birkensock.com

Issued by R3

About this certificate

This digital certificate with serial number 03:48:9e:3f:cb:5c:61:04:a1:d9:71:6e:3a:c1:a9:7c:e8:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=birkensock.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:9e:3f:cb:5c:61:04:a1:d9:71:6e:3a:c1:a9:7c:e8:09
Serial Number (int): 286047537476272579849863553970544412780553
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:93:55:26:e3:53:9c:ce:d7:7c:2c:af:4f:a0:61:bd:0c:56:d0:9b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 96:fa:6d:4e:0e:17:c0:16:e9:fd:8c:2f:76:88:67:c2:ba:1f:3d:cf
Fingerprint (sha256): 0e:50:a8:de:41:3f:ee:de:15:da:28:d0:61:aa:96:ea:4c:a6:36:6d:e7:1a:5d:e6:2b:27:d8:00:40:5c:3e:5c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate birkensock.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for birkensock.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5151se.com
*.altrarunningshoes.com
*.antresty.com
*.birkensock.com
*.bluesshieldca.com
*.boatingbc.com
*.bugmonitoring.com
*.buongustocloster.com
*.butget.com
*.colorantlab.com
*.cooki.com
*.darkreign40k.com
*.deathinvegas.com
*.dentalsolutionshvt.com
*.divyupsocks.com
*.easydrawingtutorial.com
*.elfqrim.com
*.eloa-concept.com
*.epidemio.com
*.gensiscredit.com
*.grugstore.com
*.guardiannanytime.com
*.hdmovies2.digital
*.inderalmallherenow.com
*.inkagame.com
*.javdb03.com
*.lifetouc.com
*.linkdir4u.co
*.mahattanprep.com
*.marchvisoncare.com
*.minkycoutour.com
*.myafricanmangodiet.com
*.nbcnws.com
*.nethersporkskins.com
*.pdf-downloader.online
*.pqyer.com
*.prply.com
*.qualityinnwestmemphis.com
*.ridgetowngolf.com
*.rirerack.com
*.sangkilat.com
*.sdg2mastercard.com
*.shareyourexperience.com
*.umantis.co
*.voyeureb.com
*.weekendtailgating.com
*.wmix.com
*.xizifashion.com
*.ymyfreecams.com
*.yummeiart.com
5151se.com
altrarunningshoes.com
antresty.com
birkensock.com
bluesshieldca.com
boatingbc.com
bugmonitoring.com
buongustocloster.com
butget.com
colorantlab.com
cooki.com
darkreign40k.com
deathinvegas.com
dentalsolutionshvt.com
divyupsocks.com
easydrawingtutorial.com
elfqrim.com
eloa-concept.com
epidemio.com
gensiscredit.com
grugstore.com
guardiannanytime.com
hdmovies2.digital
inderalmallherenow.com
inkagame.com
javdb03.com
lifetouc.com
linkdir4u.co
mahattanprep.com
marchvisoncare.com
minkycoutour.com
myafricanmangodiet.com
nbcnws.com
nethersporkskins.com
pdf-downloader.online
pqyer.com
prply.com
qualityinnwestmemphis.com
ridgetowngolf.com
rirerack.com
sangkilat.com
sdg2mastercard.com
shareyourexperience.com
umantis.co
voyeureb.com
weekendtailgating.com
wmix.com
xizifashion.com
ymyfreecams.com
yummeiart.com

Other certificates including the domain name birkensock.com

(limited to 100 certificates)
birkensock.com
imaginetravellers.com
birkensock.com
birkensock.com
imaginetravellers.com
birkensock.com
imaginetravellers.com
imaginetravellers.com

Certificate

The complete raw certificate details for birkensock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286047537476272579849863553970544412780553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 12:10:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 12:10:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'birkensock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814087858319865279770180321408173241372680129679387489451203120650349724512309895215898644839102757107472439821533199104760122424050019137109550725508067928567020787660028013716188714298015887843569185073228124055300267909312245719296916935405345781017492413006692631422478806071981962052108681866703646483136288435738864443608932380714900337765025710303306412682456280093885175951050390381728950768154208484013626608583322363009769487610408785839257209661839276262785696170934554824380577716803754443009907931624771269628338442132391310530185486550300009943953704841622230920241602404054018342212414490409753820290244666086174214878018279705645393831265588300673910637756424066604477369545160929059022074784064585109607926802364818874592573191726036152171296399548060569260246732309708316412398581248397564704098411806380313855263552146561746717202437354329621972143461378336230895448474424956618071583112973778929054075264814418086761950239071946312959476639292821522056346298421703709255734308969120195909379745043927119879223956904968187918630115728649482447385550184983395201960675404600651981801514022460983783654394243472162672002908773354433557372019536317427746751935445696448111688312824785697322552829987416792475329890753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a935526e3539cced77c2caf4fa061bd0c56d09b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1838 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5151se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altrarunningshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antresty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birkensock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluesshieldca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatingbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buongustocloster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorantlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cooki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkreign40k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deathinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalsolutionshvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divyupsocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easydrawingtutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elfqrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eloa-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epidemio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensiscredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grugstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardiannanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmovies2.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inderalmallherenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javdb03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifetouc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkdir4u.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahattanprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marchvisoncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minkycoutour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myafricanmangodiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbcnws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nethersporkskins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdf-downloader.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pqyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityinnwestmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgetowngolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rirerack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sangkilat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdg2mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareyourexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umantis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyeureb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekendtailgating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xizifashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymyfreecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yummeiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5151se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrarunningshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antresty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkensock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluesshieldca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatingbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buongustocloster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorantlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkreign40k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deathinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalsolutionshvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divyupsocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easydrawingtutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elfqrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eloa-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epidemio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gensiscredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grugstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardiannanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmovies2.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inderalmallherenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javdb03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetouc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkdir4u.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahattanprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marchvisoncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minkycoutour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafricanmangodiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbcnws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nethersporkskins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdf-downloader.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityinnwestmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgetowngolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rirerack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangkilat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdg2mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareyourexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umantis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyeureb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendtailgating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xizifashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymyfreecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yummeiart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e1909a34e000004030046304402201e0e3a3833f4097935ae3e2500d4b2f42cabe897c1104c0def10d3f7521c4d57022009e8eb7c13a493f34e87ace242aed1c3dff7453a5dc3f615515e493d719ce9350076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e1909a35000000403004730450221008a46f499e6fe4345a9404cfc358bdc1c9e5a4356fef16f2d368663d8267e466802202642d3c7e14ff8ef01c8fee6ab42d4a171d53b716bceac2ec90b56cce29a2d80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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