kyani.life

Issued by R3

About this certificate

This digital certificate with serial number 04:0f:a5:33:11:f7:d8:45:f8:fc:0c:88:58:fd:8c:b4:7b:51 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kyani.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:0f:a5:33:11:f7:d8:45:f8:fc:0c:88:58:fd:8c:b4:7b:51
Serial Number (int): 353772967021736612690585423206650572208977
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:8f:3a:0f:c2:7b:7a:59:73:77:c5:60:7f:b3:76:0a:34:3c:4c:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bc:bc:31:8a:99:7f:2e:aa:cd:dc:42:9c:05:ef:ca:ff:9c:3f:3f:57
Fingerprint (sha256): 07:bd:a1:ff:cf:c4:70:a1:7b:58:f4:b1:7c:1c:47:50:09:60:2d:f7:75:7f:06:8d:09:16:78:11:51:63:4a:5b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kyani.life

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kyani.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.778899.org
*.audiioknig.net
*.azinomobile-777.com
*.basictrainigphotos.com
*.bezlji.com
*.blubonnetplaceapartment.com
*.camillev.co
*.champsshoemart.com
*.chiclookcloset.com
*.chooseone.org
*.cinema3d.club
*.citizensfla.cm
*.cplamorana.com
*.darkorbitwiki.co
*.daysmartappontments.com
*.den-group.net
*.directwrestling.com
*.dzcuisine.store
*.freighttrainridersofamerica.com
*.garrisonwith.com
*.gotmoneygoals.com
*.greengreatnesscana.com
*.guerreira.eu
*.gynbank.com
*.highmarkbcbsde.cm
*.juad8883.co
*.kyani.life
*.lappersaustralia.com
*.malereinkauf.com
*.malthazar.com
*.mnaser.net
*.mnewscon.net
*.myfishforum.com
*.newsdekho.co
*.non-gnl-quebec.com
*.oceansideseafood-direct.com
*.princetonintegrativehealth.com
*.receitasmagnificas.net
*.reggaejerkandfin.com
*.remotejunior.club
*.rooter.tv
*.sentadinhonla.de
*.singaporeskilltrainingcenterbangladesh.com
*.svamaster.com
*.theconsumerrebellion.info
*.thehawiianbox.com
*.youngteens.club
*.zanonimo.info
*.zazor4ik.club
*.zensify.com
778899.org
audiioknig.net
azinomobile-777.com
basictrainigphotos.com
bezlji.com
blubonnetplaceapartment.com
camillev.co
champsshoemart.com
chiclookcloset.com
chooseone.org
cinema3d.club
citizensfla.cm
cplamorana.com
darkorbitwiki.co
daysmartappontments.com
den-group.net
directwrestling.com
dzcuisine.store
freighttrainridersofamerica.com
garrisonwith.com
gotmoneygoals.com
greengreatnesscana.com
guerreira.eu
gynbank.com
highmarkbcbsde.cm
juad8883.co
kyani.life
lappersaustralia.com
malereinkauf.com
malthazar.com
mnaser.net
mnewscon.net
myfishforum.com
newsdekho.co
non-gnl-quebec.com
oceansideseafood-direct.com
princetonintegrativehealth.com
receitasmagnificas.net
reggaejerkandfin.com
remotejunior.club
rooter.tv
sentadinhonla.de
singaporeskilltrainingcenterbangladesh.com
svamaster.com
theconsumerrebellion.info
thehawiianbox.com
youngteens.club
zanonimo.info
zazor4ik.club
zensify.com

Other certificates including the domain name kyani.life

(limited to 100 certificates)
kyani.life

Certificate

The complete raw certificate details for kyani.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxMV+JTluRP4QVPFXldny
m1pi5BwJ3hfSj9C9AiOSM7fjHXJWuEYudLeD9Z2aIAiq+fAvTOILGur/oFSWO2E3
Lz7ylmxEX6XK/ulsKmMgexEdL7Ww3YxrdSc0s9uut4MrrlD6tVe6g9LVMrM3kzc0
ncel49Q9z4lttK7hyugS1GFIoittTC0WvkaySqkPX2jT7wkyvzkC/bIo9b8sMfvG
ObQPIaAVJON4S2h/YNuPfAUOCVVWzD4Y5hq22KeAvXH8i5125pFJbPKjtUjn0j6V
s1NhI2yLju0c+8M+WokZqYSnlmfWWuqxgeDcoFA+2jz+Ry9R+qbfO7w7XGfPoBdh
gydWvqV9HwJmBvij/mSRS1jGeUbMN15QYI7gL62K1YlzWn1sVsCRGBZMV4+aL+kx
403Qsp4r3TUDi52xFcQWATplyYALX+M094bovOaeSIFIyADFjdP5aCat3GFp6Df0
ci2AYNC5vdnEHVNp7n+mBDMPpPoGo8+7YStVMpgrC52/BR/Q5599s3nboIl8q8k5
d1AyYAEVH4g1sISmdDUEhFvH7y6v34VT7ZsJdPuz5ED2khH6nprlsGffJzEPBvTT
lD4Snp+eV5hmfiYKgh4sD3aWT9kKqsQSr8SGon3KM95VW+RVJ8iR2Q0Fhy6WdYcb
panJh3DQRl1pKBPZWli62McCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353772967021736612690585423206650572208977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 18:22:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 18:22:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kyani.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802757503536811014378185170883860838702282150478608292335744446967879009861902346835756148843960655377519627867292770553482171977656880462214494048806961924943371373050930109324185698295888171791515429600575833269843285669331042091112393519417472395603414783270463675180325664233527970174042088415724267379448269489948874361694097437774262400079302744002348571877267704704559539478333955032227012819138950927148054539106720404223192039639049131884926602846185768250630620099077111821142408442907533945520758380019068761313460242332347863106359086099575414185338896015006891500331055228784487892815734018730496149459925573606237702459519444314235383378340537376038616129726833246480230896828572860625233483309060505087530939501124991033517091506373121733650410772151340413224808384276287530323480924605596463640777670055044621021049764967188675552413329774358511395901013408768818572538817992129792211759967688589809687715576593644312446271895724004696433227541737078924956562633421675971595377230081191675535202458969914124674924338428130486969872836612342584375743189422463490348033750980445422159423769875178645979673647261514962002368313213022992368156385137619711218897051536784113122346708168372961826684133807479323744836180167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc8f3a0fc27b7a597377c5607fb3760a343c4cba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.778899.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audiioknig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azinomobile-777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basictrainigphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bezlji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blubonnetplaceapartment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camillev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.champsshoemart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiclookcloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chooseone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinema3d.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citizensfla.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cplamorana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkorbitwiki.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daysmartappontments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.den-group.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directwrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dzcuisine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freighttrainridersofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garrisonwith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotmoneygoals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greengreatnesscana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guerreira.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gynbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highmarkbcbsde.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juad8883.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kyani.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lappersaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malereinkauf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.malthazar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mnaser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mnewscon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myfishforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newsdekho.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.non-gnl-quebec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oceansideseafood-direct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.princetonintegrativehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.receitasmagnificas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reggaejerkandfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.remotejunior.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rooter.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentadinhonla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.singaporeskilltrainingcenterbangladesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svamaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theconsumerrebellion.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehawiianbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youngteens.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zanonimo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zazor4ik.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zensify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '778899.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiioknig.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azinomobile-777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basictrainigphotos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezlji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blubonnetplaceapartment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camillev.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champsshoemart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiclookcloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chooseone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema3d.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citizensfla.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cplamorana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkorbitwiki.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daysmartappontments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'den-group.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directwrestling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzcuisine.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freighttrainridersofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garrisonwith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotmoneygoals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greengreatnesscana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guerreira.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gynbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highmarkbcbsde.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juad8883.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kyani.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lappersaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malereinkauf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malthazar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnaser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnewscon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfishforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsdekho.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'non-gnl-quebec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceansideseafood-direct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'princetonintegrativehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'receitasmagnificas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggaejerkandfin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotejunior.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rooter.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentadinhonla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singaporeskilltrainingcenterbangladesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svamaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theconsumerrebellion.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehawiianbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngteens.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zanonimo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zazor4ik.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zensify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fa1c10e3a000004030047304502204a429bd4b3d9f3bae30eafac6643a5d7b8b5a42e0c0fa7d82f014467682a2641022100fea9e1a85d9eece2c914fd5b760ea91db45a50304fe51fda34f6bb4dd8d2d5ae007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018fa1c10ef0000004030046304402203a9e952fc81c8a91fdadc1b31898bdd5bd11a093e0351ef1497da29aa4b7a1d202206193d00dbe883116147952e27e8aa4b9de561bebda8ee609b752469718904eaf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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