raffinata-kinshicho.info

Issued by R3

About this certificate

This digital certificate with serial number 03:0b:bd:c9:b3:c9:92:85:9e:30:9d:13:97:99:a6:2e:bc:63 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=raffinata-kinshicho.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:bd:c9:b3:c9:92:85:9e:30:9d:13:97:99:a6:2e:bc:63
Serial Number (int): 265332235220804503702915702787993651559523
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:28:ed:b0:f7:ce:0b:80:4e:15:e4:e8:7e:e7:fb:df:db:8f:ed:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:da:03:41:fb:33:41:e1:ac:d3:5a:14:5d:f8:59:2a:87:e9:1e:ac
Fingerprint (sha256): 09:28:f9:ab:a4:60:5c:96:58:4b:0e:f5:62:35:82:f5:65:0d:bd:cc:a9:10:37:6e:af:df:0e:cd:27:31:c9:23

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate raffinata-kinshicho.info

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for raffinata-kinshicho.info

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.29bd.cc
*.321sexchay.com
*.91feng.club
*.a-team.tv
*.angolan.care
*.aurorasemi.com
*.barandmark.io
*.bekc.cc
*.centerforculturalexchange.org
*.crosara.shop
*.eva-hakone.com
*.excessive.me
*.fitai.co
*.foodbornedisease.com
*.garminexpress.online
*.ggifs.tv
*.gift-cards.club
*.highpoint.wtf
*.inattv69.xyz
*.jokesduniya.com
*.kathryn.bike
*.kebabkorner.net
*.kinovod183.cc
*.korean.productions
*.menarnds.com
*.nxbglx.xyz
*.of-semaglutides-ok.live
*.ownbyphotography.com
*.panit.pro
*.pcbgo.cc
*.pshsbusservice.com.au
*.quinn.domains
*.quizztest.me
*.raffinata-kinshicho.info
*.sandiegopontoon.com
*.secetlook.me
*.sepatu.pro
*.tbe.au
*.teleweb.tv
*.tripsinternationalschool.com
*.uwatchfree.ai
*.valinki.online
*.virtualtourcreator.com.au
*.vitriervincennes.pro
*.vomroyalvalleygsdogs.com
*.webvideo.online
*.westasea.xyz
*.wicarehospital.com
*.xn--agradeo-zxa.com
29bd.cc
321sexchay.com
91feng.club
a-team.tv
angolan.care
aurorasemi.com
barandmark.io
bekc.cc
centerforculturalexchange.org
crosara.shop
eva-hakone.com
excessive.me
fitai.co
foodbornedisease.com
garminexpress.online
ggifs.tv
gift-cards.club
highpoint.wtf
inattv69.xyz
jokesduniya.com
kathryn.bike
kebabkorner.net
kinovod183.cc
korean.productions
menarnds.com
nxbglx.xyz
of-semaglutides-ok.live
ownbyphotography.com
panit.pro
pcbgo.cc
pshsbusservice.com.au
quinn.domains
quizztest.me
raffinata-kinshicho.info
sandiegopontoon.com
secetlook.me
sepatu.pro
tbe.au
teleweb.tv
tripsinternationalschool.com
uwatchfree.ai
valinki.online
virtualtourcreator.com.au
vitriervincennes.pro
vomroyalvalleygsdogs.com
webvideo.online
westasea.xyz
wicarehospital.com
xn--agradeo-zxa.com

Other certificates including the domain name raffinata-kinshicho.info

(limited to 100 certificates)

Certificate

The complete raw certificate details for raffinata-kinshicho.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265332235220804503702915702787993651559523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 18:32:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 18:32:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'raffinata-kinshicho.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758668171611821362394749329913960686790974854075780216053139105295452190944805601524658341853724040778698901433627249290720932738232840313067454375206897585790025856306301621560539216967194450709719720737286158008023517945753441284787012841350234508833425380824360226129227167107198303269027336796592043533144637106863648239546869638837572531031787023800797111062345669340655551338443590740092127353579798508167258077092152176628876319836151803434832898888484204521074876803473237851842708809622788032520632222065630494444218185399917432548531861806025963881101659247498663344977803069330304344824217891925023082900823606688435886486607580358613006169619913165443923070628514589240682059162728462749354932608834627286008915761686077365683950761781900791550906802148223370354248478992804186463337561359883620385591829228529518118688252290250833819517959767852549030411544893908211451772666490129635125188626065062920816620039371438658983700804245807645064293874282205333203840289498055181171393403243019581107639573954861597590516280737226182169761374453961140122403236193566213162935342848938150190380815790834775681289876255818432160946059743995589244290722944213016930842124648756998152248352346488999825016689936128813119331668587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5828edb0f7ce0b804e15e4e87ee7fbdfdb8fed3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1738 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.29bd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.321sexchay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.91feng.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a-team.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angolan.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurorasemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barandmark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bekc.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerforculturalexchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crosara.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eva-hakone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.excessive.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foodbornedisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garminexpress.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ggifs.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gift-cards.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highpoint.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inattv69.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jokesduniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kathryn.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kebabkorner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinovod183.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korean.productions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menarnds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nxbglx.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.of-semaglutides-ok.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ownbyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panit.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcbgo.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pshsbusservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quinn.domains'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quizztest.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.raffinata-kinshicho.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandiegopontoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secetlook.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sepatu.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbe.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teleweb.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripsinternationalschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uwatchfree.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valinki.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualtourcreator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitriervincennes.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vomroyalvalleygsdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webvideo.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westasea.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wicarehospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--agradeo-zxa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '29bd.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '321sexchay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '91feng.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-team.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angolan.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurorasemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barandmark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bekc.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerforculturalexchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crosara.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eva-hakone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'excessive.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodbornedisease.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garminexpress.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ggifs.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift-cards.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highpoint.wtf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inattv69.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokesduniya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kathryn.bike'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kebabkorner.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinovod183.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korean.productions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menarnds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxbglx.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'of-semaglutides-ok.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownbyphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panit.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbgo.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pshsbusservice.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quinn.domains'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quizztest.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raffinata-kinshicho.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiegopontoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secetlook.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sepatu.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbe.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleweb.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripsinternationalschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwatchfree.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valinki.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualtourcreator.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitriervincennes.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vomroyalvalleygsdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webvideo.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westasea.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wicarehospital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--agradeo-zxa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e868c5c9c0000040300483046022100f695145558d9897648bc615ee9e4acafd37c2f831cdc105fc0759355f5a51298022100a9f5a12ebd2a6b8fa9cd8c347a2358c6da113e09d6faf510b4d976ec17c3b8e5007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e868c5ccd0000040300483046022100dcfa9d07fcd8d22f44a55c25b85261531423103eb11f57965f39d467dddcc6cf022100a4431318e0c5441ee973baf9973ebd7637a4386a5df23ac0d9d4683dd2ebe1fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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