kiwivapor.co

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:aa:76:9b:fb:4a:e9:2f:7b:f9:22:2e:95:01:ba:a9:bc was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kiwivapor.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:aa:76:9b:fb:4a:e9:2f:7b:f9:22:2e:95:01:ba:a9:bc
Serial Number (int): 397336106810730870821582121041396596648380
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:47:17:65:4c:66:cc:3c:01:ee:b8:e5:83:09:3d:7c:d7:9f:94:bc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d5:c7:68:f4:da:84:19:96:a3:ed:7b:91:b4:d9:d1:dd:37:8e:59:d5
Fingerprint (sha256): 1c:af:96:62:c3:60:8c:07:b0:96:b4:36:ad:54:04:30:1a:39:90:fe:c6:28:19:8e:67:7f:e3:d8:22:c3:c1:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kiwivapor.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiwivapor.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5ggoa.buzz
*.aladeel.me
*.almagemea.info
*.applab.au
*.bbestbuy.ca
*.botroulette.site
*.candyhub.online
*.cctvmelbourne.com
*.ceaftsy.com
*.cisefad.org
*.dekalbcountyga.us
*.demolitionmelbourne.net
*.dogbone.org
*.downgit.io
*.familiengutachten.info
*.fictionexpress.co
*.floodclaims.com.au
*.freebnb.io
*.grenadeers.com
*.grindscafe.net
*.hqporne4.com
*.inkling.au
*.isolated.au
*.jondev.info
*.jop.au
*.kdh.au
*.kiwivapor.co
*.krs.au
*.loginpage.biz
*.lowongan128.net
*.luisavivaroma.com
*.lumsity.com
*.luxorest.com
*.masakitaro.com
*.mountainbiking.tips
*.nationalpark.events
*.north-e.com
*.oneills.farm
*.onlyvolvobus.com
*.peliculasytv.tv
*.praveenprajapati.com
*.rihu.com
*.svkbb.sk
*.swindon.events
*.talkrom.io
*.theonlinepokies63.net
*.ventisearch.net
*.victorias.farm
*.warwick.services
*.worldtr33.net
5ggoa.buzz
aladeel.me
almagemea.info
applab.au
bbestbuy.ca
botroulette.site
candyhub.online
cctvmelbourne.com
ceaftsy.com
cisefad.org
dekalbcountyga.us
demolitionmelbourne.net
dogbone.org
downgit.io
familiengutachten.info
fictionexpress.co
floodclaims.com.au
freebnb.io
grenadeers.com
grindscafe.net
hqporne4.com
inkling.au
isolated.au
jondev.info
jop.au
kdh.au
kiwivapor.co
krs.au
loginpage.biz
lowongan128.net
luisavivaroma.com
lumsity.com
luxorest.com
masakitaro.com
mountainbiking.tips
nationalpark.events
north-e.com
oneills.farm
onlyvolvobus.com
peliculasytv.tv
praveenprajapati.com
rihu.com
svkbb.sk
swindon.events
talkrom.io
theonlinepokies63.net
ventisearch.net
victorias.farm
warwick.services
worldtr33.net

Other certificates including the domain name kiwivapor.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for kiwivapor.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397336106810730870821582121041396596648380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 23:41:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 23:41:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiwivapor.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803638743995350140395473544121083045471248839689122354594398607935529836318690776947549294068028661708232755799340078717201645300389448121432789889332473574925199627682018910498257747379992103075974664147668702336386275225663418078313191130313620587626045135379543008019618184252874205358965248062960766160462074735367175771331816673939823694343671158405811233081185420892989419944395220432468978657552952189875435495112609935575371605871723172444406986336941806872173158844734331354631835553448148619024415497789287447446862807656557758345602734699937715012731410170434776256441581939498215688347586559987587584588804639273289437190760537326473911286681164935208907753158090932782245680114651293605962059113111236811164501162361519108067979380831044266551073363591783532353238884628550420157093678916717969432950898496003583808128225555089261520707294163374668184611212662294987198831401462824135957808944300901902131691748528159869633191333117485241843363161514773652655395597022719982374389215615895497202762014921404503725002298581275586296327260804858546270069718648566630173112852079583275769647709532648937240861732923574530831044230627717835796765493387638688320401909093891618823918650606106870204444971682846230899601944513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							704717654c66cc3c01eeb8e583093d7cd79f94bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1638 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5ggoa.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aladeel.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almagemea.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.applab.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botroulette.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candyhub.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cctvmelbourne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ceaftsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cisefad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dekalbcountyga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demolitionmelbourne.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogbone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downgit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familiengutachten.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fictionexpress.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floodclaims.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freebnb.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grenadeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grindscafe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqporne4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkling.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.isolated.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jondev.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jop.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kdh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwivapor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loginpage.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowongan128.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luisavivaroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxorest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masakitaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountainbiking.tips'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalpark.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.north-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneills.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlyvolvobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peliculasytv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.praveenprajapati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rihu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svkbb.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swindon.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talkrom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theonlinepokies63.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ventisearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorias.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warwick.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldtr33.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5ggoa.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aladeel.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almagemea.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applab.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbestbuy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botroulette.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candyhub.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cctvmelbourne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ceaftsy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisefad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dekalbcountyga.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demolitionmelbourne.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogbone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downgit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familiengutachten.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fictionexpress.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floodclaims.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freebnb.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grenadeers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grindscafe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqporne4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkling.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolated.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jondev.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jop.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwivapor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krs.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loginpage.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lowongan128.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luisavivaroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxorest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masakitaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainbiking.tips'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalpark.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneills.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlyvolvobus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peliculasytv.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'praveenprajapati.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rihu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svkbb.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swindon.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talkrom.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theonlinepokies63.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventisearch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorias.farm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warwick.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldtr33.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d52aa280f0000040300473045022100bc43a774645ece8b510528b26f35aaeb956541112b2289904f78093b422c61a2022062daaed8f9fe7f30d9409095a6b5a7d08ad68887edff5463c6596785f052036d007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d52aa2810000004030046304402201a2aafdfd891e7038b685dd6a057cbe9a0f54ffe004a72ce0cd8ab6a4163ae7b02200ec5cd6dfa234ce672e905f10ffff5f79d7f948bcb92020bff5ed99e1747947e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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