davisauction.com

Issued by R3

About this certificate

This digital certificate with serial number 03:da:71:4f:d6:bc:d2:0b:cb:b3:01:c3:f2:09:d4:61:96:f4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=davisauction.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:71:4f:d6:bc:d2:0b:cb:b3:01:c3:f2:09:d4:61:96:f4
Serial Number (int): 335669031094416400566236301875466823898868
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:4f:9d:88:9b:5c:1c:62:fe:c8:e9:58:5e:4e:0f:d8:2c:af:4c:d8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:20:8e:c5:43:41:ee:52:18:94:1b:4c:e6:f0:17:5f:65:4c:01:b3
Fingerprint (sha256): fd:2b:a4:c0:d3:9f:aa:d2:49:15:28:2d:a9:28:ad:76:7a:f3:ba:8e:46:3c:7c:40:1d:69:ff:e8:4b:33:a9:06

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate davisauction.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for davisauction.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.artimis.com
*.bearandkokoboutique.com
*.chapelhillapts.com
*.clarionhealth.com
*.classicporn.me
*.d12board.com
*.davisauction.com
*.deliveryvideo.com
*.drainagefacet.cn
*.dreamcastleimages.com
*.fastmailer.com
*.flato.com
*.foxtheather.com
*.globointernacional.com
*.hirevegastech.com
*.jqwjyflvg.com
*.kconwell.com
*.keingmains.com
*.kerryhowelllaw.com
*.knit2create.com
*.kooralive69.com
*.krynicamotel.com
*.krynicaspas.com
*.kuippers.com
*.kulturmalarnaiflen.com
*.kylelawrencebrown.com
*.lainkedion.com
*.lauderdalelogistics.com
*.maltztheater.com
*.metramix.com
*.moodyservices.com
*.motdotworkshop.com
*.mysafeflorida.com
*.nickolodin.com
*.optipresspublishing.com
*.pawfees.com
*.radioclick.com
*.ronandfez.com
*.schoolchina.com
*.sewsteadyevents.com
*.sexperiment.com
*.spazmatics.com
*.tempuspvp.co
*.thesaltlaketribune.com
*.ultimalinux.com
*.umterp.com
*.weldona.co
*.wiopquubqx.com
*.wwwtamilsex.com
*.yamahabike.com
artimis.com
bearandkokoboutique.com
chapelhillapts.com
clarionhealth.com
classicporn.me
d12board.com
davisauction.com
deliveryvideo.com
drainagefacet.cn
dreamcastleimages.com
fastmailer.com
flato.com
foxtheather.com
globointernacional.com
hirevegastech.com
jqwjyflvg.com
kconwell.com
keingmains.com
kerryhowelllaw.com
knit2create.com
kooralive69.com
krynicamotel.com
krynicaspas.com
kuippers.com
kulturmalarnaiflen.com
kylelawrencebrown.com
lainkedion.com
lauderdalelogistics.com
maltztheater.com
metramix.com
moodyservices.com
motdotworkshop.com
mysafeflorida.com
nickolodin.com
optipresspublishing.com
pawfees.com
radioclick.com
ronandfez.com
schoolchina.com
sewsteadyevents.com
sexperiment.com
spazmatics.com
tempuspvp.co
thesaltlaketribune.com
ultimalinux.com
umterp.com
weldona.co
wiopquubqx.com
wwwtamilsex.com
yamahabike.com

Other certificates including the domain name davisauction.com

(limited to 100 certificates)
davisauction.com
davisauction.com
ecouncil.com
davisauction.com
davisauction.com
uppernow.club
akpartskits.com
burswoodswingersclub.com
myqubit.club
davisauction.com
medicaresolution.com
searsfedback.com
tweakapps.net
onlinesavingscard.com
davisauction.com

Certificate

The complete raw certificate details for davisauction.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335669031094416400566236301875466823898868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 16:31:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 16:31:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'davisauction.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 622592462167151588267966518532999748890931948336958416346281593188873383775457916187758450036692294735968444954386971081582452523291197677765803983701315134687724733701095856696307398963140247668551288892820980140469073823449895888790010517176193918650922193432007051217248954114247274897957187717523509360433165006796363612303818266259183599820597353114919602911828362554117681522544451523472678255352264783830030036583540511665982586423019229955810423649159858205715805400746546501365554177829489332167077771534046400033056129516125858162302142242082103294113203054109892143113506379322589732727976091989657802900915949341790797255528995247546298948646592253905213023388231149872504645336251167192917190384063395334864482721518707944410568474896870574567326750892154685099212415547635381441274883678484890211701917616170642513963007432658744327504141325807968144556388142163470871934414229793253734770633788682307669712765785360136652951810559092730994230841709658973691359756424567376314774913235195763970035151413150718403291700500702117666004993969057133506696306960508263069167431971154790835353422043013089674032762636795348596340349243115825816925648136231616926622148439777621054876019076479774403171828781054254467056977127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b34f9d889b5c1c62fec8e9585e4e0fd82caf4cd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1868 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artimis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bearandkokoboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chapelhillapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clarionhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.classicporn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d12board.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davisauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deliveryvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drainagefacet.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreamcastleimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foxtheather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globointernacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirevegastech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jqwjyflvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kconwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keingmains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kerryhowelllaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knit2create.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kooralive69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krynicamotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krynicaspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuippers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kulturmalarnaiflen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kylelawrencebrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lainkedion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lauderdalelogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maltztheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metramix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moodyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motdotworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysafeflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nickolodin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.optipresspublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawfees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radioclick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronandfez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sewsteadyevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexperiment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spazmatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempuspvp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesaltlaketribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultimalinux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umterp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weldona.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiopquubqx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwtamilsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamahabike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artimis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bearandkokoboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chapelhillapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarionhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classicporn.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd12board.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davisauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deliveryvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drainagefacet.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamcastleimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastmailer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flato.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxtheather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globointernacional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirevegastech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jqwjyflvg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kconwell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keingmains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerryhowelllaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knit2create.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kooralive69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krynicamotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krynicaspas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuippers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kulturmalarnaiflen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kylelawrencebrown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lainkedion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lauderdalelogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maltztheater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metramix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodyservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motdotworkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysafeflorida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickolodin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optipresspublishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawfees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioclick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronandfez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sewsteadyevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexperiment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spazmatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempuspvp.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesaltlaketribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultimalinux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umterp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weldona.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiopquubqx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwtamilsex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamahabike.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1da0fbab0000040300473045022100f8b7e9bc775445cf55af868b690165a2f6f6e425edbc346ea79e9cfadc0a5500022005932ce3b630e53a60d8279585242d3332645e0eaaab0685a070064fe048f72a00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d1da0fc49000004030046304402204599ae4ec15d5cd2b6d0f344cb740e15c0a094b124a2959307f472a4d9b0490002204d8362db03f02c7085bbca9f57c14a00e95922ae3536404ddc9c48911f08c4fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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