totkik.com

Issued by R3

About this certificate

This digital certificate with serial number 04:74:5f:cb:2a:9a:d1:b6:34:3e:b5:4e:f6:94:5d:e2:58:66 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=totkik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:5f:cb:2a:9a:d1:b6:34:3e:b5:4e:f6:94:5d:e2:58:66
Serial Number (int): 388049229849858940945020022503238506010726
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 06:d9:4b:02:ed:6a:50:64:9c:40:25:f8:a2:fc:4c:77:a2:79:d6:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ab:51:98:e9:c8:63:b3:d7:82:c6:7b:73:bb:fb:fb:a8:c8:50:40:6c
Fingerprint (sha256): 1d:c4:c8:85:41:ca:17:3a:4e:ed:5a:28:78:22:9d:c0:2c:30:5b:38:0f:23:b5:3b:b5:58:09:8d:fc:52:34:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate totkik.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for totkik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aceairco.com
*.ahuyshop.com
*.arrowpathvc.com
*.atoceanic.co
*.boardreviewbooks.com
*.chilltowncollectibles.com
*.cimaflash.co
*.cuimunhs.org
*.danceworksoftroy.com
*.dividingwestern.com
*.dsaiugbgfc8pp.com
*.ecogenenergy.info
*.ecommglobalconsulting.com
*.electrolcommission.org.uk
*.fast-tracker.co
*.filmfr.co
*.futebolplyhd.com
*.getvero.co
*.greyhoundracingbetting.com.au
*.helicopterfinance.co
*.houghtonmifflinresources.com
*.impmm14.com
*.infografiasbaratas.com
*.irpoiran.com
*.javfan.co
*.jczx12635.xyz
*.kino-tv.club
*.lavaldiris.com
*.megaflixhd.net
*.minakai.co
*.muirburnhouse.co.uk
*.ns-passion.com
*.oberlinslac.org
*.onlinesport.club
*.otakushopmaroc.com
*.robloxn.com
*.roxbot.co
*.safetyqld.com.au
*.segugeschichte.de
*.sportsbettingbonus.com.au
*.stayl.club
*.sunrainfireplace.com
*.tapewormready.com
*.torontodomainer.com
*.totkik.com
*.trimsixeof.be
*.twinflameguidance555.com
*.urbansurvivalguy.com
*.various.au
*.zee-flix.club
aceairco.com
ahuyshop.com
arrowpathvc.com
atoceanic.co
boardreviewbooks.com
chilltowncollectibles.com
cimaflash.co
cuimunhs.org
danceworksoftroy.com
dividingwestern.com
dsaiugbgfc8pp.com
ecogenenergy.info
ecommglobalconsulting.com
electrolcommission.org.uk
fast-tracker.co
filmfr.co
futebolplyhd.com
getvero.co
greyhoundracingbetting.com.au
helicopterfinance.co
houghtonmifflinresources.com
impmm14.com
infografiasbaratas.com
irpoiran.com
javfan.co
jczx12635.xyz
kino-tv.club
lavaldiris.com
megaflixhd.net
minakai.co
muirburnhouse.co.uk
ns-passion.com
oberlinslac.org
onlinesport.club
otakushopmaroc.com
robloxn.com
roxbot.co
safetyqld.com.au
segugeschichte.de
sportsbettingbonus.com.au
stayl.club
sunrainfireplace.com
tapewormready.com
torontodomainer.com
totkik.com
trimsixeof.be
twinflameguidance555.com
urbansurvivalguy.com
various.au
zee-flix.club

Other certificates including the domain name totkik.com

(limited to 100 certificates)
totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
www.totkik.com
totkik.com
totkik.com
totkik.com
totkik.com
*.3shroon.com
totkik.com
totkik.com

Certificate

The complete raw certificate details for totkik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388049229849858940945020022503238506010726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 15:21:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 15:21:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'totkik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 703116515090424395897616746830961554067100331402442143313860948422194962090554710269998519717257584420070533565437545217279520466833063840006800363180106972423016987797891812380943507815457334555718569989425976165184885968327116701002965646199733839031948463528757276979243177275451508860189282097624795754534498401693573704391847090142907302938303009058810553551195302862491387581864162839466316031936647519527315943176596489520438697454130857995534653606536559092307039917252913075776236478869343112262916706104611171694882044307860357067018887466912642513624961346019835504137886134611918766685383256395838576539251852280360418278830668601464745475377044927545745500911971392378952858566102179330952809394598966578605126269243917851441276520229712180739352886469653082969525550135849408734404052653248400372801811287016101911684101746130724274546601300803554531461837908764001876473221266719199185213943222393970271134113266862448647224959275695411031960699107345387213484501464314341514776885921021576023596045569445759143066731453283499467742602597463969061271264504102715225184083780542239122263022035734457825675972074680004243276569567473382011020607270340887815397238537188518036016714343379330240223089177888545387546375803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06d94b02ed6a50649c4025f8a2fc4c77a279d609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aceairco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ahuyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arrowpathvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atoceanic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boardreviewbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chilltowncollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cimaflash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuimunhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.danceworksoftroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dividingwestern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsaiugbgfc8pp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecogenenergy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecommglobalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electrolcommission.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fast-tracker.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmfr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futebolplyhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getvero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greyhoundracingbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helicopterfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houghtonmifflinresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impmm14.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infografiasbaratas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irpoiran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javfan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jczx12635.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kino-tv.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavaldiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megaflixhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minakai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muirburnhouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ns-passion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oberlinslac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinesport.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otakushopmaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roxbot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safetyqld.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.segugeschichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsbettingbonus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stayl.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunrainfireplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tapewormready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontodomainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totkik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trimsixeof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twinflameguidance555.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbansurvivalguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.various.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zee-flix.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceairco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahuyshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowpathvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atoceanic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardreviewbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chilltowncollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimaflash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuimunhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danceworksoftroy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dividingwestern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsaiugbgfc8pp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecogenenergy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecommglobalconsulting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electrolcommission.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fast-tracker.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmfr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futebolplyhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getvero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greyhoundracingbetting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helicopterfinance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houghtonmifflinresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impmm14.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infografiasbaratas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irpoiran.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javfan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jczx12635.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kino-tv.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavaldiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megaflixhd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minakai.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muirburnhouse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns-passion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oberlinslac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinesport.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakushopmaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxbot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetyqld.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segugeschichte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsbettingbonus.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stayl.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrainfireplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapewormready.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontodomainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totkik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimsixeof.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twinflameguidance555.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbansurvivalguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'various.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zee-flix.club'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c3ac906b1000004030047304502205f4f45d9076fb510e198f6bca17e62b949bd04993f1861d7f6d8aeabb9e23a21022100e79f343d443000faa6d1d2494ca62494d99b8cb13e27c216c7b74dfd606b2b44007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3ac906bf0000040300483046022100a8b3a96a59b661b03cf25e30e0c50bf5ebcd955e5f173b5d699172d63c998d2c0221008cc9fb46e179d3fbc1e7636d58a83cbb520f6a43a2f14adefdef7f27a795de4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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