shanejustin.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a6:f1:6a:de:e8:a2:02:6f:65:19:36:a1:d1:fc:72:89:26 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=shanejustin.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a6:f1:6a:de:e8:a2:02:6f:65:19:36:a1:d1:fc:72:89:26
Serial Number (int): 318144629555733699521360800211191945398566
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7f:06:c1:7d:cc:b3:0b:5e:6a:fe:23:ea:d1:f4:65:d4:69:13:2f:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:8a:96:3d:3f:a7:18:81:0e:50:35:15:d0:31:d5:a2:80:1d:71:81
Fingerprint (sha256): 18:11:66:bb:9f:e7:01:93:f0:ad:d0:f7:6b:1c:00:01:4d:9b:5e:a1:21:8b:0c:6f:ef:17:41:b8:f4:6c:f9:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shanejustin.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shanejustin.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abdullahsaeed.org
*.anicaclub.com
*.azkahalal.com
*.barbymodels.com
*.byholleyshae.com
*.centurionam.com
*.chestnutcafeandeatery.com
*.chocantine.com
*.ciscothailand.com
*.collectableautomobile.com
*.designdiyidea.com
*.eekorentals.com
*.ehart.de
*.fastbody.com
*.firstnationationalcc.com
*.garmenconnect.com
*.houltoninstitute.com
*.hpclearinghouse.net
*.infashpick.com
*.ipasswords.com
*.istioforosnews.com
*.jag-hair.com
*.kkoolook.com
*.kstueme.com
*.locuramarina63.com
*.mcalts.com
*.mitigationearnings.com
*.myparisvisit.com
*.nyspri.com
*.outlooo.com
*.pornochilango.com
*.practicalmaker.com
*.rentclothing.com
*.roiandhanna.com
*.royalatlantis.com
*.satxredzone.com
*.seafoodandspaghettiworks.com
*.secgamer.com
*.sexseqhd.com
*.shanejustin.com
*.sims3cri.com
*.sixerscamp.com
*.supergrowthllc.com
*.termofisher.com
*.theonespa-toronto.com
*.to2bebe.com
*.tostreams.tv
*.urbangym.es
*.xuploading.com
*.yxs.de
abdullahsaeed.org
anicaclub.com
azkahalal.com
barbymodels.com
byholleyshae.com
centurionam.com
chestnutcafeandeatery.com
chocantine.com
ciscothailand.com
collectableautomobile.com
designdiyidea.com
eekorentals.com
ehart.de
fastbody.com
firstnationationalcc.com
garmenconnect.com
houltoninstitute.com
hpclearinghouse.net
infashpick.com
ipasswords.com
istioforosnews.com
jag-hair.com
kkoolook.com
kstueme.com
locuramarina63.com
mcalts.com
mitigationearnings.com
myparisvisit.com
nyspri.com
outlooo.com
pornochilango.com
practicalmaker.com
rentclothing.com
roiandhanna.com
royalatlantis.com
satxredzone.com
seafoodandspaghettiworks.com
secgamer.com
sexseqhd.com
shanejustin.com
sims3cri.com
sixerscamp.com
supergrowthllc.com
termofisher.com
theonespa-toronto.com
to2bebe.com
tostreams.tv
urbangym.es
xuploading.com
yxs.de

Other certificates including the domain name shanejustin.com

(limited to 100 certificates)
pusatgrosirsepatumurah.com
garminpilot.com
shanejustin.com
www.shanejustin.com
www.shanejustin.com
www.shanejustin.com
www.shanejustin.com
expages.com
shanejustin.com
chicksdelivery.com
www.shanejustin.com
www.shanejustin.com
www.shanejustin.com
wwwselecoes.com
ontarian.com
www.shanejustin.com
eleitesingles.com
www.shanejustin.com
ontarian.com
shanejustin.com
www.shanejustin.com
ontarian.com

Certificate

The complete raw certificate details for shanejustin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318144629555733699521360800211191945398566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 19:41:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 19:41:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shanejustin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823147715670181331392861476004974847000506595639510246965959732124610906987533581637798160860176841934011256843387384522257846020641518429052090604464331935338322734967072050584869251027090162057794537168533731250176043591165052426628274830077828584569677873401326217869269884817520684949333381341084571626366552944463532568970040400353027210353634530608433434488464837790964665711639141990857713063342308403910656808285307309617623317409720674080561962478603314623293347348389907599900534628975309222571350529945270089126850815431612444150603728538351807587035517262996368824061766756263042028382484318557489277234338574826013495785281503183215435636960668195069707309064454140784182762977923423601168591232063802417766803795271199098948855163476826813783358031016288884721147114156945921936272423694350608647551182206918269362049516792732187869375482460636564119660033761148087280336383728781012757200632845805171840020844189113929583250048095828104826981466199475525622623632665595063224029200370104603084867584045343593055150698970932052519199113669599861181717036396526735389452453148356742006784048102897513449685388699045377791758627213663547923627537556556966848394068403243031199251159856508508522890845511651106525950356001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f06c17dccb30b5e6afe23ead1f465d469132f66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abdullahsaeed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anicaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azkahalal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barbymodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byholleyshae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centurionam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chestnutcafeandeatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocantine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciscothailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collectableautomobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.designdiyidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eekorentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstnationationalcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garmenconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houltoninstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpclearinghouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infashpick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipasswords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istioforosnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jag-hair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkoolook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kstueme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locuramarina63.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcalts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mitigationearnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myparisvisit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyspri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outlooo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornochilango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.practicalmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rentclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roiandhanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royalatlantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.satxredzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seafoodandspaghettiworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secgamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexseqhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shanejustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sims3cri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixerscamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supergrowthllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.termofisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theonespa-toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.to2bebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tostreams.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbangym.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xuploading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yxs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdullahsaeed.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anicaclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azkahalal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barbymodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byholleyshae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centurionam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chestnutcafeandeatery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocantine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscothailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectableautomobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designdiyidea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eekorentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastbody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstnationationalcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garmenconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houltoninstitute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpclearinghouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infashpick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipasswords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istioforosnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jag-hair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkoolook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kstueme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locuramarina63.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcalts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitigationearnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myparisvisit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyspri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlooo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornochilango.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practicalmaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rentclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roiandhanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalatlantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satxredzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafoodandspaghettiworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secgamer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexseqhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanejustin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sims3cri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixerscamp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supergrowthllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termofisher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theonespa-toronto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'to2bebe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tostreams.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbangym.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuploading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yxs.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f4fa4370b0000040300463044022077460699014fa62586701f70aa714a9f536caa9fa6daae050efd16cc59c27ff5022078c209f35396fa4a4e84b442a21b1c03752709166f820c18e4f27d9fe06b9310007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f4fa437290000040300473045022100bae9170e9a3b7538fc6c890cd48ce85529f0364c2ddb9582a5c2f1017f4eb20d02205b620b1ec4207d9ff359e34ae22d7b7d571e34776221defa000bac1d9b4314d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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