merkata.com

Issued by R3

About this certificate

This digital certificate with serial number 03:8f:93:99:1d:e1:82:f7:3a:a4:e1:47:a9:4a:2f:01:3c:99 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=merkata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:93:99:1d:e1:82:f7:3a:a4:e1:47:a9:4a:2f:01:3c:99
Serial Number (int): 310193427807831425681579185263544222432409
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:8c:43:46:65:22:94:c3:76:49:e9:48:76:50:01:a0:b3:9c:e8:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 84:eb:d4:34:c2:50:67:95:99:8e:e8:8f:2a:ad:ff:e6:5f:2e:be:d5
Fingerprint (sha256): 1e:96:78:09:da:6d:3b:1a:eb:a8:59:3a:db:25:69:0e:95:93:3c:af:61:b5:d9:54:1d:6c:de:08:47:70:cc:9f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate merkata.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for merkata.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.010516.com
*.120scan.us
*.137c.tv
*.africahealthcaresummit.com
*.ai-trader.org
*.aprenderanadar.com
*.askwandaband.com
*.atlantafalconsvsneworleanssaints.us
*.btcpayments.us
*.capnhq.com
*.coinzgecko.us
*.cryptobubble.net
*.der-suedschwarzwald.de
*.diegoagent.us
*.dogeflashminer.com
*.eduviges.com
*.emotionexperience.com
*.esradio.online
*.fancybongwater.us
*.fandpv.us
*.fotografcilarkulubu.com
*.funmonkeygames.com
*.glamourandgainsbyeve.com
*.haggard.net
*.hdcollect.net
*.highstreet5.com
*.huzwisdom.cn
*.khalisa.com
*.kono-jiyu.com
*.koreawindow.net
*.ligthtinthebox.com
*.liliya-med-lipetsk.com
*.mandur.com
*.merkata.com
*.mymedtox.com
*.notthface.com
*.omaah.com
*.pacalt.com
*.primigiorni.com
*.qcmc2006.org
*.qizqalasi.com
*.quieroprogramar.com
*.reto3x3.com
*.seobotan.com
*.thehoffmangroup.biz
*.trmagonline.com
*.turningpayment.com
*.youhurtmyfeelingsmovie.com
*.yourofans.com
*.zarzana.com
010516.com
120scan.us
137c.tv
africahealthcaresummit.com
ai-trader.org
aprenderanadar.com
askwandaband.com
atlantafalconsvsneworleanssaints.us
btcpayments.us
capnhq.com
coinzgecko.us
cryptobubble.net
der-suedschwarzwald.de
diegoagent.us
dogeflashminer.com
eduviges.com
emotionexperience.com
esradio.online
fancybongwater.us
fandpv.us
fotografcilarkulubu.com
funmonkeygames.com
glamourandgainsbyeve.com
haggard.net
hdcollect.net
highstreet5.com
huzwisdom.cn
khalisa.com
kono-jiyu.com
koreawindow.net
ligthtinthebox.com
liliya-med-lipetsk.com
mandur.com
merkata.com
mymedtox.com
notthface.com
omaah.com
pacalt.com
primigiorni.com
qcmc2006.org
qizqalasi.com
quieroprogramar.com
reto3x3.com
seobotan.com
thehoffmangroup.biz
trmagonline.com
turningpayment.com
youhurtmyfeelingsmovie.com
yourofans.com
zarzana.com

Other certificates including the domain name merkata.com

(limited to 100 certificates)
merkata.com
merkata.com
merkata.com
merkata.com
merkata.com
artofthecreator.com
solflere.com
merkata.com
merkata.com
biznow.co
australianwhisky.online
www.australianwhisky.online

Certificate

The complete raw certificate details for merkata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310193427807831425681579185263544222432409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 21:09:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 21:09:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'merkata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753452119829160635134193167809189253502793007747204499459148812944717333065152926858185755872000016690586444649349862577815157763968603215301325172576107307724635860850188511204890712120996206327105851292848823971855279145318636539321916607442891543422890485846578200674495758697695508558833373084236704156919675818265575729634016782285175858426628857083716087917540668339436713936000192375333888496388409503285454022577407683044716143526339583724659975118124074235150478237238409027451796841724230537847705530469737000136259556034365974918073259811853596064762537611969833629370692159872887522596594814482535183008776700012692827654945394692773824228327218104732946996595526992245023410181804173336160792735246348932098773134248231557173241866177933323356638509732424076575274494338520779103764132702316496540169490042026411799162221123652801496111731940523548273592677948425362046844329037109181381315059164271719874067254905156620054498811628515113830488574295147276867873128389693872098814096534810075046729275009653415414124429338173359414796625637004231843831193234882826831377891465242635295443066241430077167627487949230122226422100742969126090375166603723794117377026083061053334793834674952586174478154007849872464420376869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a8c4346652294c37649e948765001a0b39ce81c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.010516.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.120scan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.137c.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.africahealthcaresummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ai-trader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aprenderanadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.askwandaband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlantafalconsvsneworleanssaints.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcpayments.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.capnhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinzgecko.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptobubble.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.der-suedschwarzwald.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diegoagent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogeflashminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eduviges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emotionexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esradio.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fancybongwater.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fandpv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotografcilarkulubu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funmonkeygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glamourandgainsbyeve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haggard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdcollect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.highstreet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huzwisdom.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khalisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kono-jiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koreawindow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ligthtinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liliya-med-lipetsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mandur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merkata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymedtox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.notthface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omaah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pacalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.primigiorni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qcmc2006.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qizqalasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quieroprogramar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reto3x3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seobotan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehoffmangroup.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trmagonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turningpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youhurtmyfeelingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yourofans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zarzana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '010516.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '120scan.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '137c.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africahealthcaresummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ai-trader.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aprenderanadar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askwandaband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantafalconsvsneworleanssaints.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcpayments.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capnhq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinzgecko.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptobubble.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'der-suedschwarzwald.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diegoagent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogeflashminer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduviges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emotionexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esradio.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fancybongwater.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fandpv.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotografcilarkulubu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funmonkeygames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glamourandgainsbyeve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haggard.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdcollect.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highstreet5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huzwisdom.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khalisa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kono-jiyu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreawindow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ligthtinthebox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liliya-med-lipetsk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merkata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymedtox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notthface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omaah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacalt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primigiorni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcmc2006.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qizqalasi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quieroprogramar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reto3x3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seobotan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehoffmangroup.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trmagonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turningpayment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youhurtmyfeelingsmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourofans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zarzana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b35634ad900000403004730450220594b68fbaa4a97eec2bffdc68325e45350d6b8e8a56ae10b10d59c7640d152ad022100cbb2a3eb227c52edb5b4849ad3927b6a2ab613d9d76f8f87f85e3a7b2a41663800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b35634b450000040300473045022100e9343744b63a4c25ecb0e45456cd86c629a9d2d4fa51c3877cba917f20928ddb02203c4b222061e3bc3376c31bd57b06a12933517b0d9dad1502f437f5fef7697da7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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