culvert.shop

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:d9:04:41:22:f7:40:09:df:11:7f:39:0b:31:ad:2a:3a was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=culvert.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:d9:04:41:22:f7:40:09:df:11:7f:39:0b:31:ad:2a:3a
Serial Number (int): 435509611857279957631524838825696688941626
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e9:c7:2a:06:ba:c0:94:38:87:57:63:20:22:52:e1:80:f1:f7:10:3a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:89:8c:5d:f2:e8:aa:04:7f:39:80:67:59:42:12:53:85:90:28:36
Fingerprint (sha256): 1c:7d:0e:74:42:b1:ff:a7:45:60:9c:d5:09:52:98:c6:8c:e6:e8:a1:8c:39:18:aa:51:4e:16:5f:4f:ad:a0:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate culvert.shop

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for culvert.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.autisticbrain.com
*.beepmail.net
*.bibc.online
*.blizzaed.shop
*.blockberrycreative.shop
*.blow-away.shop
*.blue-whale.shop
*.bmw-gs-endurobikes.shop
*.bne56qxpn.shop
*.boa-forma.shop
*.boardroom-online.shop
*.brailled.shop
*.car-entertainment.shop
*.car-heater.shop
*.carnauba.shop
*.chinawkb.shop
*.chinmaya.online
*.chira.shop
*.chiwawa.shop
*.chizay.shop
*.chocoversum.shop
*.crystallex.shop
*.ctek.shop
*.cthuricanes.shop
*.cu-cumber.shop
*.culvert.shop
*.cumtown.shop
*.cuptoat.shop
*.currys-pc.shop
*.custom-merch.shop
*.d-c-c.shop
*.d2item.shop
*.dailyporn.online
*.devjosh.me
*.dothope.org
*.fales.shop
*.fast-fish.shop
*.feedtrack.shop
*.fetroland.shop
*.gonory.com
*.idmpakistan.online
*.labs.cc
*.lambda.au
*.noobsite.com
*.pimon.moe
*.popitrainbow.com
*.rewed.com
*.skiin.club
*.yesman.online
autisticbrain.com
beepmail.net
bibc.online
blizzaed.shop
blockberrycreative.shop
blow-away.shop
blue-whale.shop
bmw-gs-endurobikes.shop
bne56qxpn.shop
boa-forma.shop
boardroom-online.shop
brailled.shop
car-entertainment.shop
car-heater.shop
carnauba.shop
chinawkb.shop
chinmaya.online
chira.shop
chiwawa.shop
chizay.shop
chocoversum.shop
crystallex.shop
ctek.shop
cthuricanes.shop
cu-cumber.shop
culvert.shop
cumtown.shop
cuptoat.shop
currys-pc.shop
custom-merch.shop
d-c-c.shop
d2item.shop
dailyporn.online
devjosh.me
dothope.org
fales.shop
fast-fish.shop
feedtrack.shop
fetroland.shop
gonory.com
idmpakistan.online
labs.cc
lambda.au
noobsite.com
pimon.moe
popitrainbow.com
rewed.com
skiin.club
yesman.online

Other certificates including the domain name culvert.shop

(limited to 100 certificates)
culvert.shop
sni.cloudflaressl.com
culvert.shop
sni.cloudflaressl.com
sni.cloudflaressl.com
aranla.shop
culvert.shop
sni.cloudflaressl.com

Certificate

The complete raw certificate details for culvert.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435509611857279957631524838825696688941626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 01:43:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 01:43:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'culvert.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877411924065180474407686573149379856911133314170613565567146255610990877217286742955753249120269738058150098388293911295441137667903325810163551763334392424575937639496226676675808702560177246929933712373561105152089923342718483443575297237242578725891521145814463204357158484609075120319235780259025141829353006727793802910371541648328674842710487127557296271011353972863819293214737202534953840678540702387717662399666839042406112419577409673190595215492491497405268538469399197408384290719660969734381473084469052087221373924459838207319482780686060488062648956982639411215159497949437100336871074448749623850779825056466272154566797621048634676384957370786458285780649236363717322887836162855968771842668137750919096104588412902745012285046873567179792673697206318054216929662756582402352325695190836704115724147678313050827925710892317923604212026368018819026169323104039106684291662720514331825493655683471649699481781729489207215624556520760783674960722357168239003507050506743493904106236388463580248191337017576467174810491728296944810760859959850318060320853004097489433774255563396908608064027398258813158578196585256597005712989851587971540135958919094204066665196218718157972589624360836828802249871168824661449452252381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9c72a06bac09438875763202252e180f1f7103a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1620 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autisticbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beepmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bibc.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blizzaed.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blockberrycreative.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blow-away.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blue-whale.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmw-gs-endurobikes.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bne56qxpn.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boa-forma.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardroom-online.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brailled.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.car-entertainment.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.car-heater.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnauba.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinawkb.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinmaya.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chira.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiwawa.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chizay.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocoversum.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crystallex.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctek.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cthuricanes.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cu-cumber.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.culvert.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumtown.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuptoat.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.currys-pc.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custom-merch.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d-c-c.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d2item.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dailyporn.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.devjosh.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dothope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fales.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fast-fish.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.feedtrack.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetroland.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gonory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idmpakistan.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lambda.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noobsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pimon.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popitrainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rewed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skiin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesman.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autisticbrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beepmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bibc.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blizzaed.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blockberrycreative.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blow-away.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blue-whale.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-gs-endurobikes.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bne56qxpn.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boa-forma.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardroom-online.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brailled.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car-entertainment.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car-heater.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnauba.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinawkb.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinmaya.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chira.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiwawa.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chizay.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocoversum.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystallex.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctek.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cthuricanes.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cu-cumber.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culvert.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumtown.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuptoat.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currys-pc.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-merch.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd-c-c.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd2item.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyporn.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devjosh.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dothope.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fales.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast-fish.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedtrack.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetroland.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idmpakistan.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambda.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noobsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pimon.moe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popitrainbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rewed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skiin.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesman.online'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e9264577d000004030047304502207cb6bcd62674cb964e60c7fc21fdd2759b02b710a775958ed4ed29154995ba2e022100d143b33c69c76c1845a23b7319aa57126c53b902a890b436d1217c0c3da340e000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e926457e20000040300473045022100f8cba039cab88c2446e8c1dc24824ecc74d017ca5058ea1158aeda6359ecb6c8022052b43109f79f6e4dc4889475efb13718714b148bd70288dac2cb8c907bf0b83a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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