569881696312093141230838110250849088303206505370820690878284070840537738947241849649871449489996436289946230858723942496855431303478430534045336896649758718424672581759334592378518675648918984816160115520522662269594489635370995613292481184850437177185944525171333102828992323643403418686520485372963741226929022048834082931841779705207837115109373897062117310232958797613094981166849671989658773521499945322111711880047536117777957237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40cacaa4251108c935539d670e6ea8076ae6587f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1900flowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5a5x.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.758yes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiatedu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anaonymousemail.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bernard.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandles.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cintastransportadoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cjklib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptoassetholder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djurkovic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drawingninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drechtsteden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivingrecordcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easymaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eljugador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.errea.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freetradeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glrm2021.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goreshto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holybeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.informaticaavanzada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwebo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeevak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juegosx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.just-right.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moriya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.music-app.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nooijens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nootv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlyhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pedrasdecorativas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.politiques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samup.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serialgharr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startupca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamtay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekingsway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tube2017.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tulunademiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultraaustraliamerchandise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ustvgotv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weguild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xclenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourtexasenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1900flowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5a5x.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '758yes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiatedu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaonymousemail.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernard.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandles.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cintastransportadoras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjklib.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoassetholder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djurkovic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drawingninja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drechtsteden.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivingrecordcheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynacity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easymaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eljugador.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'errea.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetradeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glrm2021.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goreshto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holybeans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'informaticaavanzada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwebo.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeevak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juegosx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'just-right.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moriya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music-app.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nooijens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nootv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyhigh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pedrasdecorativas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'politiques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samup.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serialgharr.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startupca.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamtay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauben.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekingsway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonefire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tube2017.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulunademiel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultraaustraliamerchandise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustvgotv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weguild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xclenergy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtexasenefits.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa2f9465600000403004630440220123caefb572401ff6c97875c08685f0e42f1ce8cb72e2a3da06c4e81a7476ba1022067a6c1d00d2dc6ed81050a86a9d20ae3ce24f1c7579c9bbcb5af01f886b4a777007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa2f9470200000403004830460221008fa54112ac59e9d77f3312d37393a23bd41f61c747ad27325a08a0f08ffaf6730221009ccfd89baa1590035a6637ad417f38d7f8cb18915cf561270811f28856a84fa1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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