samandstefanarchive.com

Issued by R3

About this certificate

This digital certificate with serial number 03:89:52:7a:5a:6c:33:d5:ea:26:74:d7:52:72:a8:a5:bf:1a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=samandstefanarchive.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:89:52:7a:5a:6c:33:d5:ea:26:74:d7:52:72:a8:a5:bf:1a
Serial Number (int): 308065174053309962007537318310098667683610
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:f0:13:45:e8:f5:69:c9:3d:3b:b2:b3:51:13:a1:09:33:77:38:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:92:74:98:da:65:cb:dd:d5:8c:a3:fe:f0:91:0a:b4:e2:fc:27:52
Fingerprint (sha256): ff:4b:d8:86:68:29:a3:92:8c:9d:b8:3e:88:95:3d:dd:ba:64:64:67:ec:3f:89:d3:6d:cc:80:e4:c9:30:c7:10

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate samandstefanarchive.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for samandstefanarchive.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.105tiresautorepairroadsercices.com
*.365hp-web.com
*.apohtekenumschau.de
*.arodarrental.com
*.audiokrai.co
*.bongacs.co
*.carea.biz
*.carinsurancebocaraton.com
*.certfnmt.es
*.cloudos.com.au
*.cpc-invest.com
*.dealerator.com
*.divi.es
*.dminn.com
*.flor.au
*.foodographer.net
*.fremontcityschools.net
*.galatina.de
*.gko.com.au
*.harrarcliicharleystreet.com
*.hathawayfx.com
*.iceostore.com
*.laranovias.net
*.lernsite.ch
*.llp.eu
*.mkdeadlyalliance.com
*.oicontasb2.com.br
*.okho.com
*.onewark.org
*.photocopy.co.za
*.pram.com.au
*.proeftuin.com
*.qwuoka.de
*.samandstefanarchive.com
*.sarees.com.au
*.snowpiercer.de
*.souvenirs.co.za
*.sun-campus.com
*.surreybccarpetcleaning.com
*.teambstreamingservice.com
*.tec-boom.com
*.tenedor.es
*.thattechchick.com
*.themodernplanter.com
*.tress.com.au
*.vertexmods.com
*.wcanva.com
*.wolfpaqtrade.com
*.wwwantonellofrasconi.com
*.xn--fingerngelmotive-1nb.de
105tiresautorepairroadsercices.com
365hp-web.com
apohtekenumschau.de
arodarrental.com
audiokrai.co
bongacs.co
carea.biz
carinsurancebocaraton.com
certfnmt.es
cloudos.com.au
cpc-invest.com
dealerator.com
divi.es
dminn.com
flor.au
foodographer.net
fremontcityschools.net
galatina.de
gko.com.au
harrarcliicharleystreet.com
hathawayfx.com
iceostore.com
laranovias.net
lernsite.ch
llp.eu
mkdeadlyalliance.com
oicontasb2.com.br
okho.com
onewark.org
photocopy.co.za
pram.com.au
proeftuin.com
qwuoka.de
samandstefanarchive.com
sarees.com.au
snowpiercer.de
souvenirs.co.za
sun-campus.com
surreybccarpetcleaning.com
teambstreamingservice.com
tec-boom.com
tenedor.es
thattechchick.com
themodernplanter.com
tress.com.au
vertexmods.com
wcanva.com
wolfpaqtrade.com
wwwantonellofrasconi.com
xn--fingerngelmotive-1nb.de

Other certificates including the domain name samandstefanarchive.com

(limited to 100 certificates)
samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com
www.samandstefanarchive.com
samandstefanarchive.com

Certificate

The complete raw certificate details for samandstefanarchive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308065174053309962007537318310098667683610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-15 21:25:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 21:25:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'samandstefanarchive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759114575609172231451552039484582763927500851316732063966092616442156451866483569087014616479173149792475681990691464583818713454320969196743350918194532995926105618711976239713491531616770922869740024554206016271770351133476642202951829213304531538812606244732637496960409896679106678914544032616468016456819579843744676083581818917377633768266882922731943666947998936900202544446742612856343540556774135673913069391403145634839952108298317642338193982468986452514546185470112651961417430659578089030202931688924634633402348579595371731859034421977259642584816548432814674246645273776677597871181167272315131936006041654803597828379120320734072796708975885027554931579436170377220810883771705715396281584834215867885443766439555230221682636920301602463111499976865060168449144093636347547252547878017525940065718456466148556815039832161328538262591827802960560113184345090163283445887887482546779705389612047745982168271628985219694575533275866511175824702306491744627811665373591333657106568800009484025360937271745770750806699809698537095762896782018113107230227828238836350997865160107062174678800463136334469595236659096822843756711056800665680889553934164529176793781333188173334800213675463624823137652112829552691289320317081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89f01345e8f569c93d3bb2b35113a10933773883
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1812 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.105tiresautorepairroadsercices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.365hp-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apohtekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arodarrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audiokrai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bongacs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carinsurancebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.certfnmt.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpc-invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodographer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fremontcityschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galatina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gko.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrarcliicharleystreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hathawayfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iceostore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laranovias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lernsite.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkdeadlyalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oicontasb2.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onewark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photocopy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pram.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proeftuin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qwuoka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samandstefanarchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarees.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snowpiercer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.souvenirs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sun-campus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surreybccarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teambstreamingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tec-boom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tenedor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thattechchick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themodernplanter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vertexmods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wcanva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfpaqtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwantonellofrasconi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--fingerngelmotive-1nb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '105tiresautorepairroadsercices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365hp-web.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apohtekenumschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arodarrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiokrai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bongacs.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carea.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carinsurancebocaraton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certfnmt.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpc-invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divi.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dminn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodographer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fremontcityschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galatina.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gko.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrarcliicharleystreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hathawayfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iceostore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laranovias.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lernsite.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llp.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkdeadlyalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oicontasb2.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onewark.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocopy.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pram.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proeftuin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qwuoka.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samandstefanarchive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarees.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowpiercer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souvenirs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sun-campus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surreybccarpetcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teambstreamingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tec-boom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenedor.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thattechchick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themodernplanter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tress.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vertexmods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcanva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wolfpaqtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwantonellofrasconi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--fingerngelmotive-1nb.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001878705aa1b000004030046304402206c0d3c95e73744a051652381648a1d279bccc9299a7ca989fc9ffd4eb6befd73022004e880fd5acbd3fff47587aaf20adf863812f91c1fdb92a2693963d8f11ddc5c007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001878705aa0d0000040300463044022044ee1e32a2ba89ef6d4ad0c98847891dd4b6140fe8093df9b5894bc2b83db6a102201a89812b4fec5e301652d2c21cfdbfdb9f82ce7bd719fd209cdabb3294a76855
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0023955b2e06b1071aa1245e952b6168f40f5b4037d2d3db07f1a8b9445b4d9531837ee633202bdf4ea32d8e6b1c2baa58f79653023dd9f6c07d48427707e690496e5c54120c53dc9c7ab33a7a137a94fe658b24fb1f11c43b8498327e758bd10ef1b028651c274ce722a5cbed4656d80e10029890d129bc6707689736943bc2ab1cfb3fb6a0e83863fd556ae5f33fc9443861de0c49677a4fcc9656f3d081b6631d545f93e63a287c3b50b6fce94ee6c23384b16f7b92412782d7ded122263f8702c90bc9fd53f75175bb48df7811cf58222e94c2cc063349a2c94ae3cde1537c8e1d3a81386347aaccb6dffdd314d46460a6f5491d7384b901d70f31c8a015d2