5zigen.com

Issued by R3

About this certificate

This digital certificate with serial number 04:54:12:ce:f5:cb:3d:6c:8c:d6:f2:ea:e2:32:d4:70:ef:23 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=5zigen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:12:ce:f5:cb:3d:6c:8c:d6:f2:ea:e2:32:d4:70:ef:23
Serial Number (int): 377057863250769483877361760556570953969443
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 58:b5:0b:dd:2b:52:9f:36:03:3a:76:33:42:03:7f:fa:0e:77:0b:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6d:8c:9b:fc:b7:9f:5e:9d:c2:fd:17:08:d1:a1:6b:db:f4:f9:9e:6d
Fingerprint (sha256): 1c:c8:45:47:ee:fd:cf:2d:ba:10:7f:cd:aa:99:44:5d:7c:c9:59:27:d4:f1:eb:8b:a2:93:18:4a:f9:e8:8b:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate 5zigen.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5zigen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5zigen.com
*.americangun.com
*.aroughtrade.com
*.athleticfoot.com
*.bostonpv.org
*.cbcradio.com
*.collegesouth.com
*.doralboats.com
*.dvdcases.com
*.felipegiglio.com
*.fetchgroomingsalon.com
*.fiestradiolasvegas.com
*.fililionocupid.com
*.filiting.com
*.findingyourupgrade.com
*.finnysplayhouse.com
*.flash-mp3-player.com
*.flyfaa.com
*.fooddiscarad.com
*.foothillwwp.com
*.fortworthbarbell.com
*.freevuee.com
*.frencentree.com
*.fronterpets.com
*.fullsailunivesity.com
*.fzwwdiacztjbna.com
*.gcerealtors.com
*.genderxstudios.com
*.genticop.com
*.homeschoolfortwo.com
*.hotlingerie.com.au
*.karensquiltingservice.com
*.lawbreaker.com
*.lawresearchgroup.com
*.lbfcompany.com
*.lionsfootball.com
*.livercyst.com
*.livetobe100.com
*.livetv468.me
*.livewebdate.com
*.louisianasportsmen.com
*.lunginfection.com
*.mamakurecipes.com
*.pelotoncloset.com
*.sharplawfirm.org
*.tiffr.net
*.turant.com
*.verywellcasino13.com
*.wwwmededlabs.com
5zigen.com
americangun.com
aroughtrade.com
athleticfoot.com
bostonpv.org
cbcradio.com
collegesouth.com
doralboats.com
dvdcases.com
felipegiglio.com
fetchgroomingsalon.com
fiestradiolasvegas.com
fililionocupid.com
filiting.com
findingyourupgrade.com
finnysplayhouse.com
flash-mp3-player.com
flyfaa.com
fooddiscarad.com
foothillwwp.com
fortworthbarbell.com
freevuee.com
frencentree.com
fronterpets.com
fullsailunivesity.com
fzwwdiacztjbna.com
gcerealtors.com
genderxstudios.com
genticop.com
homeschoolfortwo.com
hotlingerie.com.au
karensquiltingservice.com
lawbreaker.com
lawresearchgroup.com
lbfcompany.com
lionsfootball.com
livercyst.com
livetobe100.com
livetv468.me
livewebdate.com
louisianasportsmen.com
lunginfection.com
mamakurecipes.com
pelotoncloset.com
sharplawfirm.org
tiffr.net
turant.com
verywellcasino13.com
wwwmededlabs.com

Other certificates including the domain name 5zigen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for 5zigen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377057863250769483877361760556570953969443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 16:20:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 16:20:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5zigen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803199055116998742776841037068531301666738401056723992020050026816646301034383883169148397987328681604807028356985588158563341044762710274152784150578750123267653701971041779294865298419775619366074730277888919954167248235920210368836488779345314875529069150968679035029406422075876426350363360247582158783219109007583217037473057563247660318486199914876651330834545318684896774649200540072852638726002802761883948010552425226749217274040055404186299659842571754252882531932072301752647625451556448782094534533303808804024859294654259924961412364519247547115783023478624260350311321966299812789248909471234593632575404273563481119045798692424574385315270809326264172338106408468603522339237178936462446973937548389365203151281262091098695677862512538980323429107053081924912352288088069635582492355775113070442399357426026991128988099557683930681505272367270228424645869609678948122700090913757343516187218710556645487486012512939406211977978236863757758531942119669279206668600105897139132819794672316850297903689619508714994737286156142113866116826098178243789278110338595280857004638311005132929079803429583020845442285215650996836290690006537272214813626637941581535952598611770232027190411429633520788101831526719892858589632783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58b50bdd2b529f36033a763342037ffa0e770b2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5zigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americangun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aroughtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athleticfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bostonpv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbcradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collegesouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doralboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvdcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.felipegiglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fetchgroomingsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiestradiolasvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fililionocupid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filiting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.findingyourupgrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finnysplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flash-mp3-player.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyfaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fooddiscarad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.foothillwwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortworthbarbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freevuee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frencentree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fronterpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullsailunivesity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fzwwdiacztjbna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gcerealtors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genderxstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genticop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeschoolfortwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotlingerie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karensquiltingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawbreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawresearchgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lbfcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lionsfootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livercyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livetobe100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livetv468.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livewebdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.louisianasportsmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunginfection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamakurecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelotoncloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharplawfirm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiffr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verywellcasino13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwmededlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5zigen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americangun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aroughtrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticfoot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bostonpv.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbcradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doralboats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvdcases.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felipegiglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fetchgroomingsalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiestradiolasvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fililionocupid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filiting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findingyourupgrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finnysplayhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash-mp3-player.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyfaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fooddiscarad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foothillwwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortworthbarbell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freevuee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frencentree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fronterpets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullsailunivesity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzwwdiacztjbna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcerealtors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genderxstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genticop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolfortwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotlingerie.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karensquiltingservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawbreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawresearchgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbfcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionsfootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livercyst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetobe100.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livetv468.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livewebdate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'louisianasportsmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunginfection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamakurecipes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelotoncloset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharplawfirm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiffr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verywellcasino13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwmededlabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be8995d550000040300483046022100d7602741f79728ae630459a40f7f10ae11652d1f76e3a1c3777a617664f681d7022100d2627719521976386ad3fbe0f1fcfd28944f7142211b4a7cd5b01215ffe03803007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018be8995d5c0000040300473045022100f22dde821b12f3fef153503e04fb40f1a9b481b43bce9f6ec6ab0eb06a9ac0f7022061fcf168430db63d2e35e3133c121df459f19a17157c53aa5ca4c8b7318de8ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a7fbf842eb01d1f67e076735f081f9bb3f2908cba3b7053bd628a41e7596eee753867e7b8fe328642eaa21b9569056a2534fcaf7f91997d72e17b63bd785679f607bac129e5eaa3fec6098950ef601622e5938b729320c6cacfbecf0b98e27bcdea21bf2e14c8020181f37c63639544d325c5f385d75051f00af384212e0c3cae7e363b0172fd72b5c37259d03228aa9d925da34a201593d7b2dec364ab2191a25299333dec1e5b6ff12427fde0b67861eeab4e95e83cab23c9620920600fb4a653fc1eb67e6ed0f7a330d3cda526d5dbfa2f2602027b60e80592a227891e682f9ece3d2549784a3c3bad1a1d60c96a784fe3caa9dedb1ad7e10051ddab8eb0