sionggang.desa.id

Issued by R3

About this certificate

This digital certificate with serial number 04:e6:fa:55:20:3a:17:8a:12:14:a2:de:86:f6:69:8d:f6:67 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sionggang.desa.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e6:fa:55:20:3a:17:8a:12:14:a2:de:86:f6:69:8d:f6:67
Serial Number (int): 427046837116675663426699185018039446664807
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 28:25:b4:81:be:c8:9c:12:0e:8b:13:e1:80:69:a5:95:41:1d:05:ab
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:1c:ab:da:07:dc:8a:35:42:f9:dd:1f:27:90:d2:ef:58:3d:ff:ba
Fingerprint (sha256): 1a:77:e6:82:17:a1:71:1e:19:49:63:a5:d0:8f:5d:8d:f1:fd:bc:81:02:2f:b8:42:3c:6d:da:2b:c5:fb:3e:f9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sionggang.desa.id

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sionggang.desa.id

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3xmen.com
*.acurapartsonline.com
*.appaloosa.info
*.arinna.store
*.asahanmati.desa.id
*.astrarecruiting.us
*.atelierjeunedietetique.com
*.atioation.com
*.aurora-project.xyz
*.bcuann.com
*.bestbriefreviews.com
*.blackboxdenver.com
*.blueberrypets.com
*.bluelockchapter.com
*.cheapmlbbaseballjerseysshop.com
*.duniz.io
*.echat99.com
*.emomakinemarket.com
*.flatscity.com
*.flixsto.site
*.getusd-online.us
*.goodvd.xyz
*.goorja.com
*.hempgardenstore.com
*.heqanx.com
*.huashengong4.xyz
*.insidelvhm.com
*.kakskazat.com
*.kanalizaciya.tv
*.lenilentil.com
*.literaryscrutiny.com
*.mao-yu.com
*.mthelmet.com
*.ostemy.org
*.philjerrod.com
*.picshotphotography.com
*.pixelstationery.com
*.rumorpedia.net
*.santafeballroom.com
*.sex40.com
*.shormax.com
*.sionggang.desa.id
*.southeastdelco.org
*.tapedlatinas.com
*.teaslalighterss.co
*.telstre.com
*.tooly.com.au
*.worl4free.com
*.xitech.com.au
*.yypifa.cc
3xmen.com
acurapartsonline.com
appaloosa.info
arinna.store
asahanmati.desa.id
astrarecruiting.us
atelierjeunedietetique.com
atioation.com
aurora-project.xyz
bcuann.com
bestbriefreviews.com
blackboxdenver.com
blueberrypets.com
bluelockchapter.com
cheapmlbbaseballjerseysshop.com
duniz.io
echat99.com
emomakinemarket.com
flatscity.com
flixsto.site
getusd-online.us
goodvd.xyz
goorja.com
hempgardenstore.com
heqanx.com
huashengong4.xyz
insidelvhm.com
kakskazat.com
kanalizaciya.tv
lenilentil.com
literaryscrutiny.com
mao-yu.com
mthelmet.com
ostemy.org
philjerrod.com
picshotphotography.com
pixelstationery.com
rumorpedia.net
santafeballroom.com
sex40.com
shormax.com
sionggang.desa.id
southeastdelco.org
tapedlatinas.com
teaslalighterss.co
telstre.com
tooly.com.au
worl4free.com
xitech.com.au
yypifa.cc

Other certificates including the domain name sionggang.desa.id

(limited to 100 certificates)
sionggang.desa.id
sionggang.desa.id
sionggang.desa.id
sionggang.desa.id
sionggang.desa.id

Certificate

The complete raw certificate details for sionggang.desa.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 427046837116675663426699185018039446664807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 00:04:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 00:04:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sionggang.desa.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814307397243334556964762560190811222503308566722944523599388593343948799268271873013221787291582778502299962421381666014900928728373276501044294604051656585908789907250532328464936384101648761688242042612214141932184241661787606353184475481794420263406336439627410637622957916830300904974111216027383282546779008955023468787835056456913624763004335899953588488365117180182989027456392473302872135451918351740686465128162110001651253800942586744852660438210591376624287420619206394876326462982053254925560561842372428980777359332901543021824119017508346019394985613129800906479991290435313749932235219956546743331403317770967625816037066717127843336986552853816366760999184901258799844007268340609844053705286534217519110616497882348898678695104291938616244244595529314060331011811123921504505719067165655655533313454280920995245649860825726621877074716117950103139286743814463037805340223201688632251002493115609535737602957253349320713750093676356735621589335229588560048238312889859359107477709303897213352820466850938358245649742179345436919176732756401989782951032486856158782347546325850557849681633412635420788836759751465163100463878684738338240023395058962709611139362966994374838237167899132675875810725048881018360219384979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2825b481bec89c120e8b13e18069a595411d05ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1804 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3xmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acurapartsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appaloosa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arinna.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asahanmati.desa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astrarecruiting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atelierjeunedietetique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atioation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurora-project.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcuann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestbriefreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboxdenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueberrypets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluelockchapter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapmlbbaseballjerseysshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duniz.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echat99.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emomakinemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flatscity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flixsto.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getusd-online.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodvd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goorja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hempgardenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heqanx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huashengong4.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insidelvhm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kakskazat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanalizaciya.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lenilentil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.literaryscrutiny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mao-yu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mthelmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostemy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philjerrod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picshotphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pixelstationery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rumorpedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santafeballroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sex40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shormax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sionggang.desa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southeastdelco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapedlatinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teaslalighterss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telstre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tooly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worl4free.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xitech.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yypifa.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3xmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acurapartsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appaloosa.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arinna.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asahanmati.desa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrarecruiting.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelierjeunedietetique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atioation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurora-project.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcuann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestbriefreviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboxdenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueberrypets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluelockchapter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapmlbbaseballjerseysshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duniz.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echat99.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emomakinemarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatscity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flixsto.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getusd-online.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodvd.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goorja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempgardenstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heqanx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huashengong4.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidelvhm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kakskazat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanalizaciya.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lenilentil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literaryscrutiny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mao-yu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mthelmet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostemy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philjerrod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picshotphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelstationery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumorpedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santafeballroom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sex40.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shormax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sionggang.desa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southeastdelco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapedlatinas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaslalighterss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telstre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tooly.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worl4free.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xitech.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yypifa.cc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f4b6e4747000004030046304402203e6e9b621d4e9a6fb592f9bef9d8d85a872a858047f38d565fe4ef797349defe0220243272a07a974c6ed67fa248c8c4db38803757d833f580968ddff4f66df4355e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f4b6e47980000040300473045022100ac3ead7109919c5d72d998a1e0fbf518bc16008301fb14e6a1d3f32049bad2e00220674d3a1e0fa338404fa617179fc844a8f75ecb0090adc53058407a901af7945f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00023f86687808bb9030a3a232649356e6352ebd58af754f500d82df4d9fb99c145ef7c5a39b6a611419ff48fcc711c21e8db0226d3dae6a412c58507fea2f24ff235607c85f6d72a52f55efa5eb68dfef1b6d63d9c5a74eaf06d6c9181669039edac0ba9613b2bf50b6d6ac2d205c7f46081ae7d7a6c6ab94acb20fa2d42bf6929f98c7468f68eb156315f0e0bbf8c9ee793bd733a9c778f718ecb2d25c81ade4f15eef9c2598695f7bd21c96d3478138e658bbf5219d7d1d99bcf68db16eedea047a189dff32d9a87bc116a30027c0eaaeefdd84ada7bf968a637ee5a0624691f54975daac69e78244760e7eb24cbc1d20a40db7962d8a36fd2243dd02856826