domains-authority.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:ac:6e:97:56:e9:b6:be:52:7c:76:ee:e5:f8:09:35:a9 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=domains-authority.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9d:ac:6e:97:56:e9:b6:be:52:7c:76:ee:e5:f8:09:35:a9
Serial Number (int): 314990390839327326122987848733608628532649
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:1d:5f:f8:ec:a5:9d:96:1b:c0:da:04:a2:e6:f6:0c:4f:1c:62:13
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:a2:34:4b:66:cc:61:83:8e:8b:c3:fa:b3:56:2e:7d:08:6d:50:ad
Fingerprint (sha256): fd:ea:f6:12:96:c6:6e:de:84:76:b9:c8:c2:24:0e:51:47:6f:74:06:2c:2d:c2:11:d5:1a:99:4b:26:3a:0e:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate domains-authority.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for domains-authority.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9anike.to
*.abovedomains.com
*.addictivegraphics.com
*.allfreehost.com
*.asia-global.com
*.asphalttruck.com
*.atempt.com
*.baillenders.com
*.baldridges.com
*.beavercreekministorageny.com
*.boney.id
*.bugyou.com
*.casadelacondesa.net
*.cheapflighhts.com
*.circlechess.co
*.domains-authority.com
*.dotius.com
*.dotluv.com
*.dresser-rand.co
*.dustham.com
*.ekoi.net
*.europeansun.com
*.fan-fare.shop
*.freeoilpaintings.com
*.grogg.shop
*.hacercineenguatemala.net
*.interview100.com
*.jaclynmeinendressage.com
*.marketbbs.com
*.maternity.blog
*.newtonmendes.net
*.openzen.co
*.qbitorrent.net
*.ratchalife.com
*.roomlamps.com
*.seriali.club
*.shiroutowiki.net
*.sigartam.net
*.skuoa.net
*.stanneconsignmentauction.com
*.starbuckcoffeegear.com
*.the-ave.com
*.tips-mart.com
*.tldsherpas.com
*.training.cc
*.trechosevisionarios.com.br
*.triple4-by-micel.net
*.txapeal.org
*.xn--deba0ad.com
*.xn--www-x68dy61b.com
9anike.to
abovedomains.com
addictivegraphics.com
allfreehost.com
asia-global.com
asphalttruck.com
atempt.com
baillenders.com
baldridges.com
beavercreekministorageny.com
boney.id
bugyou.com
casadelacondesa.net
cheapflighhts.com
circlechess.co
domains-authority.com
dotius.com
dotluv.com
dresser-rand.co
dustham.com
ekoi.net
europeansun.com
fan-fare.shop
freeoilpaintings.com
grogg.shop
hacercineenguatemala.net
interview100.com
jaclynmeinendressage.com
marketbbs.com
maternity.blog
newtonmendes.net
openzen.co
qbitorrent.net
ratchalife.com
roomlamps.com
seriali.club
shiroutowiki.net
sigartam.net
skuoa.net
stanneconsignmentauction.com
starbuckcoffeegear.com
the-ave.com
tips-mart.com
tldsherpas.com
training.cc
trechosevisionarios.com.br
triple4-by-micel.net
txapeal.org
xn--deba0ad.com
xn--www-x68dy61b.com

Other certificates including the domain name domains-authority.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for domains-authority.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314990390839327326122987848733608628532649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 05:35:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 05:35:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domains-authority.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754329933686404689801879857613625563792626954395906851831568184091073718375309688341202413451166958160987592731609825712901527010432704262700379888700565939863030899580934428650260544291446489514840483173191334789852672954095205504337289545288100153205699720862555209666971642743141353132906849146176369185986005833852524454327405276130810340558352406428612616871917987743108143053270536144907748091014844367963835625962197462676744348456062416023477148752613304060844154857969859326676849882294364468517969944191220805661761800104833130036664361094705554363573047078379261032503725700707988734078379530236348787828847394052896779992587673218097664820548853089085939477637872452224514804698670966525576264033280637139891550505159582071294422745333741838102089011757507599530102463330783489972427747012943560240780711608483702650726899515453824446576550968676255629343555989665834481435365491050818264750151582914535456581374944980258161824607504875827268254554183287018886488817969400450058679893974665352110917207868776711929757866282024814521195189433603816047238104057028540696002291383127207415091984242657471003668603843386694830329832398442577026325695715001898508218454322263167610283604825367444634665637011552808946541776083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a31d5ff8eca59d961bc0da04a2e6f60c4f1c6213
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9anike.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abovedomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addictivegraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allfreehost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asia-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asphalttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atempt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baillenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baldridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beavercreekministorageny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boney.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casadelacondesa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapflighhts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.circlechess.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domains-authority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dotluv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dresser-rand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dustham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ekoi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.europeansun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fan-fare.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeoilpaintings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grogg.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hacercineenguatemala.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interview100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaclynmeinendressage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketbbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maternity.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newtonmendes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openzen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qbitorrent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ratchalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roomlamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seriali.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiroutowiki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sigartam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skuoa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stanneconsignmentauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starbuckcoffeegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-ave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tips-mart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tldsherpas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.training.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trechosevisionarios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.triple4-by-micel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txapeal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--deba0ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--www-x68dy61b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9anike.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abovedomains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addictivegraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allfreehost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia-global.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asphalttruck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atempt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baillenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baldridges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beavercreekministorageny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boney.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casadelacondesa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapflighhts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'circlechess.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domains-authority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotluv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresser-rand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ekoi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europeansun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fan-fare.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeoilpaintings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grogg.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hacercineenguatemala.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interview100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaclynmeinendressage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketbbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maternity.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtonmendes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openzen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbitorrent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratchalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomlamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seriali.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiroutowiki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sigartam.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skuoa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanneconsignmentauction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starbuckcoffeegear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-ave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tips-mart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tldsherpas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trechosevisionarios.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triple4-by-micel.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txapeal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--deba0ad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--www-x68dy61b.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fc835ccf30000040300473045022100b84e92519dbcbe250d717049711a969b5aa0e24b0b7ac4f203280b18a31e68a002201921ddbc7cde23f4277d1610f4a56f1541534e2962d36322c3bf88e3a895116d00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fc835cc560000040300483046022100c6f15ebb33050e54cd966d45a2bd37ce5ad2264473ea86434d84f8b5984ba4cc022100a00fccc922ce787056c5275ce811b7b681a93c3668ffdea91c6c3b7d997dcd32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001de58e764a1b13eab79f96c90565154be5bb82623e31366fba054c54d3f495b31a82ae217b91ec6a71e70c6e93fcca8ff2555d037acc9b7e34ab3eebd877f5ad73d0f04053fb313cc1b2a4fdd86da4878729317bf5d22abb07799736080ec26a55b79e21b213ccd056520fd5383c185c8fa670597e12ad73e98bdd332e22ccfb1371e2d33931e88d7b9b1d5286e29f6b06585f3a367136c0e61d10b466feb9bc79f81cdff2092fe50c9caf5cf8c2539d915e8b975c809146b1aba9032da85ac9fc7d317feda1aca3e7df96704ca12924096e94e5032a9cd9df17a61128e415d02d461e5d513bfa960de39072cec4a7a6f3cb5d95bcf963efc998be2c0154751f