faanatics.com

Issued by R3

About this certificate

This digital certificate with serial number 04:33:7a:82:51:de:4a:99:7f:51:fb:4a:8d:a3:ad:8a:57:97 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=faanatics.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:33:7a:82:51:de:4a:99:7f:51:fb:4a:8d:a3:ad:8a:57:97
Serial Number (int): 365966386914573134918795681309272645982103
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 15:19:ed:bb:64:3d:c8:c5:15:66:37:0d:3b:75:86:71:ff:4d:63:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2f:8e:6d:ca:a7:1f:93:76:d5:b1:f9:51:dc:e0:c4:9e:91:f4:4d:d5
Fingerprint (sha256): 0c:36:9b:f7:97:5a:f7:8b:50:a5:2b:56:8a:06:26:eb:f4:41:29:9b:1f:52:fb:44:2e:d9:cb:c9:3e:12:ee:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate faanatics.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for faanatics.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aceacumenonlineschool.com
*.aisectesams.com
*.ameroventures.com
*.anodots.com
*.bargainlookout.com
*.bouch.biz
*.brazzerzz.com
*.btcnamibia.com
*.cheapfrancejerseys.us
*.childrensview.com
*.custombreaklights.com
*.donnieyoung.us
*.elliottchong.com
*.emby.com.au
*.empoweredforsuccess.com.au
*.faanatics.com
*.factoportal1.com
*.first-classstatementto-glancetoday.info
*.freelancingwriting.com
*.fucksc.com
*.gabrielanuernberg.com
*.glutenfreetravel.com.au
*.harikesnallur.com
*.harleymon.us
*.hiwayharrys.com
*.hobert.us
*.ilebox.com
*.mainrd.au
*.mercmykitchenpartner.store
*.moynaa.com
*.nyctophonicstudio.com
*.ohkdogstmarks.com
*.pasqualebonfilio.com
*.porktenderloinrecipes.org
*.pptp.me
*.privatemote.com
*.projecttunnen.com
*.publiluminosos.com
*.pujapermission.com
*.ricoricoblends.com
*.scorple.com
*.scrapbikes.com
*.sdgef.com
*.searchkeyworddd.com
*.sholunay.com
*.soardomains.com.au
*.thehl.com
*.thepq.com
*.wwwjhancockpensions.com
*.yusatoday.com
aceacumenonlineschool.com
aisectesams.com
ameroventures.com
anodots.com
bargainlookout.com
bouch.biz
brazzerzz.com
btcnamibia.com
cheapfrancejerseys.us
childrensview.com
custombreaklights.com
donnieyoung.us
elliottchong.com
emby.com.au
empoweredforsuccess.com.au
faanatics.com
factoportal1.com
first-classstatementto-glancetoday.info
freelancingwriting.com
fucksc.com
gabrielanuernberg.com
glutenfreetravel.com.au
harikesnallur.com
harleymon.us
hiwayharrys.com
hobert.us
ilebox.com
mainrd.au
mercmykitchenpartner.store
moynaa.com
nyctophonicstudio.com
ohkdogstmarks.com
pasqualebonfilio.com
porktenderloinrecipes.org
pptp.me
privatemote.com
projecttunnen.com
publiluminosos.com
pujapermission.com
ricoricoblends.com
scorple.com
scrapbikes.com
sdgef.com
searchkeyworddd.com
sholunay.com
soardomains.com.au
thehl.com
thepq.com
wwwjhancockpensions.com
yusatoday.com

Other certificates including the domain name faanatics.com

(limited to 100 certificates)
faanatics.com
krogerscareers.com
workoutsforbigmuscles.com
faanatics.com
rccblackboard.com
faanatics.com
faanatics.com
faanatics.com
faanatics.com
faanatics.com
bayan-sys.com
lowup.com
lowup.com
faanatics.com

Certificate

The complete raw certificate details for faanatics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365966386914573134918795681309272645982103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 02:48:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 02:48:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faanatics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804405792474442090511897414115980649510460400710830303792139550569626353736113885920596414545393645439124580410448782370241672390789088978177203722058514770373523436812975474382691398817309003497172737256446242736230054366834956650008054931412183916306906316675857545861052891887435838615489229882189651831211591470218563957470311211203742200946764640634364262239447020669872761769689793403000411047549195625304052247594250582777930839121259871012676234886775905783466654293452453349422328775034071208173591326643445053434935593537038473375961747894274035328384398897895062796783316239571816135175403003548214664658917630048563033277942245505397572660457760017396446692151309721676779310224387248207838040316215285913130827683143419467583933632218337933148554408744883563163194277591822133065362659974215443322125654979832249956158641276517256883342257137031301412882238591923866446141841461700523226295017066987705897530281984883191439746511230466447213146209897788194621542500332204880902193982410465705025429601712508254798956198929237744012641436730583382265993332835299293371336935111165110563616317816563317393739566353913696044104418842230129316443347734041125925965065589661237405756388678725806648561122941390113314640457953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1519edbb643dc8c51566370d3b758671ff4d63b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1930 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aceacumenonlineschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aisectesams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameroventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anodots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bargainlookout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bouch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazzerzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcnamibia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapfrancejerseys.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrensview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custombreaklights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donnieyoung.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elliottchong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emby.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empoweredforsuccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factoportal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.first-classstatementto-glancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelancingwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fucksc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gabrielanuernberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glutenfreetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harikesnallur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harleymon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiwayharrys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hobert.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainrd.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mercmykitchenpartner.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moynaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyctophonicstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ohkdogstmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pasqualebonfilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porktenderloinrecipes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pptp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatemote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.projecttunnen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.publiluminosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pujapermission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ricoricoblends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scorple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrapbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdgef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.searchkeyworddd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sholunay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soardomains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwjhancockpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yusatoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceacumenonlineschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aisectesams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameroventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anodots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bargainlookout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bouch.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazzerzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcnamibia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapfrancejerseys.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custombreaklights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnieyoung.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliottchong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emby.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empoweredforsuccess.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faanatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoportal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'first-classstatementto-glancetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelancingwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fucksc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabrielanuernberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glutenfreetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harikesnallur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harleymon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiwayharrys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hobert.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainrd.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mercmykitchenpartner.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moynaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyctophonicstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohkdogstmarks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasqualebonfilio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porktenderloinrecipes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pptp.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatemote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projecttunnen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiluminosos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pujapermission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ricoricoblends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrapbikes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdgef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchkeyworddd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sholunay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soardomains.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwjhancockpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yusatoday.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b40e64ee40000040300483046022100d75a7d9dab8bc3e775e1f7d2ccc225721464cb79f58d756605213a67449bec99022100b4513f77e2850f43394e5b316d03e6590b996556cca5c5489322727b0ede50d200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b40e64f980000040300473045022012af876abe6b02ea4b4844e850a2cd49e5428ff04c8da551e01b93f6bff347cd022100b06ffee88663f47da9f79ef90700ae507e1e3be0318f7190484400468ad7d940
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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