giotnuoc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6f:ff:1c:fe:e2:e5:38:6a:44:53:3e:2d:0b:23:b0:ea:3f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=giotnuoc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:ff:1c:fe:e2:e5:38:6a:44:53:3e:2d:0b:23:b0:ea:3f
Serial Number (int): 299447304216450646231744588067981694659135
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:ca:11:34:94:ae:ad:19:b8:68:71:83:1d:df:8b:a7:c7:b9:d6:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:8c:07:5a:dc:c6:70:7f:f1:50:fd:c9:fa:46:c6:5b:37:1f:1d:f9
Fingerprint (sha256): fc:c2:63:9b:bc:0a:7f:85:00:18:9d:f9:39:4f:07:f3:3d:6d:ee:11:49:ac:4e:85:d7:17:4f:05:8b:6d:c2:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate giotnuoc.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giotnuoc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a7sa.com
*.aboubacar.com
*.alioune.com
*.anado.com
*.arejonandlizmarriedyet.info
*.blendred.com
*.buzzid.com
*.cemiteriomemorial.com
*.chagen.com
*.cinemaschool.com
*.classicbronco.com
*.commodious.com
*.crosselectric.com
*.crpuzzles.com
*.danielruiz.com
*.diegel.com
*.elmeydan.com
*.fiberdrinks.com
*.galeriaespacio.com
*.giotnuoc.com
*.godescarga.com
*.gurnham.com
*.harib.com
*.hironaga.com
*.ketzwellness.com
*.kexian.com
*.kujan.com
*.lasenal.com
*.moon-page.com
*.okhotsk-chocolatier.com
*.onlinelogs.com
*.palabras.com
*.poges.com
*.portugalparabrasileiros.com
*.prepaidreload.com
*.quitartatuajes.com
*.ratsastus.com
*.rte23.org
*.shurite.com
*.tenkai.com
*.theharpist.com
*.towmar.com
*.trrent.co
*.trushar.com
*.turbulencia.com
*.vanpoecke.com
*.veleshta.com
*.welcomeco.com
*.wyles.com
*.yesica.com
a7sa.com
aboubacar.com
alioune.com
anado.com
arejonandlizmarriedyet.info
blendred.com
buzzid.com
cemiteriomemorial.com
chagen.com
cinemaschool.com
classicbronco.com
commodious.com
crosselectric.com
crpuzzles.com
danielruiz.com
diegel.com
elmeydan.com
fiberdrinks.com
galeriaespacio.com
giotnuoc.com
godescarga.com
gurnham.com
harib.com
hironaga.com
ketzwellness.com
kexian.com
kujan.com
lasenal.com
moon-page.com
okhotsk-chocolatier.com
onlinelogs.com
palabras.com
poges.com
portugalparabrasileiros.com
prepaidreload.com
quitartatuajes.com
ratsastus.com
rte23.org
shurite.com
tenkai.com
theharpist.com
towmar.com
trrent.co
trushar.com
turbulencia.com
vanpoecke.com
veleshta.com
welcomeco.com
wyles.com
yesica.com

Other certificates including the domain name giotnuoc.com

(limited to 100 certificates)
giotnuoc.com
giotnuoc.com
propetysex.com
giotnuoc.com
keshishyan.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
giotnuoc.com
tefillah.com
giotnuoc.com

Certificate

The complete raw certificate details for giotnuoc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuBDXoYSVaDv6a5YnU7QI
BAZpwmd94GLHO26Ko3B9cJ5ejfvh/9in1XO4ym2CDpN/v7SQMhTEWJ6+Kj7UiSZQ
t0EWGqusdN5abFdKzZQ1rHtqy2BiQMXnbTlpaifcMbpus7Gbbrk5qmeJ6dElgDeI
Ilxp4TKQ1RokSchlvq6wKZgi1z7BN0Mb0Yg3mN60bj4uq7JpckBHGOEBp2P1OHal
jS24bRMZ9xdPO/nLu+dcHgH4k3GU+0bhZyJ532K/5O77mjq9du9m17ycHUswGa/K
o+8sN373/ayW7by4SZ3FNdwwub3Iz65e+HnN2UomBTOQyxF/8U24sO9qoqAChxKO
kAAXlOFX75LrZUURVhwFoFgkGRiviKSLA5DA29UC6Qh4YFV9Jc3qoHbCxjUToktY
ePQpeBq580vBeZvwGHcPfw2DhjuvWAFYXg7HMxpvlrsgGJiUtWcYqO9lu3ifjVbV
f2HBJmzS7HaTsAfRdk2aUJAftSo+W3sMQgSoiMhwAB2+P0OadUr8siVSe/LZTcwc
Qdo1jr8jc9Pz3c4iSyPHqlWdsp8rsRmpuj+GSs/BkORE+JfVI3176kgL/ZE0XbgP
Ssoevg7ITMoUWlP0A+6V1DMAgbYE4jOQ4zvbA3tiFN+3VUQcZ+F3bgG0BRq0MgC9
HigRVqUMnv0Cf9RM0peXEykCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299447304216450646231744588067981694659135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 21:19:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 21:19:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giotnuoc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750922909387655789681975357488355647946889873485632213958033103390243894196031566959010012607625368844161789187412165186803604848693193575048714622150067958839683110389165258558829255537309250084205313460660421695759177823797642574215960020925411865314485402948541419361554082176758495446646511549605104206875599427092267503358061175879777968586916624099353135839589081942874172593855029511294917597990086234514201329750110899745155249197493067734453245900901501835431548968150742314911148003300158363647460572286220124878556206409779249272727516852377144287655975394135783546648969497125466209933004680006213476320193410780156903486341904310109212654146853074307339810386865546862023790201596907263878915559437191792752344478571989780107072712770911553156937598863699942354944240311848666456148866328994264679390675262787612085775897023491512691897567091937744619161210301304285986172867836810606107031832911242048455683127026217188202928216279001107783685314337482449384524898513174965984947947342243398649445092821765605598194029867327117172584003225679821821357933328100846903180172454237739041036862069368431009496520426165372606823072249868755967170696839639465626204917800793094228143452979664039310584808052567083180675765033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1ca113494aead19b86871831ddf8ba7c7b9d668
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1630 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a7sa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboubacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alioune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buzzid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinemaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classicbronco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commodious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crosselectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danielruiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmeydan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiberdrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galeriaespacio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurnham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kujan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasenal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinelogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratsastus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shurite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theharpist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.towmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trrent.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trushar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turbulencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanpoecke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veleshta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welcomeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a7sa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboubacar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alioune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arejonandlizmarriedyet.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blendred.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzzid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cemiteriomemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chagen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinemaschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicbronco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosselectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crpuzzles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danielruiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmeydan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiberdrinks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeriaespacio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giotnuoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godescarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurnham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hironaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketzwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kexian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kujan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasenal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moon-page.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okhotsk-chocolatier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinelogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palabras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portugalparabrasileiros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepaidreload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitartatuajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratsastus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rte23.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shurite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theharpist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trrent.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trushar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbulencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanpoecke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veleshta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcomeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4432bb04000004030046304402201c5d91a86a19b7ea33de6191addef34194ad20354494ce74db3a730d6d6a54770220551f66ceedaf36b55fd3161201d01f60d1ddd27ba8f93490f7dad440bf820048007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e4432bb0700000403004830460221009f0724effae624bdffaa77fff496870b11b2e0f9c75a081f7df1efa89ae71611022100962f6a633b69f31a9619134042cfcafae3af4da821a5c0962afba5d60b893ad3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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