diyana.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ba:2f:33:f3:cf:de:35:f7:2e:a3:e2:3f:ea:37:71:74:20 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=diyana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:2f:33:f3:cf:de:35:f7:2e:a3:e2:3f:ea:37:71:74:20
Serial Number (int): 324692121510611504706637199126342772290592
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 94:57:a1:07:6d:c1:fa:e4:01:84:d7:66:37:fa:92:1d:bb:c1:07:94
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:20:71:bc:5d:78:f4:64:f1:73:11:6f:0e:02:85:6a:26:71:86:b6
Fingerprint (sha256): 1d:23:53:19:a8:25:80:33:06:da:ca:67:56:30:0e:07:95:1d:01:ff:4c:3f:84:9d:7b:7c:05:67:15:80:13:47

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate diyana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diyana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.118av.cc
*.88888.productions
*.alibuda.com
*.altona.church
*.atira.name
*.avirohotel.com
*.bachat-bazar.online
*.barberini.com
*.bijus.me
*.brillianceschool.com
*.btmexlex.info
*.buildco.com.au
*.cancleanpressurewashers.com
*.cistit.com
*.cloudmeal.io
*.cocinamesta.com
*.datageeks.io
*.dejung.com
*.developpeurs.net
*.diyana.com
*.ebaybooks.com
*.ffekkai.com
*.fio.au
*.forduck01.com
*.gardensjardinseterrarios.site
*.glenn52.com
*.globalpaddler.com
*.globeapts.com
*.gorodovoy.com
*.homeheal.care
*.ijijiji.com
*.jenkins.events
*.jojjmaliff.live
*.katem.com
*.krupin.com
*.lescahiers.com
*.lestview.com
*.mainardi.com
*.mineathon.com
*.petespossevt.com
*.screenshoter.live
*.sedeostool.com
*.simsfins.com
*.smiths.academy
*.tatevik.com
*.tvcchorseproduction.com
*.txranchconnection.com
*.usr.au
*.vanguardtattoostudios.com
*.ydun.cc
118av.cc
88888.productions
alibuda.com
altona.church
atira.name
avirohotel.com
bachat-bazar.online
barberini.com
bijus.me
brillianceschool.com
btmexlex.info
buildco.com.au
cancleanpressurewashers.com
cistit.com
cloudmeal.io
cocinamesta.com
datageeks.io
dejung.com
developpeurs.net
diyana.com
ebaybooks.com
ffekkai.com
fio.au
forduck01.com
gardensjardinseterrarios.site
glenn52.com
globalpaddler.com
globeapts.com
gorodovoy.com
homeheal.care
ijijiji.com
jenkins.events
jojjmaliff.live
katem.com
krupin.com
lescahiers.com
lestview.com
mainardi.com
mineathon.com
petespossevt.com
screenshoter.live
sedeostool.com
simsfins.com
smiths.academy
tatevik.com
tvcchorseproduction.com
txranchconnection.com
usr.au
vanguardtattoostudios.com
ydun.cc

Other certificates including the domain name diyana.com

(limited to 100 certificates)
unblock.asia
diyana.com
diyana.com
diyana.com
diyana.com
caapakistan.com
diyana.com
dramaturgia.com
nccaa.com
clubesecreto.com
diyana.com
diyana.com
diyana.com
*.222071.com

Certificate

The complete raw certificate details for diyana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324692121510611504706637199126342772290592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 20:12:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 20:12:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diyana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 881210696733112419577060529285981802016599749962857899319879631648349293869840737708749020376514822122738923070355481942007371646767970099379298044079176837746224542244779240414691113237432663493097798503888143949385493999189262319810480704067738739142982063944491385541308063631187064069791923385844262558658591607175475876912346964533403965811301750551566897608481613252857088549708652761511020036208708319156040244901284161437840658876094693101613418483090602556105450351488225150796500913257866906085376112152330221953595678416245857414284811468234110583134784314752751505352919019105969667744802570747121554820972925950327094929764026497439825624844997094731705936163317672250789403843522102332032117989741916943911894830493612563996606747776639508431415204646806781503937982808823735884407915784662565489716265140125215498744444442617034771499449449628969146062645628582339679232466217771083521105251056148351752791568833429281020509902564805335207147234239950081983087215412708653865790971427421581674355391607445858081222343107588770888220493185528742071664528830797152375900054540748797384961074133555585231073531740897935601473233734365278698320035950634483525850666843801844727080323756421735961622476192245723562379239329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9457a1076dc1fae40184d76637fa921dbbc10794
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1678 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.118av.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.88888.productions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altona.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atira.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avirohotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bachat-bazar.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barberini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bijus.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btmexlex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cancleanpressurewashers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cistit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudmeal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocinamesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.datageeks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developpeurs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fio.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forduck01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardensjardinseterrarios.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glenn52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalpaddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeheal.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jenkins.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jojjmaliff.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krupin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lescahiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lestview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainardi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mineathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petespossevt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.screenshoter.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sedeostool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simsfins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smiths.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvcchorseproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txranchconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usr.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanguardtattoostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ydun.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '118av.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '88888.productions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altona.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atira.name'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avirohotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bachat-bazar.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barberini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bijus.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btmexlex.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancleanpressurewashers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cistit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmeal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocinamesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datageeks.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developpeurs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fio.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forduck01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardensjardinseterrarios.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenn52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpaddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeheal.care'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jojjmaliff.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krupin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lescahiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lestview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainardi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petespossevt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenshoter.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedeostool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simsfins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smiths.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvcchorseproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txranchconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usr.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanguardtattoostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ydun.cc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d51eaa0c60000040300463044022035dc8531704816a6dd139941f6e6199823a6f4ca7c85427810022f94629c6f6a0220557bdd9f8262058b8b89a36937716285328eb68e0c5e5e02ae01c535d00308fa007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d51eaa1690000040300473045022100b6d823373b0475f85cffdec7bece503337f00072320cc6aed00a6b2980c2ada702206c2d7aa44f924c5a6b0cd4c6e26eae6add94642fcadc617b1dfc86bf83372749
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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