tikusan.co

Issued by R3

About this certificate

This digital certificate with serial number 04:0c:68:fd:0a:f2:88:98:58:79:35:d0:a1:3e:b1:fb:78:43 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tikusan.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0c:68:fd:0a:f2:88:98:58:79:35:d0:a1:3e:b1:fb:78:43
Serial Number (int): 352672085714798674211061250041261036632131
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:de:78:f3:41:d0:0c:de:73:39:e1:1c:de:72:4b:63:e9:59:4e:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:f9:7d:4f:44:fe:0d:90:c3:45:d7:2f:46:43:4b:2f:ac:a0:67:c2
Fingerprint (sha256): 15:86:1d:bd:53:cc:a4:8f:61:7a:50:c2:dc:34:0d:ac:b1:60:8d:f0:94:df:a5:c2:9e:f3:12:45:b7:79:9c:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tikusan.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tikusan.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adamantiumhands.com
*.alanducnguyen.com
*.alphanettingsolutions.com
*.bar-excellente.com
*.blower.com.au
*.cardapiozefa.com.br
*.celtictransportie.com
*.checkgayporn.com
*.collegedegree.com.au
*.dingorevlileri.com
*.directoriocine.com
*.edmbeasts.com
*.fmttransformer.com
*.fremontcountychamber.com
*.gsnyder.info
*.instaindir.com
*.irishsetters.com.au
*.iscribeonline.com
*.kevinjon.com
*.kinogo-online.club
*.kokoro16.com
*.kurtsantea.com
*.laurasignature.com
*.lemondedelautre.org
*.mangasee.us
*.migraraotrohosting.com
*.modefancy.com
*.multiputuhood-emisokehed-disumivuful.info
*.nuun.me
*.nyarink.com
*.onlinecashback.co.uk
*.overuxokinical-resiroless.info
*.pm-1172.info
*.pm-896.info
*.q-a-hu.com
*.reopeneurope.eu
*.sckkettt.com
*.sexrabbit.com
*.shut-down.info
*.skourasmedskin.com
*.slotvcasinonew.info
*.soddersenterprises.com
*.subupucian.info
*.tanumanaika-shounika.com
*.themetabofix.com
*.tikusan.co
*.unadanize.info
*.windia.me
*.worldtour22.com
*.wy88betth.com
adamantiumhands.com
alanducnguyen.com
alphanettingsolutions.com
bar-excellente.com
blower.com.au
cardapiozefa.com.br
celtictransportie.com
checkgayporn.com
collegedegree.com.au
dingorevlileri.com
directoriocine.com
edmbeasts.com
fmttransformer.com
fremontcountychamber.com
gsnyder.info
instaindir.com
irishsetters.com.au
iscribeonline.com
kevinjon.com
kinogo-online.club
kokoro16.com
kurtsantea.com
laurasignature.com
lemondedelautre.org
mangasee.us
migraraotrohosting.com
modefancy.com
multiputuhood-emisokehed-disumivuful.info
nuun.me
nyarink.com
onlinecashback.co.uk
overuxokinical-resiroless.info
pm-1172.info
pm-896.info
q-a-hu.com
reopeneurope.eu
sckkettt.com
sexrabbit.com
shut-down.info
skourasmedskin.com
slotvcasinonew.info
soddersenterprises.com
subupucian.info
tanumanaika-shounika.com
themetabofix.com
tikusan.co
unadanize.info
windia.me
worldtour22.com
wy88betth.com

Other certificates including the domain name tikusan.co

(limited to 100 certificates)
tikusan.co
radioscristianas.co
radioscristianas.co

Certificate

The complete raw certificate details for tikusan.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352672085714798674211061250041261036632131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 16:46:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 16:46:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tikusan.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 775659198025589257226483487234042819215711449916912252917707353380181939122856697508979692725683449719443053879384845597701541314783193448633994468678037436498846264667302961233721200348188107582483091514393011173538427760204273407569258531145027063012851236981656023739959934559512513892473210396001264781308785629235922231903411343828466057836125457042336468890411094189017490905854075914427232442291063664760899180460881702549375526372434048131426092022142724575639669752093254384913417308136102330225804194178012155673805839919235764460720760699346897783615720450732134529702836117373235631886886145939544138326684694979607149982798699478901417741634285788064204215770975354101355029435072553221849876065384951140073171281316517543071149792548976383237848518916598177305713417252697017605681629379288754991228466191635062959406036328858866086470289520841699596054830541992832774787042777351554038274682208206338501191235381788923599930886400270058502796415661486675149621285839719637628747490343772251111281741369991750307314613399806835234041324855934412093221769621135455671453389160342731404967086830923000423151513427970600457893148186117878397351207245225631368740221342856203229683967795826430911141101717198392775670117711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65de78f341d00cde7339e11cde724b63e9594e11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adamantiumhands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alanducnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alphanettingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bar-excellente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blower.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardapiozefa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celtictransportie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkgayporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegedegree.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dingorevlileri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directoriocine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmbeasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmttransformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fremontcountychamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsnyder.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instaindir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irishsetters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iscribeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kevinjon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinogo-online.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kokoro16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurtsantea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laurasignature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemondedelautre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mangasee.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migraraotrohosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modefancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multiputuhood-emisokehed-disumivuful.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuun.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyarink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinecashback.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overuxokinical-resiroless.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pm-1172.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pm-896.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.q-a-hu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reopeneurope.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sckkettt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexrabbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shut-down.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skourasmedskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slotvcasinonew.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soddersenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.subupucian.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanumanaika-shounika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themetabofix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tikusan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unadanize.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windia.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldtour22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wy88betth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adamantiumhands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alanducnguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphanettingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bar-excellente.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blower.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardapiozefa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celtictransportie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkgayporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegedegree.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dingorevlileri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directoriocine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmbeasts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmttransformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fremontcountychamber.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsnyder.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instaindir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irishsetters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iscribeonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kevinjon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinogo-online.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokoro16.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurtsantea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laurasignature.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemondedelautre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangasee.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migraraotrohosting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modefancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiputuhood-emisokehed-disumivuful.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuun.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyarink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecashback.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overuxokinical-resiroless.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm-1172.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm-896.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q-a-hu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reopeneurope.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sckkettt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexrabbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shut-down.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skourasmedskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotvcasinonew.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soddersenterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subupucian.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanumanaika-shounika.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themetabofix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikusan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unadanize.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windia.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldtour22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wy88betth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca215969b0000040300483046022100bbded1099d8919422982f2b990994485205f2662ba460983e60809dea9af8c0a022100b9c906b24e7fcf2b1710f1cf09cefd492ae9250ad9f5f8f0ee85c78ecb2de7fa007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ca21596a700000403004630440220216731ef837882154947dce66e54f8664cd86bb0a0b85b8c776baae6b825b8db02200e21f017ee5f6dc546fc3daa78c09633400be9325455f6b6b0bb751a4b8fb1ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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