ulmen.tv

Issued by R3

About this certificate

This digital certificate with serial number 03:2a:e2:35:14:4d:8b:12:35:f6:b1:0b:60:74:63:ee:3a:bd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ulmen.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:e2:35:14:4d:8b:12:35:f6:b1:0b:60:74:63:ee:3a:bd
Serial Number (int): 275929398336532849756971767063833069107901
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:2f:3c:7c:b5:c0:39:51:86:0b:75:2a:af:92:de:47:22:65:4d:95
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:68:e9:0d:17:c4:ba:65:d2:a2:15:f8:bd:b7:65:f7:05:78:da:61
Fingerprint (sha256): 17:14:62:0f:cb:14:52:29:b9:a0:44:26:69:35:db:32:97:cf:2b:44:40:a3:c2:7c:e5:9f:21:b0:ac:b9:df:53

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ulmen.tv

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ulmen.tv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1000handmade.com
*.4box.org
*.66sbtt99.com
*.americanspirif.com
*.asu-bap.com
*.audition-anisong.com
*.bajuhewan.com
*.ban-sunglasses.com
*.blue-cartoons.com
*.brandshobby.com
*.canabisvendoronline.com
*.casualwe.com
*.cheapseizedcar.com
*.cheesesteakmeouttotheballgame.com
*.childrensbookcourse.com
*.clientstaging11.com
*.colebiesemeyer.com
*.completeketamin.com
*.cuiauto.com
*.cuisinedeaudes.com
*.custumkraft.com
*.designs-by-chaz.com
*.digiservices24.com
*.essyfamilyrecipes.com
*.flashgamesbase.com
*.freelancewriter88.info
*.jpmcpro.cc
*.jvmicropigkentation.com
*.ketogenicforbeginner.com
*.kingofthecastleconsulting.com
*.kodoloeasycap.com
*.makeafreerokuchannel.com
*.michaelyor.com
*.mitsubitshi.com
*.officialsbh.com
*.popowicz.com
*.pornfrimcz.com
*.powerofthepearls.com
*.renymarble.com
*.rjextrememobilecarwashllc.com
*.seniorcunts.com
*.shopknewance.com
*.shoptinyturtle.com
*.smoothiesmedspa.com
*.themountaincourior.com
*.thetrainingedgemagazine.com
*.ulmen.tv
*.uubagroup.com
*.v002.cc
*.warehouseforsale.com.au
1000handmade.com
4box.org
66sbtt99.com
americanspirif.com
asu-bap.com
audition-anisong.com
bajuhewan.com
ban-sunglasses.com
blue-cartoons.com
brandshobby.com
canabisvendoronline.com
casualwe.com
cheapseizedcar.com
cheesesteakmeouttotheballgame.com
childrensbookcourse.com
clientstaging11.com
colebiesemeyer.com
completeketamin.com
cuiauto.com
cuisinedeaudes.com
custumkraft.com
designs-by-chaz.com
digiservices24.com
essyfamilyrecipes.com
flashgamesbase.com
freelancewriter88.info
jpmcpro.cc
jvmicropigkentation.com
ketogenicforbeginner.com
kingofthecastleconsulting.com
kodoloeasycap.com
makeafreerokuchannel.com
michaelyor.com
mitsubitshi.com
officialsbh.com
popowicz.com
pornfrimcz.com
powerofthepearls.com
renymarble.com
rjextrememobilecarwashllc.com
seniorcunts.com
shopknewance.com
shoptinyturtle.com
smoothiesmedspa.com
themountaincourior.com
thetrainingedgemagazine.com
ulmen.tv
uubagroup.com
v002.cc
warehouseforsale.com.au

Other certificates including the domain name ulmen.tv

(limited to 100 certificates)

Certificate

The complete raw certificate details for ulmen.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxOOoI+XFV8Q9yZrz5hfJ
AX3aPfjbAiyZhEfeVzBf/H/E/79ipDX8XJEkrg4TpbRKpYtvT9bKnelCiBHdAyV0
piNbfhaiWVrFtwao0/7uuL8gdIGZKfi+ncAY4xqsyXbgvIwNjIFN4lAYzS8Dx9Y8
oKITrBj6v1a9dtJqhWSQ2nsaIT6wDQei2QTx5OlOvTzHpxBOlQTX1QdllfVTXP0Y
j+fDRxxl6nuAGWBrBPzJgXL4z1ApajbWANlrqAjk9S/3irEDMKOIyNFbUDowcHma
DW5rm2Bbv5epYcVNaHy/fZILwdaARgmyrR/zxq8Kh8IHOfkRO0JNqlCMmU+dh1Ac
kMBFS3eJuaz2OeLnrepJ5BmTmX/sahAvnZUf9RachdSAQY/6Z6Z08OUN3Bnk1aH/
SDvIthODw/l6ydJbFPee2aywYnPFZsNeZsPDEvgWwdLaucn26xjaWZXvdh1rEn18
xpZZl7X0RFCtv+tgogO2yDEI0O+vLaFn3BlehAGWX5TpJa+gr4zPQUqH9HfySTHz
nFau4dGW5FEpwJgRf+byAwnVkMnU4uQrecuRZKLjd7aRvCruPH0lESfn3WItR4Ns
mtYoUnRwzLvXEnu1MRX056yCM+I1GBHXCJh0S+dnbqfyX7vsAP+ar1lxUfolx9cD
SONS30xhhtUuDxZJOf2Y/qUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275929398336532849756971767063833069107901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 20:45:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 20:45:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ulmen.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803238201021388636690703960828170848173448229200183371188026031802433576830882383529819370036000228079870458622599959252056993024755835445059012659256533522476441921370177514848569426644404055110912614718228260788313999841404302643169616797070674834502672327510299964126119005434863232002151346223033638127038201960587350717613194404935302017522639377707239909531261238574510161695643977535038341393222414390419541203500469695691059658163143526865546652685906002915420398729037085006059051747838399058598806822318145603627312607285197318344362276560460055489125016537696480992067479861854540592123956338284572090727213164715041620243493830246819245212253704260928348204314550674448111702159571387648243288108661014951207291811081109338644095598595061802341518705016341833129946463246332333877420481957936509233198678056418128560305772240090850770739998006921081710275651446951316072620379455918564597724439807385350171454997856896624061757085722477212524879754360824300489463951172246530821775185748162890650135647596183074772770390462192488901760012513225429343532968689272385390415132857510910909694152531842339863336016273558136383959726428202451155078851080346954045687786947018472588928432899391427751215868540988247581562306213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a12f3c7cb5c03951860b752aaf92de4722654d95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2070 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1000handmade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4box.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.66sbtt99.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americanspirif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asu-bap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audition-anisong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bajuhewan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ban-sunglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blue-cartoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandshobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canabisvendoronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casualwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapseizedcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheesesteakmeouttotheballgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrensbookcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clientstaging11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colebiesemeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.completeketamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuiauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuisinedeaudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custumkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designs-by-chaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digiservices24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.essyfamilyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flashgamesbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freelancewriter88.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jpmcpro.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jvmicropigkentation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ketogenicforbeginner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingofthecastleconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kodoloeasycap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.makeafreerokuchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelyor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitsubitshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.officialsbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popowicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornfrimcz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.powerofthepearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renymarble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rjextrememobilecarwashllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seniorcunts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shopknewance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptinyturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smoothiesmedspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themountaincourior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetrainingedgemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ulmen.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uubagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warehouseforsale.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1000handmade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4box.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '66sbtt99.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americanspirif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asu-bap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audition-anisong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bajuhewan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ban-sunglasses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blue-cartoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandshobby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canabisvendoronline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualwe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapseizedcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheesesteakmeouttotheballgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensbookcourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientstaging11.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colebiesemeyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'completeketamin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuiauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuisinedeaudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custumkraft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designs-by-chaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digiservices24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essyfamilyrecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashgamesbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freelancewriter88.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpmcpro.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvmicropigkentation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ketogenicforbeginner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingofthecastleconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodoloeasycap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeafreerokuchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelyor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitsubitshi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officialsbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popowicz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornfrimcz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerofthepearls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renymarble.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjextrememobilecarwashllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seniorcunts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopknewance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptinyturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smoothiesmedspa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themountaincourior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetrainingedgemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulmen.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uubagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v002.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouseforsale.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b7840346d0000040300473045022012f6963767e94a4bde03eb3d435cea337bd89289464102635e7ef9595928cb430221008dcc183c1f55cff7ac96b3b66137578fd82b4dfd96544813cb6089d47b8aeb90007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b784034620000040300483046022100e5e66d0629b5c605fc969e21f4c7697006fcc3c0ceb81d2ebfeadbdb643723c2022100fcd55721f79911341d2bc196a0f5e777994715f387b29526079e28cdb2b71fe6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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