diyana.com

Issued by R3

About this certificate

This digital certificate with serial number 03:af:88:92:aa:1d:58:10:45:5f:42:40:07:83:0d:21:0f:9b was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=diyana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:88:92:aa:1d:58:10:45:5f:42:40:07:83:0d:21:0f:9b
Serial Number (int): 321067808539547569374486469911052067868571
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:4a:a6:c7:37:d2:bb:ec:01:4b:1c:20:a4:eb:21:1a:b8:92:96:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:55:be:da:a9:b8:84:5d:c9:5c:2d:d5:26:ab:ef:04:01:c1:1c:3b
Fingerprint (sha256): 13:2f:d2:23:a2:fd:5f:9d:a1:cf:bb:c8:cf:99:26:f2:34:c1:18:e1:46:a6:99:8e:6b:a4:4a:37:69:db:f8:a7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate diyana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diyana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5630.care
*.alibuda.com
*.annesley.com
*.association.fish
*.atenea.com
*.augusta.clothing
*.augusta.fitness
*.brillianceschool.com
*.darling.gifts
*.dejung.com
*.diyana.com
*.dtaposse.com
*.ebaybooks.com
*.escalamadrid.com
*.fanatic-cs.info
*.ffekkai.com
*.gary.parts
*.gigahashbit.com
*.globeapts.com
*.gorodovoy.com
*.hisroyalfamily.com
*.hjg.au
*.ijijiji.com
*.jarabet.com
*.katem.com
*.landbrug.com
*.luisterboek.com
*.mattmcgtraining.com
*.medicalsmart.care
*.milton.computer
*.mojito.guide
*.monstersinthemorning.com
*.mydiamondcard.com
*.myinsurance.exchange
*.parcels.us
*.posas.com
*.pqdy.com
*.process.associates
*.restaurantrecovery.org
*.roseng.com
*.tatevik.com
*.tikitak.com
*.treatments.works
*.vanlancker.com
*.verstuur.com
*.victorias.deals
*.victors.clothing
*.vintagetouchjuttis.com
*.yomikikase.info
*.zitlala.com
5630.care
alibuda.com
annesley.com
association.fish
atenea.com
augusta.clothing
augusta.fitness
brillianceschool.com
darling.gifts
dejung.com
diyana.com
dtaposse.com
ebaybooks.com
escalamadrid.com
fanatic-cs.info
ffekkai.com
gary.parts
gigahashbit.com
globeapts.com
gorodovoy.com
hisroyalfamily.com
hjg.au
ijijiji.com
jarabet.com
katem.com
landbrug.com
luisterboek.com
mattmcgtraining.com
medicalsmart.care
milton.computer
mojito.guide
monstersinthemorning.com
mydiamondcard.com
myinsurance.exchange
parcels.us
posas.com
pqdy.com
process.associates
restaurantrecovery.org
roseng.com
tatevik.com
tikitak.com
treatments.works
vanlancker.com
verstuur.com
victorias.deals
victors.clothing
vintagetouchjuttis.com
yomikikase.info
zitlala.com

Other certificates including the domain name diyana.com

(limited to 100 certificates)
unblock.asia
diyana.com
diyana.com
diyana.com
diyana.com
caapakistan.com
diyana.com
dramaturgia.com
nccaa.com
clubesecreto.com
diyana.com
diyana.com
diyana.com
*.222071.com

Certificate

The complete raw certificate details for diyana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321067808539547569374486469911052067868571
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 20:14:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 20:14:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diyana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814078803588532221354106503663145068657383885020401583491109178283051319940822084839303117938400938069851785139292722797431373834357847326450764719424827988584140811819237476905976434602957197874179572994415871256014556650380640005171961332879178777654359551089200444859547725263389750378242411257520640818993378324760359158536776374168945058944959061426194589971987810727893960733562516514805406838072335587923977842049787012031487151529678840912664660555663272874745128163503195331793336011709579058811781329410891644947567285140501299271815142816339775908093250218406563850612404048987916502186612701190130511692034551566870842151144513577681476615291315082870356347784294569732705571758123622109666557547259402497091502158413472743545454350651547206323524920358397293330427971450912655132459722685734659134714108573870013507510668724668523251496907898540884521825831162699044914185689437122778786149559136426441414376467407146600978507502925582909278809205694299737874399304131309361168640971014003089357565538509995456374030310946370245153591145394786609391110599078732390479311822663365740409592100787179480372949736984718377943166765580765642759861419476462699736834235620783489105512429113583327360421700806915703964576574271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa4aa6c737d2bbec014b1c20a4eb211ab89296d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1676 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5630.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.association.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atenea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augusta.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augusta.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darling.gifts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtaposse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escalamadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanatic-cs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gary.parts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigahashbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hisroyalfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hjg.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jarabet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landbrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luisterboek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mattmcgtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicalsmart.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milton.computer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mojito.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.monstersinthemorning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydiamondcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myinsurance.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parcels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.posas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pqdy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.process.associates'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restaurantrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roseng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tikitak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.treatments.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanlancker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verstuur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorias.deals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victors.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vintagetouchjuttis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yomikikase.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zitlala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5630.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annesley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'association.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atenea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augusta.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augusta.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darling.gifts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtaposse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escalamadrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanatic-cs.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gary.parts'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigahashbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hisroyalfamily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjg.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarabet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landbrug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luisterboek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mattmcgtraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalsmart.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milton.computer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mojito.guide'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monstersinthemorning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydiamondcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinsurance.exchange'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parcels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqdy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'process.associates'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restaurantrecovery.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikitak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'treatments.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanlancker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verstuur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorias.deals'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victors.clothing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vintagetouchjuttis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yomikikase.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zitlala.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e86ea8280000004030046304402206b141a741c2cac5ba937da5bde6ecab404f13858c3e9744da0062483e2b9ad3e02206a321008f5ff40db217ef1f700ba2096435c4c457fc35e9a6442254d83f4338100750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e86ea82880000040300463044022078d2d8f6aeef01afddc59bd12028bf8d41b17172d17da21b3cb9ff53301f151202201e99577ae4b0d7518572eb06ed4d27aa1a4279360c788238c6d9b9ac28ed6042
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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