abovenbeyond.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3d:69:fd:d5:25:14:54:d6:5e:ef:8b:0f:fd:38:db:e2:fb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abovenbeyond.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:69:fd:d5:25:14:54:d6:5e:ef:8b:0f:fd:38:db:e2:fb
Serial Number (int): 282234969091211591542319005024397253403387
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:1d:c0:e2:1f:58:f3:50:96:b7:44:55:c1:39:c4:98:61:85:f8:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 33:df:59:f6:82:24:51:13:36:4e:ec:62:bf:d0:f0:cb:26:67:b6:12
Fingerprint (sha256): f6:65:09:e1:ff:6f:6f:8d:1f:02:eb:00:de:92:78:30:4a:81:ed:41:e3:f1:96:d7:5f:89:ef:9d:60:ef:65:49

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abovenbeyond.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abovenbeyond.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abovenbeyond.com
*.allureistanbul.com
*.almarzouqi.com
*.badlo.com
*.bancocasa.com
*.buchli.com
*.bunchu.com
*.cartwright.com
*.cozzens.com
*.cybelar.com
*.demire.com
*.domaki.com
*.duxue.com
*.encantar.com
*.global-work.de
*.gpfans.co
*.happi-size.de
*.hpxo.com
*.jagatguru.com
*.jjcpcreditcard.com
*.juanserrano.com
*.kojenerasyon.com
*.kostuemidee.com
*.laesperanza.com
*.leafoster.com
*.lichtenvoorde.com
*.luas.org
*.nawroth.com
*.noseslide.com
*.nosock.com
*.ogbeide.com
*.peng.net
*.pileru.com
*.pogomoves.com
*.pondsolar.com
*.premiumteenpic.com
*.pusar.com
*.qin.net
*.recurso.com
*.risetopower.com
*.sarbar.com
*.shupps.com
*.skinbeautyboca.com
*.sodaco.com
*.stacee.com
*.surgerybra.com
*.ultradox.space
*.undawear.com
*.usiar.com
*.yesfunding.com
abovenbeyond.com
allureistanbul.com
almarzouqi.com
badlo.com
bancocasa.com
buchli.com
bunchu.com
cartwright.com
cozzens.com
cybelar.com
demire.com
domaki.com
duxue.com
encantar.com
global-work.de
gpfans.co
happi-size.de
hpxo.com
jagatguru.com
jjcpcreditcard.com
juanserrano.com
kojenerasyon.com
kostuemidee.com
laesperanza.com
leafoster.com
lichtenvoorde.com
luas.org
nawroth.com
noseslide.com
nosock.com
ogbeide.com
peng.net
pileru.com
pogomoves.com
pondsolar.com
premiumteenpic.com
pusar.com
qin.net
recurso.com
risetopower.com
sarbar.com
shupps.com
skinbeautyboca.com
sodaco.com
stacee.com
surgerybra.com
ultradox.space
undawear.com
usiar.com
yesfunding.com

Other certificates including the domain name abovenbeyond.com

(limited to 100 certificates)
abovenbeyond.com
abovenbeyond.com
abovenbeyond.com
abovenbeyond.com
togdheer.com
fatherbassit.com
abovenbeyond.com
vietface.com
radiointernacional.com
abovenbeyond.com

Certificate

The complete raw certificate details for abovenbeyond.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxhtceJqO6GHstP289pAM
bObtsrVCZrSUHcjaLiW9s3CX1ZIW+STCtOGi5WP5qdUGPvEFsVofMWJDilbcMuOY
5tQ6D9YdkwkxBW0/BXCcNW3AmKfaNZ7bawFKnGmvHPMT1c4cZPmkWtuKIKvn5e0+
XbsTOxMPmLdUDAKcUKo7Yh7pjFRZMPkQ7ecH9aXxgMPDrJqVVHoWhZvfz11Nivxj
Qkh75w/ePObbqVnhYibv/gCTg5rEdAu6l3qryTkDmr9sTDgi6AHuBnMmHC9MVyoI
LC+qOCapI8bLpy7vkEKx52kZCv2e5w9xUcr8ENpm5DtDFem9RIaP209C2jMmQTmL
PqoSu5rJ1KVwQHBt8VY3fuhDiuMhElwpV45c1Tzc/fS76/xfdxoFhT+H/8lScc0i
A3j111od2j2dVlfEVs1C+B6OH0Bh7tFhKg/zjnwZvLSRpE8j39v9Q16374a9hCc1
HO8KQXs1NnSHNdF5LVe/ETpMGVe3krJ2FmVtMhQzhUC2b4VY0fxkffjRCu9a4+T4
0k9ee8C48tK9rugTIGYWIskFS6DG3MXdTjRaS9Os5FeumpjVcNn4N8tc/2up35zf
xwB5JoSKCppdbSHOSLphpUJxu5QcSweCPLTj0HOrcHVWVT2pTatnGcZMxxWevp3h
1E6P5cHOgZ/PnqmG5KYlAjsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282234969091211591542319005024397253403387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 21:38:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 21:38:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abovenbeyond.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808205556794384160392031797088624519206794354186248019611066838206704967952167303408713318005257441456827996715371110948097903869454423489720776325396751838200769708265998043599143848367976090748258888286012113361865166321906120613751863126876924474961495516396515555442821615097900260976673726158678344811344206473806445985080809621009781471545032050801881543504558082854407660045470010851008838734225186466280413759490208797539956470523960340882561914740941046028928996644166627642238294255400658944855983580441811369662529376376012015226678758645277410101426532811612280891233730029245836512091389579206838233057074664126714370703917357039308320911782489559573821567307906003601727959108244117714065621744094992537990758600657232446464549354680373996035131630583092633196040332891805177234351533208716653436555035376083265859087656949496479435551281275820301883557631284667187987670993935739757059586006214270677408365439855366758316590723586038705055352296972160033898331973280702919260557549539764048577856788331477696797446157580130846495168073307059600644347417253964696915870558920912405571106625493900125214921016150178572793425503151018883142595819809421832429202901327970384226089041002523183362133585280697810712653005371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							321dc0e21f58f35096b74455c139c4986185f8fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abovenbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allureistanbul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almarzouqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bancocasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buchli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunchu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartwright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cozzens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cybelar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duxue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.encantar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.global-work.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpfans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happi-size.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jagatguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jjcpcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juanserrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kojenerasyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kostuemidee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laesperanza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leafoster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lichtenvoorde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nawroth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noseslide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nosock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogbeide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peng.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pileru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogomoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pondsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.premiumteenpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pusar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recurso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risetopower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shupps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skinbeautyboca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stacee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surgerybra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultradox.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.undawear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesfunding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abovenbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allureistanbul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almarzouqi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badlo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancocasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buchli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunchu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartwright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cozzens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cybelar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domaki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duxue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encantar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-work.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpfans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happi-size.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpxo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jagatguru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jjcpcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juanserrano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kojenerasyon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kostuemidee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laesperanza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leafoster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichtenvoorde.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nawroth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noseslide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogbeide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peng.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pileru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pogomoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pondsolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiumteenpic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pusar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recurso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risetopower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarbar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shupps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinbeautyboca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodaco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surgerybra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultradox.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'undawear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usiar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesfunding.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189704e1a920000040300473045022100d6973783cea5a4162982802a10782eb5a762510c6379891de98372df66d044b9022027ea49fa9bed24450b5273a7aee281db66e738ad22097101105a2d8e6bbc8c09007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189704e1a4e00000403004730450220294f162cdacfe54ea942a5cdfc5f23a80e065d6974518380d4d21fdaf3e738ce022100ff7fa75a3b27df22a65e54390294ae0986844f993f5b338dc84eccd3f4fe382d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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