samikta.net

Issued by R3

About this certificate

This digital certificate with serial number 04:3d:55:6c:48:87:b1:13:c9:96:a1:b5:71:99:69:0e:b7:e2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=samikta.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3d:55:6c:48:87:b1:13:c9:96:a1:b5:71:99:69:0e:b7:e2
Serial Number (int): 369319914728004768638991387824014744270818
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 90:a8:64:58:23:79:60:ff:90:c6:8d:f6:91:68:dd:4e:aa:0b:14:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): da:54:b1:82:95:ea:3a:d0:32:e3:e9:fa:65:34:c2:76:17:9f:30:1c
Fingerprint (sha256): 15:36:9a:54:05:c1:0c:94:3b:2d:e8:f2:84:ce:f3:29:0a:f2:75:ac:2a:94:27:21:51:cc:88:b8:ed:62:2e:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate samikta.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for samikta.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.16mm.cc
*.academiaelegance.com
*.afarmhousefull.com
*.animemq.net
*.atcquality.com
*.aviation-languedoc.com
*.bitcharge24.com
*.buildershardwareoregon.com
*.capethemes.com
*.carworldpb.com
*.casesbyrehan.com
*.coffeebytes.net
*.digimovie.kim
*.eatalyrestaurantsunderland.co.uk
*.elnantoys.com
*.emilyjeppson.com
*.esignatures.biz
*.euroanabolex.com
*.fenetre-augmentee.net
*.fosterdeliveryscience.com
*.fuckingeco.com
*.healthynewzcenter.com
*.hitmovies4u.live
*.ifonlycreative.com
*.ilgeniodellostreaming.team
*.kanzen-game.com
*.konohaapparel.com
*.krishnacourier.xyz
*.krishnagodhania.org
*.kzclip.info
*.mdsport-boutique.com
*.meusatf.org
*.myequilibrium.com.au
*.nylestroke.me
*.o-buoy.org
*.oshunnaturalhairsalon.com
*.peachberry.com.au
*.putlockerhd9.me
*.ripforex.com
*.samikta.net
*.shell-industries.net
*.shopcharlotteonline.com
*.slickmicksfwb.com
*.taisungame.com
*.theglobalcitizen.biz
*.timeperspective.net
*.umdisabledministers.org
*.watch-onepace.online
*.wssoccer.org
*.wwpk2.live
16mm.cc
academiaelegance.com
afarmhousefull.com
animemq.net
atcquality.com
aviation-languedoc.com
bitcharge24.com
buildershardwareoregon.com
capethemes.com
carworldpb.com
casesbyrehan.com
coffeebytes.net
digimovie.kim
eatalyrestaurantsunderland.co.uk
elnantoys.com
emilyjeppson.com
esignatures.biz
euroanabolex.com
fenetre-augmentee.net
fosterdeliveryscience.com
fuckingeco.com
healthynewzcenter.com
hitmovies4u.live
ifonlycreative.com
ilgeniodellostreaming.team
kanzen-game.com
konohaapparel.com
krishnacourier.xyz
krishnagodhania.org
kzclip.info
mdsport-boutique.com
meusatf.org
myequilibrium.com.au
nylestroke.me
o-buoy.org
oshunnaturalhairsalon.com
peachberry.com.au
putlockerhd9.me
ripforex.com
samikta.net
shell-industries.net
shopcharlotteonline.com
slickmicksfwb.com
taisungame.com
theglobalcitizen.biz
timeperspective.net
umdisabledministers.org
watch-onepace.online
wssoccer.org
wwpk2.live

Other certificates including the domain name samikta.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for samikta.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 369319914728004768638991387824014744270818
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 13:38:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-16 13:38:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'samikta.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779345596169528271651076054131269365395490531117457211178372065409899647601712756672854452906669598909856861291356943062825064230710471327295803800712818713362560329333749345955298989751542293130215941533306171234446368517447603379376159208775568228656947955864716787362959334534910241053194469584233308186849754826330944123480299727069172556086139975331134924576566813409440574654435099529985322738162702555887971740381202884039581955628828146548194123886214787269870999415466656100854158572501532469926720507583242022820681388172424234683158874222080489408998413938725715308280539048918241889483726978094001568153504024205350269412854862713946300499500206261755368838934752521988124927255777758721091831013050152322207835076664560181774573161308803851118416719808077409534108039753732573450628481940907176718918954182864516817370284982791978506147713848886981590288493353468559026250054894457541245734462580240967704870532620071170608224575453611992298244501604837620477109966859459574268974813915498306417473648979493515440457224681266497500011175961621845286247207836366476774661712550826379785255326641355402775017790072980667310016132422974698015803736478912904119430292678702548033354972249010318074716198257788124384605538173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90a86458237960ff90c68df69168dd4eaa0b14a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2004 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.16mm.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.academiaelegance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afarmhousefull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animemq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atcquality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviation-languedoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcharge24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildershardwareoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capethemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carworldpb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casesbyrehan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coffeebytes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digimovie.kim'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatalyrestaurantsunderland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elnantoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emilyjeppson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esignatures.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euroanabolex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fenetre-augmentee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fosterdeliveryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuckingeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.healthynewzcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hitmovies4u.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifonlycreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilgeniodellostreaming.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanzen-game.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konohaapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krishnacourier.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krishnagodhania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kzclip.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdsport-boutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meusatf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myequilibrium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nylestroke.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o-buoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oshunnaturalhairsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peachberry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.putlockerhd9.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ripforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.samikta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shell-industries.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopcharlotteonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slickmicksfwb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taisungame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theglobalcitizen.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.timeperspective.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umdisabledministers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watch-onepace.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wssoccer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwpk2.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16mm.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academiaelegance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afarmhousefull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animemq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atcquality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviation-languedoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcharge24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildershardwareoregon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capethemes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carworldpb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casesbyrehan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffeebytes.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimovie.kim'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatalyrestaurantsunderland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elnantoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emilyjeppson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esignatures.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euroanabolex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenetre-augmentee.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fosterdeliveryscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuckingeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthynewzcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hitmovies4u.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifonlycreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilgeniodellostreaming.team'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanzen-game.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konohaapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krishnacourier.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krishnagodhania.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kzclip.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdsport-boutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meusatf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myequilibrium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nylestroke.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-buoy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshunnaturalhairsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peachberry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'putlockerhd9.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ripforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'samikta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell-industries.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopcharlotteonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slickmicksfwb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taisungame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theglobalcitizen.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeperspective.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umdisabledministers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch-onepace.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wssoccer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwpk2.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db25aa15400000403004730450221009903a280bcf9c95f3cdd5ab998bc6ffb6e656dc1abd0c4887087e823113da31b02206a0dd910a9389060d53f95ae1a0bbc0d7e2712f641a0678cd676d9d60f7a621b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db25aa2260000040300473045022100fadacec1d682a39f7498aa235b7b2a2f7dd9273dc5357069b4d6c6360c299f3802204a69bf1ea9c6031b2bb5b426faf8aa34e1d71dcd08851350534457c732160e18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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