marina77.us

Issued by R3

About this certificate

This digital certificate with serial number 04:46:16:e1:ef:d6:2b:33:7a:26:d7:73:9f:78:de:cf:be:59 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=marina77.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:16:e1:ef:d6:2b:33:7a:26:d7:73:9f:78:de:cf:be:59
Serial Number (int): 372299325558671209652638253512388842077785
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:c8:bc:a4:4b:c5:72:c2:3b:e9:24:fc:0c:73:05:59:8d:62:53:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:30:e0:45:82:98:c9:b7:c2:c6:bd:1a:c3:66:d0:66:7c:27:4b:20
Fingerprint (sha256): f9:b5:ef:36:24:bc:0a:27:1c:80:6b:dc:d3:a3:a1:36:30:22:26:84:cf:a0:09:d9:05:6b:a2:b8:3a:4c:01:f7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate marina77.us

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marina77.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.america-ukraine.us
*.barbiedolls4sale.net
*.blockislandbluefashions.com
*.casualnchic.com
*.choice-announcementtoidentifytoday.info
*.consultoresfinancierospa.com
*.decathlonbicicletas.co
*.figuring.us
*.gazetachicago.com
*.greenfarmtoys.com
*.infosehat.us
*.loithitham.net
*.marina77.us
*.midwestsidingonline.com
*.ouzhuo.us
*.pagesdairymart.net
*.phocon2017.com
*.phoenixrestaurant.us
*.portholecafe.net
*.privileged-statementtostudytoday.info
*.pyplimitada.net
*.pzearn.us
*.qualityheadlinetolook-today.info
*.radient.me
*.rapaprika.net
*.rsc-teacher-fellows.net
*.shegotasslive.info
*.smkn5mauk.net
*.special-announcementtogathertoday.info
*.stilwerk10.com
*.suitstv.net
*.thehardinggrp.com
*.thesochle.com
*.thezonegroups.com
*.tigerseablue.net
*.tipobet0842.com
*.tomcannavo.org
*.transtekonline.com
*.truemenconsultants.com
*.twigawallet.com
*.vjcproductions.com
*.vw-lifestyle.com
*.walaka.net
*.weisstore.com
*.wherecanibuystamps.us
*.windowcleaninglancasterpa.com
*.workfromhomezone.us
*.yatong11.info
*.yuji1688.com
*.zaskeandassociates.com
america-ukraine.us
barbiedolls4sale.net
blockislandbluefashions.com
casualnchic.com
choice-announcementtoidentifytoday.info
consultoresfinancierospa.com
decathlonbicicletas.co
figuring.us
gazetachicago.com
greenfarmtoys.com
infosehat.us
loithitham.net
marina77.us
midwestsidingonline.com
ouzhuo.us
pagesdairymart.net
phocon2017.com
phoenixrestaurant.us
portholecafe.net
privileged-statementtostudytoday.info
pyplimitada.net
pzearn.us
qualityheadlinetolook-today.info
radient.me
rapaprika.net
rsc-teacher-fellows.net
shegotasslive.info
smkn5mauk.net
special-announcementtogathertoday.info
stilwerk10.com
suitstv.net
thehardinggrp.com
thesochle.com
thezonegroups.com
tigerseablue.net
tipobet0842.com
tomcannavo.org
transtekonline.com
truemenconsultants.com
twigawallet.com
vjcproductions.com
vw-lifestyle.com
walaka.net
weisstore.com
wherecanibuystamps.us
windowcleaninglancasterpa.com
workfromhomezone.us
yatong11.info
yuji1688.com
zaskeandassociates.com

Other certificates including the domain name marina77.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for marina77.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372299325558671209652638253512388842077785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 09:57:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 09:57:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marina77.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 748119968260425595093094904634834253187970751494793657748618736464441355915291102991034039297557483415159074427474193240227684998333710245161263687836746135560697056217780956793696377286141046278491133330262589399285658850610225512693150610025423323453520070784717406230162713692951660246894544541240303138619896720367969770948666289935633280170828111944759577463363359404406742213272629441363875357329089113496643717285191723645079016217618889858126506952167520431475294341792162486424384798530277770604377513147739582492327100998686771584884769800620972718377463786354204814795934117673262427201338134010247948175464239486837100044782526478649737313729183970675613641905791805209310699180138718442846558974452161086082909184518745345628101187057445631025393874700849274384402939250935551530798342691710898151539967144674971727259845943411545472641991440136302148432985496499855024414270306570268229365213359205574244840276833246502229900371592419933229922935973105050701716473575650046184076579100230545797352231512572131352560980187473812331549336417065728723006491079531966444398605765458053176687935710162328200252708240752373794741410130021405876029264437255013322348431650820140420004319578077271045798135642196938718710014017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8dc8bca44bc572c23be924fc0c7305598d625363
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.america-ukraine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbiedolls4sale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockislandbluefashions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casualnchic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choice-announcementtoidentifytoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consultoresfinancierospa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decathlonbicicletas.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.figuring.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gazetachicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenfarmtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infosehat.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loithitham.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marina77.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwestsidingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ouzhuo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pagesdairymart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phocon2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phoenixrestaurant.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portholecafe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privileged-statementtostudytoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pyplimitada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pzearn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityheadlinetolook-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radient.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapaprika.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rsc-teacher-fellows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shegotasslive.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smkn5mauk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.special-announcementtogathertoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stilwerk10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehardinggrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesochle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thezonegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigerseablue.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tipobet0842.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tomcannavo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.transtekonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truemenconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twigawallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vjcproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vw-lifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walaka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weisstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wherecanibuystamps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windowcleaninglancasterpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workfromhomezone.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yatong11.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yuji1688.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaskeandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'america-ukraine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbiedolls4sale.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockislandbluefashions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualnchic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choice-announcementtoidentifytoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultoresfinancierospa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decathlonbicicletas.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'figuring.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazetachicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenfarmtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosehat.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loithitham.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marina77.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwestsidingonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouzhuo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagesdairymart.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phocon2017.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixrestaurant.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portholecafe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privileged-statementtostudytoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pyplimitada.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pzearn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityheadlinetolook-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radient.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapaprika.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsc-teacher-fellows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shegotasslive.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smkn5mauk.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'special-announcementtogathertoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stilwerk10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitstv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehardinggrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesochle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thezonegroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerseablue.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tipobet0842.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tomcannavo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transtekonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truemenconsultants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twigawallet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vjcproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw-lifestyle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walaka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weisstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wherecanibuystamps.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowcleaninglancasterpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workfromhomezone.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yatong11.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuji1688.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaskeandassociates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e4c0f74ec0000040300473045022100d4bc2dfd23f241c83973a3c2d043ea3897389360957182bda57e2e25da3ae52802200bcb060290e1c0dbd986f2be77ce06dcadae5539677c20a4248bf089149d5d2300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4c0f74ae0000040300473045022016982af093d590e5a9e6d62c93640a6b4c7e9775c5be00a70a0a5cb022d71b5c022100dd80faac2f20115ab27312c40879f53a92a7c2c030380425d649d53cebedb3c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00129953a6d4e7a10c76dacf81d3c98a99a090464d6282e51c997b05aa26efa444ed86ed7771d3de010d7e6f311f9c17a6cc46b092149169275c0facf3d3a0cb51c1a7bfb491aab62f67b9733c84274d0e68c86e2caa326df9afc82bb9c56a20aa20b2afb95c763c6759385a50c7c1d369860eead92cdae083141ab1ff051d3ce442b53a368a5d11554daeb8130b28eeab6c806fbe411d2fde0a2b22afa925396572765ea23d31fc39682e799e9f68832ee6676124acd98a4d4020f6c388c70e82a5b7664af6bcd28927e93126a73c1c61b65efb2e67d043b19f9b8258a4c7bd0577d5a7cde7491660c09dcfdf3a4df115f754649753e2c0a545939112e219b0d0