sarungmangga.com

Issued by R3

About this certificate

This digital certificate with serial number 04:28:10:be:07:cd:53:dd:63:5b:c7:2f:33:80:bd:1a:e2:b8 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sarungmangga.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:28:10:be:07:cd:53:dd:63:5b:c7:2f:33:80:bd:1a:e2:b8
Serial Number (int): 362082692746458800834860940924695369933496
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:32:ae:9b:c3:6c:2a:77:4c:5c:3c:da:0e:c7:b5:45:e7:1e:ce:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 83:96:74:ef:1c:18:90:c1:45:ac:c1:0e:83:9c:5e:d2:4f:bc:4f:d4
Fingerprint (sha256): 01:88:24:d1:70:60:92:e5:61:9d:55:9a:28:cf:40:c0:c0:a9:52:32:04:7f:dd:8b:84:a6:49:c6:8f:97:de:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sarungmangga.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sarungmangga.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.420spa.com
*.addressed.com.au
*.anulka.com
*.b151.cc
*.barrobrunido.com
*.bestolaris.com
*.bidjan.com
*.blaber.com
*.buenlider.com
*.calcolamutuo.com
*.camly.com
*.cariuang.co
*.chincarini.com
*.concia.com
*.crutchmate.com
*.deine.com
*.dostawa.com
*.flutlicht.com
*.frapo.com
*.gregoryfamily.com
*.hanmaum.com
*.hazlorealidad.com
*.khleg.com
*.lovepak.com
*.lumau2.com
*.manshet.com
*.mauney.com
*.mementism.net
*.methdtreams.com
*.moratuwa.com
*.muiznieks.com
*.myanmarmodelsgirl.com
*.noean.com
*.nrothiensu.com
*.nshedy.com
*.olimpicastereo.es
*.penisforstoring.com
*.prathima.com
*.ranferi.com
*.raphats.com
*.sarungmangga.com
*.shiyu.com
*.sienkiewicz.com
*.swisscraft.eu
*.thediamondjubilee.com
*.tongha.com
*.tsukui-saiyou.net
*.vendez.com
*.whangaroa.com
420spa.com
addressed.com.au
anulka.com
b151.cc
barrobrunido.com
bestolaris.com
bidjan.com
blaber.com
buenlider.com
calcolamutuo.com
camly.com
cariuang.co
chincarini.com
concia.com
crutchmate.com
deine.com
dostawa.com
flutlicht.com
frapo.com
gregoryfamily.com
hanmaum.com
hazlorealidad.com
khleg.com
lovepak.com
lumau2.com
manshet.com
mauney.com
mementism.net
methdtreams.com
moratuwa.com
muiznieks.com
myanmarmodelsgirl.com
noean.com
nrothiensu.com
nshedy.com
olimpicastereo.es
penisforstoring.com
prathima.com
ranferi.com
raphats.com
sarungmangga.com
shiyu.com
sienkiewicz.com
swisscraft.eu
thediamondjubilee.com
tongha.com
tsukui-saiyou.net
vendez.com
whangaroa.com

Other certificates including the domain name sarungmangga.com

(limited to 100 certificates)
sarungmangga.com
sarungmangga.com
sarungmangga.com
*.111slot.io
sarungmangga.com
sarungmangga.com
sarungmangga.com

Certificate

The complete raw certificate details for sarungmangga.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362082692746458800834860940924695369933496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 08:47:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 08:47:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sarungmangga.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780872962710466956606425793419694685658132214527861867954447202904281110374832572532970614921490272849367905929146234150060680321234351191214152949061127621455052206160061754925762659431744773866700982841697468543108372151695535428663400841077795548084751969121574257751585132167460956580544757930728034709022073284956539587763705729236470239101818547843336913386353461191241823225193537443448112121608605538955212673547638141262275212860292870826599238014520391486351371011654111490617822785091609418314160234453453531446949574542277154265959887996297797712079913253882611402214940772204800079555269175831757647609603769549236099288839525837576707022943125953880291123654865830860289978796596129073650572212823580899957862439739192047469151415650149123042493554252738590537631163846764576403303020239905773290162723103988403355254070764293817313955120241749005944464428370891357273235890232431766020856440578290350524172284618188718187279524629477617822343074424267624611277296203696476952957341894888010627953624384930636408134428569698545431793486566982566165100712064859446994788934551516340070319900593910895735280656090405905751289452685980875910919358045744772787842122425475809304398766525202795749408449002668349850626450863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2032ae9bc36c2a774c5c3cda0ec7b545e71ecea3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1536 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.420spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addressed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anulka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b151.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barrobrunido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestolaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bidjan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buenlider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calcolamutuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cariuang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chincarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.concia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crutchmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dostawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flutlicht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frapo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gregoryfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hazlorealidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovepak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumau2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manshet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mauney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mementism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methdtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moratuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muiznieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myanmarmodelsgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrothiensu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nshedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olimpicastereo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penisforstoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prathima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ranferi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raphats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sarungmangga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sienkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swisscraft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thediamondjubilee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tongha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsukui-saiyou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vendez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whangaroa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addressed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anulka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b151.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrobrunido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestolaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidjan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blaber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buenlider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calcolamutuo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cariuang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chincarini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'concia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crutchmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dostawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutlicht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frapo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregoryfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazlorealidad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovepak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumau2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manshet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mementism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methdtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moratuwa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muiznieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myanmarmodelsgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrothiensu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nshedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olimpicastereo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penisforstoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prathima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranferi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raphats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarungmangga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sienkiewicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisscraft.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thediamondjubilee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsukui-saiyou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d023897b800000403004630440220426a8fda0ba7de360d95982cd59ff7f99fc25c3daae42bf8daf53fccec348f71022008dd82574e0f7bf0f86c09649dd91fdf5ebb2ab700fbfb7f25818cbfcded99e700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d02389814000004030046304402202952ff38fc133df66fedcedfec61d82f871fc924f4a1941c2da1e5debe068f5b02205ecfe883c6550ffd8ee7cb786042985e1e29eedc36b3dd0a8476caf62c779e09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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