benatfromager.com

Issued by R3

About this certificate

This digital certificate with serial number 03:e5:e9:a1:83:9d:31:2d:ef:85:0d:a7:04:9d:53:e7:2c:af was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=benatfromager.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:e9:a1:83:9d:31:2d:ef:85:0d:a7:04:9d:53:e7:2c:af
Serial Number (int): 339572068572437457469970709298149870480559
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:54:34:b9:df:31:de:c9:83:6a:fd:4b:ba:c7:6f:72:ed:e1:6f:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:90:bd:62:d7:84:9c:da:1a:2f:8f:ef:91:fa:11:87:20:62:96:7a
Fingerprint (sha256): f9:fd:bb:89:1e:02:af:6f:a2:eb:e4:b6:df:97:e7:96:b7:0d:c9:b0:01:49:73:8b:3f:eb:48:3a:19:82:20:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate benatfromager.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for benatfromager.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2306.com.au
*.4ww93.us
*.6069.com.au
*.6477.com.au
*.6631.com.au
*.advancedmedicalweightloss.us
*.alurarev.us
*.apmmgtportal.com
*.artraiteur.com
*.asep-suisse.org
*.barbri.online
*.bchange.co
*.benatfromager.com
*.blackphoenix.us
*.brianorakpojersey.us
*.budybuilder.com
*.buithao123.us
*.bykare.us
*.clientstat.us
*.communityfarm.us
*.confectionatelyyours.com
*.crosslapelpins.us
*.demandsceince.com
*.diego993.us
*.dogwalk-shoes.us
*.energystorage.com.au
*.gawler.com.au
*.handsam.com
*.hdrmovies.xyz
*.healthcare-competitiveness.com
*.helloworldparis.com
*.kamihira.com
*.kino-horror.net
*.klrna.com
*.lloretbeachhandball.com
*.marcha-a-glasgow.net
*.masslenders.com
*.millennialdollarclub.com
*.nebezrazlichno.com
*.nopierdasucasa.com
*.ontogen.com
*.outsourcedaccountant.com.au
*.paramotorkraft.com
*.seabrease.com
*.seesydney.com.au
*.shopideaboard.com
*.teqventures.com
*.theenz.com
*.todayblackfridaydeals.com
*.yarrowheadsolutions.com
2306.com.au
4ww93.us
6069.com.au
6477.com.au
6631.com.au
advancedmedicalweightloss.us
alurarev.us
apmmgtportal.com
artraiteur.com
asep-suisse.org
barbri.online
bchange.co
benatfromager.com
blackphoenix.us
brianorakpojersey.us
budybuilder.com
buithao123.us
bykare.us
clientstat.us
communityfarm.us
confectionatelyyours.com
crosslapelpins.us
demandsceince.com
diego993.us
dogwalk-shoes.us
energystorage.com.au
gawler.com.au
handsam.com
hdrmovies.xyz
healthcare-competitiveness.com
helloworldparis.com
kamihira.com
kino-horror.net
klrna.com
lloretbeachhandball.com
marcha-a-glasgow.net
masslenders.com
millennialdollarclub.com
nebezrazlichno.com
nopierdasucasa.com
ontogen.com
outsourcedaccountant.com.au
paramotorkraft.com
seabrease.com
seesydney.com.au
shopideaboard.com
teqventures.com
theenz.com
todayblackfridaydeals.com
yarrowheadsolutions.com

Other certificates including the domain name benatfromager.com

(limited to 100 certificates)
negociosdemexico.com
artofthecreator.com
benatfromager.com

Certificate

The complete raw certificate details for benatfromager.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339572068572437457469970709298149870480559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 21:01:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 21:01:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'benatfromager.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849819310892065943463684251943470896610961462928299008643481728687065452573019816221938486441011106388810137713173650629769230482401035955453906180300086513019285522033347779985992269896008995458802419233306223801685438152239859652183373582747086830371057277080894838299840951263229184871146324769939787095439475344738816880373467832249195221073597988407503366827799988304119973360350396274932325977098782703236076211656676575131481076532001523377774516781746161501592416325749255254420454517793667266158394521917156949637068920277143233877455342931799036988791766543565107757267590511045896335714938467660483294476180154164493038293748811845463379428919591011786353320518807461499950291258831976550729680967924300904055191803519505001689141790382052136911810786970849840621553329853227187053006621120388620405180443522448547366288152638166091262217994059009507470049806626056240105094900510352747188687893748303163671956604807921121049404148803092388485129033572377205589775783827215447267615108280689371176921712366729002401776809081131553891931302114652049181400960338754600153854797854884249745525974182527076664025534685816565949577733215976585473895558584020365359976462352208606244106082922306202509696200413054029393818946223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							785434b9df31dec9836afd4bbac76f72ede16fc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1898 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2306.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4ww93.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6069.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6477.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6631.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advancedmedicalweightloss.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alurarev.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apmmgtportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artraiteur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asep-suisse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbri.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bchange.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benatfromager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackphoenix.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brianorakpojersey.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.budybuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buithao123.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bykare.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clientstat.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.communityfarm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confectionatelyyours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crosslapelpins.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demandsceince.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diego993.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogwalk-shoes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.energystorage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gawler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handsam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdrmovies.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthcare-competitiveness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helloworldparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kamihira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kino-horror.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klrna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lloretbeachhandball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marcha-a-glasgow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masslenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millennialdollarclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nebezrazlichno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nopierdasucasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ontogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outsourcedaccountant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramotorkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seabrease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seesydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopideaboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teqventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todayblackfridaydeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yarrowheadsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2306.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4ww93.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6069.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6477.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6631.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedmedicalweightloss.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alurarev.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apmmgtportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artraiteur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asep-suisse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbri.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bchange.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benatfromager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackphoenix.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brianorakpojersey.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'budybuilder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buithao123.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bykare.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientstat.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communityfarm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confectionatelyyours.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosslapelpins.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demandsceince.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diego993.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogwalk-shoes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energystorage.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gawler.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handsam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdrmovies.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcare-competitiveness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helloworldparis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamihira.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kino-horror.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klrna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloretbeachhandball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcha-a-glasgow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masslenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millennialdollarclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebezrazlichno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nopierdasucasa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsourcedaccountant.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramotorkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabrease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seesydney.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopideaboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teqventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theenz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todayblackfridaydeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yarrowheadsolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d9f56d1d20000040300473045022100beccf4c632a104d9620e7a4b2729d779c2cc1ad9297cbdd384a00d9a569ea07c022022f441422b7c890e8436a3395db1dd9eaec36b9afff5450393e3256933f7a884007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d9f56d3b800000403004630440220725ca0014033f7f176419832c29fe503fda6bdf6383fffdcbf1c5ddb71d37c4a0220525727ed67a08e8568fd6177fce99f291328735e5fa6eef7198ea11cbdb9a9db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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