cpa2.site

Issued by R3

About this certificate

This digital certificate with serial number 04:d5:8d:2d:1c:b3:84:95:6d:e5:4e:38:9c:bd:f3:7a:fc:b2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpa2.site

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d5:8d:2d:1c:b3:84:95:6d:e5:4e:38:9c:bd:f3:7a:fc:b2
Serial Number (int): 421116943264095529172028625942461843963058
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 88:96:25:43:1a:97:19:9e:51:9b:0d:f7:31:7b:78:ca:40:d6:4f:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:04:94:33:13:5b:5d:f0:8e:22:95:d4:b0:20:d3:bd:c9:2d:7c:aa
Fingerprint (sha256): 06:f6:76:d6:51:cc:6f:9f:2c:5d:85:72:f0:40:89:db:8b:34:bf:7c:f7:9b:c2:c3:fd:de:a9:8c:81:3c:42:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpa2.site

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpa2.site

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aiwconnect.com
*.anieatch.com
*.atitesring.com
*.auditori.es
*.auptisoins.com
*.bestraprporn.com
*.biggamesshop.com
*.boska.online
*.changmtg.com
*.cncmotorcyclesparts.com
*.cookie-clicker3.com
*.cpa2.site
*.dresses-28462.com
*.egramatica.com
*.fdisneyworld.com
*.feasables.com
*.foncia.co
*.havesociallife.com
*.heritageconstructionntx.com
*.homeleonardo.ai
*.indigocreditcard.shop
*.irctcshareprice.shop
*.leemonswap.com
*.masalope.com
*.masterofarts.shop
*.mateyoon.com
*.mrcrypto.au
*.myhealthfilm.com
*.novanau.com
*.novinhas12.com.br
*.oldnavycreditcard.shop
*.rentokil.us
*.ri26.cc
*.rotwein.online
*.sbihomeloaninterestrate.shop
*.scishareprice.shop
*.sgxniftylive.shop
*.silvester-2026.de
*.silvester2026.de
*.startamila.com
*.steampunkholmes.com
*.swatcheries.mx
*.tamil2friends.com
*.tcscareers.shop
*.teledysk7.info
*.tellcicis.com
*.ugurotelbeach.com
*.wwwkvb.co.in
*.yaans-automobile.de
*.zoosk.online
aiwconnect.com
anieatch.com
atitesring.com
auditori.es
auptisoins.com
bestraprporn.com
biggamesshop.com
boska.online
changmtg.com
cncmotorcyclesparts.com
cookie-clicker3.com
cpa2.site
dresses-28462.com
egramatica.com
fdisneyworld.com
feasables.com
foncia.co
havesociallife.com
heritageconstructionntx.com
homeleonardo.ai
indigocreditcard.shop
irctcshareprice.shop
leemonswap.com
masalope.com
masterofarts.shop
mateyoon.com
mrcrypto.au
myhealthfilm.com
novanau.com
novinhas12.com.br
oldnavycreditcard.shop
rentokil.us
ri26.cc
rotwein.online
sbihomeloaninterestrate.shop
scishareprice.shop
sgxniftylive.shop
silvester-2026.de
silvester2026.de
startamila.com
steampunkholmes.com
swatcheries.mx
tamil2friends.com
tcscareers.shop
teledysk7.info
tellcicis.com
ugurotelbeach.com
wwwkvb.co.in
yaans-automobile.de
zoosk.online

Other certificates including the domain name cpa2.site

(limited to 100 certificates)
cpa2.site
cpa2.site
sni.cloudflaressl.com
cpa2.site
sni.cloudflaressl.com
cpa2.site
saladeestudos.online
cpa2.site
sni.cloudflaressl.com
sni.cloudflaressl.com
saladeestudos.online

Certificate

The complete raw certificate details for cpa2.site in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421116943264095529172028625942461843963058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 07:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-30 07:38:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpa2.site'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618852907894573577354498059925790172156805080843890818553113870820308583044205693971047441184121186825572353796573090914502596276650187333820886961966081069931686221010416734970018749615695967738037033600043113321867005745714038453296842346669089966350010267727606676618897008761250509202375189872632834631604787267916904574989824598145462277111644151704873564680705169673538216989502582729835649575549253687975598396421723930013278233170692835861431388154245200549384706829634297661294382051057218365391063198490892263362560775236640367175801232370856612240499964273031870155042178620085273969506278639612349451827237951693089812347528524337366626247858326512516006919127197436961978186225154142365349298781028458239217403462498226594425291769237668533185375752049383369584104120909285096418644031428720681102117702760877037870338474967413540485468825205687329087249584799436295439376133909146818034706665599450532225963902081401195592401128675025990909537895996711110023702122913316701042225841491544045259310034308731742419131697823978558696439181275522389734358215861903839929097890760865495572104204598795171511235175290844734222939973933779289066477911604616887285955015947320164113050629265888392181385049788945217036099701251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							889625431a97199e519b0df7317b78ca40d64f7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1840 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiwconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anieatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atitesring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auditori.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auptisoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestraprporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biggamesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boska.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.changmtg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cncmotorcyclesparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookie-clicker3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpa2.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dresses-28462.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egramatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdisneyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feasables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foncia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.havesociallife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritageconstructionntx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeleonardo.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indigocreditcard.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irctcshareprice.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leemonswap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masalope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masterofarts.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mateyoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrcrypto.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myhealthfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novanau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novinhas12.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldnavycreditcard.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentokil.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ri26.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotwein.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbihomeloaninterestrate.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scishareprice.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgxniftylive.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvester-2026.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.silvester2026.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startamila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steampunkholmes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swatcheries.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tamil2friends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcscareers.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teledysk7.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tellcicis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ugurotelbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwkvb.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yaans-automobile.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoosk.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiwconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anieatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atitesring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditori.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auptisoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestraprporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggamesshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boska.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'changmtg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cncmotorcyclesparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookie-clicker3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpa2.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresses-28462.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egramatica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdisneyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feasables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foncia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havesociallife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritageconstructionntx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeleonardo.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigocreditcard.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irctcshareprice.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leemonswap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masalope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterofarts.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mateyoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrcrypto.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthfilm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novanau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novinhas12.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldnavycreditcard.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentokil.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ri26.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotwein.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbihomeloaninterestrate.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scishareprice.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgxniftylive.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvester-2026.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvester2026.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startamila.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steampunkholmes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swatcheries.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamil2friends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcscareers.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teledysk7.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellcicis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ugurotelbeach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwkvb.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yaans-automobile.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoosk.online'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f334e9a5a000004030046304402202c02be136d9b341bbf24287889533091d0ce00108dd304ce9f31a0eca57df5f802206a3ea824f2d283cab796b372e0509b3aa943a77c1ee301809bd37b18aae561e90077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f334e9a570000040300483046022100c6b7e50b28fafaabc6e31167bc5c79a223b50e5d54f55497e5a272231029f1fe022100e74d4aa811f6d284d81f35d87be69c300d49168c18781df5ef633c545df58483
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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