ayudajazztel.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c3:35:53:a7:79:f9:8e:89:f4:d9:7c:7b:83:c7:7e:c9:ab was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ayudajazztel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c3:35:53:a7:79:f9:8e:89:f4:d9:7c:7b:83:c7:7e:c9:ab
Serial Number (int): 414875088717866091454258447355916480072107
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:63:68:56:e4:7f:6c:51:d4:fe:11:6b:eb:8e:bf:f6:e8:f4:47:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:92:ef:8e:16:42:bd:51:b3:3d:b9:a9:4b:77:fa:32:27:e0:8f:61
Fingerprint (sha256): fb:90:b5:cd:dd:44:a5:03:aa:16:d2:5c:91:6e:3f:85:d2:80:e2:a6:bc:b4:07:65:7c:34:6d:ff:2a:19:57:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ayudajazztel.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ayudajazztel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.106666d.com
*.activeinvestor.com.au
*.agario.cc
*.amazongiftclaim.com
*.ammericanas.com
*.ayudajazztel.com
*.brethea.com
*.catsandthecrazylady.com
*.celebbeach.com
*.createmyowncookbook.com
*.dentalimplantofferusanet.com
*.desjadins.com
*.eatpizzaprontoavalon.com
*.eroxmeet.com
*.etherealenergymassage.com
*.evblovebk.com
*.excavato.com
*.fancrento.com
*.handymens.com
*.howtowriteasonghq.com
*.ifuns.tv
*.istrategy2010.com
*.laoli.info
*.lewiu.com
*.livingworshipproject.com
*.losbebes.org
*.masteryrich.com
*.maybezxp.com
*.modules.info
*.mountainage.com
*.myr777.com
*.nseip.com
*.officeanywhere.co
*.pixxycreativities.com
*.platoon.site
*.robokolik.com
*.sakrua19th.cc
*.samstacos.net
*.samsung360.com
*.sattamatka.services
*.shuti.net
*.suezcanal.co
*.sugarbea.com
*.taylormanagement.com
*.tupanion.com
*.vocabuarly.com
*.wdjoyner.org
*.westcoastautoremarketingnv.com
*.wyn-d-hill-pekingese.com
*.xmzj.cc
106666d.com
activeinvestor.com.au
agario.cc
amazongiftclaim.com
ammericanas.com
ayudajazztel.com
brethea.com
catsandthecrazylady.com
celebbeach.com
createmyowncookbook.com
dentalimplantofferusanet.com
desjadins.com
eatpizzaprontoavalon.com
eroxmeet.com
etherealenergymassage.com
evblovebk.com
excavato.com
fancrento.com
handymens.com
howtowriteasonghq.com
ifuns.tv
istrategy2010.com
laoli.info
lewiu.com
livingworshipproject.com
losbebes.org
masteryrich.com
maybezxp.com
modules.info
mountainage.com
myr777.com
nseip.com
officeanywhere.co
pixxycreativities.com
platoon.site
robokolik.com
sakrua19th.cc
samstacos.net
samsung360.com
sattamatka.services
shuti.net
suezcanal.co
sugarbea.com
taylormanagement.com
tupanion.com
vocabuarly.com
wdjoyner.org
westcoastautoremarketingnv.com
wyn-d-hill-pekingese.com
xmzj.cc

Other certificates including the domain name ayudajazztel.com

(limited to 100 certificates)
sharkvacumes.com
ayudajazztel.com
krissiassalon.com
offshoretalks.com
goprpgram.com
goprpgram.com
ayudajazztel.com
ayudajazztel.com
*.aastocsk.com
dontneedmoney.com
auction88.com
tamilbooksfreedownload.com
ayudajazztel.com

Certificate

The complete raw certificate details for ayudajazztel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414875088717866091454258447355916480072107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 19:37:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 19:37:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ayudajazztel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838667039923951973804818381280012153028267090417082943322603923175720573247784107851751680528237412280892050975570252455238488482213478898164005878319239799605415734062724270262238840017758348149192080136772941020559477499152536560499988703547803713109205765775459492945652198870321070918161831661478657007216669518367927109504885468945759966149998624595464649520947304613822336268102208788069242603613589451875142768462294181503220386879457197889186994650571539254212034308289996720672585828606685158516817956189055201635477574361666510929388710827329269302501180504768066012683621907268959896938708428622792103039287629235466345087598809604091479953620214229825744404472664093548655973231707667334446271397337249123189854319496038682068742721954083071097377699107691665545184361563003808634878654845621934662748544262856756080564215651738355068778312587780455548816509381192168006885726545168610806133430221121689766339631097402643628904589946322141597601803676402898341373987312297347170142414049457429676178131103136635758615867092002080028577299088858331616801789930031282964145345329515719817663623332537910723046946085970696215614355361197572429607758543882640448154452327670699607069475797295722492956221017890560775360497493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25636856e47f6c51d4fe116beb8ebff6e8f447aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1830 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.106666d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activeinvestor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agario.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazongiftclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ammericanas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ayudajazztel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brethea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catsandthecrazylady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celebbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.createmyowncookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalimplantofferusanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desjadins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatpizzaprontoavalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eroxmeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.etherealenergymassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evblovebk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excavato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancrento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handymens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.howtowriteasonghq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifuns.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istrategy2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laoli.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lewiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livingworshipproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.losbebes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masteryrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maybezxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modules.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myr777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nseip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officeanywhere.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixxycreativities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platoon.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robokolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sakrua19th.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samstacos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samsung360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sattamatka.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shuti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suezcanal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sugarbea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taylormanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tupanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vocabuarly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wdjoyner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westcoastautoremarketingnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyn-d-hill-pekingese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xmzj.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '106666d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activeinvestor.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agario.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongiftclaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ammericanas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayudajazztel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brethea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catsandthecrazylady.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'createmyowncookbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalimplantofferusanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desjadins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatpizzaprontoavalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroxmeet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etherealenergymassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evblovebk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excavato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancrento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handymens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtowriteasonghq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifuns.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istrategy2010.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laoli.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingworshipproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losbebes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masteryrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maybezxp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modules.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myr777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nseip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officeanywhere.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixxycreativities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platoon.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robokolik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakrua19th.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samstacos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samsung360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sattamatka.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shuti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suezcanal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sugarbea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taylormanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tupanion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocabuarly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdjoyner.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastautoremarketingnv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyn-d-hill-pekingese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmzj.cc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e6d0892dc000004030047304502200e78a4d9e8fca98726bf499c7012fdecca15c0b2cb79199f11c737a6a5192f2d0221009f661f8fefc22f077572dc772acff2f11d06a5547259275012761de13d66c160007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e6d089310000004030048304602210094fa31c56dbaba1c9d394e177d07fbefb2deda71dc19fe1a79eea65287f76f7a022100fdcb49c33b4bf29caec1f0a7d03c87a2d94732cf2ab6a83d17fd55d278de1bec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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