nunn.tv

Issued by R3

About this certificate

This digital certificate with serial number 04:17:0d:48:68:c6:d9:77:c0:ec:aa:7e:8d:a5:aa:81:8f:91 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nunn.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:0d:48:68:c6:d9:77:c0:ec:aa:7e:8d:a5:aa:81:8f:91
Serial Number (int): 356293294100666667638052128348345087397777
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:4a:1d:c2:9e:a1:9a:fb:dc:a5:ea:e3:bf:74:46:b3:38:20:89:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:0c:17:b8:1e:ac:c0:89:3a:b4:57:78:d3:29:42:30:dd:85:7c:16
Fingerprint (sha256): 1f:d2:6b:c7:fb:82:38:a5:ff:98:fc:a4:1a:79:cd:0d:3a:2d:29:ae:38:8f:0d:e7:15:c4:65:07:18:52:e6:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nunn.tv

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nunn.tv

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.420spa.com
*.88mobile.com
*.aiweier.biz
*.assyifa.com
*.avventura.com
*.barrobrunido.com
*.batery.com
*.beersautosales.com
*.bestolaris.com
*.bestsolaria.com
*.bestsolrais.com
*.buenlider.com
*.camly.com
*.canoinhas.com
*.chua.net
*.deine.com
*.demarrage.com
*.dostawa.com
*.flutlicht.com
*.gabhart.com
*.gsasports.com
*.hajama.com
*.hanmaum.com
*.imghosted.com
*.khleg.com
*.kobylin.com
*.liangsao.com
*.lumau2.com
*.mccalmont.com
*.mesoo.com
*.methdtreams.com
*.methetreams.com
*.methstreaams.com
*.methxtreams.com
*.metjstreams.com
*.nobutaka.com
*.nunn.tv
*.nyathi.com
*.oirase.com
*.olimpicastereo.es
*.panduan.com
*.paung.com
*.penazzi.com
*.rafin.com
*.rent1st.us
*.royaldomino.biz
*.saed.com
*.sulkava.com
*.tsukui-saiyou.net
*.zhensan.com
420spa.com
88mobile.com
aiweier.biz
assyifa.com
avventura.com
barrobrunido.com
batery.com
beersautosales.com
bestolaris.com
bestsolaria.com
bestsolrais.com
buenlider.com
camly.com
canoinhas.com
chua.net
deine.com
demarrage.com
dostawa.com
flutlicht.com
gabhart.com
gsasports.com
hajama.com
hanmaum.com
imghosted.com
khleg.com
kobylin.com
liangsao.com
lumau2.com
mccalmont.com
mesoo.com
methdtreams.com
methetreams.com
methstreaams.com
methxtreams.com
metjstreams.com
nobutaka.com
nunn.tv
nyathi.com
oirase.com
olimpicastereo.es
panduan.com
paung.com
penazzi.com
rafin.com
rent1st.us
royaldomino.biz
saed.com
sulkava.com
tsukui-saiyou.net
zhensan.com

Other certificates including the domain name nunn.tv

(limited to 100 certificates)
nunn.tv
nunn.tv
nunn.tv
nunn.tv
nunn.tv

Certificate

The complete raw certificate details for nunn.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356293294100666667638052128348345087397777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 09:08:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:08:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nunn.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745426962876490092843003574131783804758583329897763763389555283279740021226376759369532074331696122197474847366098348299052583741268164776298880787319518653866250448433856832496547404074549765462392399157216595789923171203055815265485903158378147306624284946344203829930520962643438429779013507171419343678299058701813253058313185766757397748917164486596724255960257465099204205329106510117042660515619474071110374346577109589764965981863617652045600457978495899561621248584403332102602632983289566885255283942092333337272330622449133702176493034372919095281098380020532264536300318197365566372365405487800268247043578986182777659786795352087312898950219708351407319311659081887590683046966919722934927150708067231532703189030085299447697854289600589111719188946111431057576999060274579483534284164910719555117400289353704448371670592322043213073095320254264155293425627719788623159935235826315475818722227980847915965415500632305027705908954903166142118489705437485795471378098330928495247621433911669938396613258153147401438940824232121365083946433948836147445095765273258420461042669478225985523808649167281819841768976187493022882943715099304421643365916024842553926259783540966751520838302481544197081663283551460533373157862323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f4a1dc29ea19afbdca5eae3bf7446b3382089cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.420spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.88mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiweier.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assyifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avventura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barrobrunido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beersautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestolaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsolaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsolrais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buenlider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canoinhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chua.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demarrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dostawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flutlicht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gabhart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gsasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hajama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanmaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imghosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kobylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liangsao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lumau2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccalmont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methdtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methetreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methstreaams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methxtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metjstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nobutaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nunn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oirase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olimpicastereo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panduan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.penazzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rafin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rent1st.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.royaldomino.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sulkava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tsukui-saiyou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhensan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '420spa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '88mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiweier.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assyifa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avventura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrobrunido.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beersautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestolaris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsolaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsolrais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buenlider.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoinhas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chua.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demarrage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dostawa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flutlicht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabhart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsasports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hajama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanmaum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imghosted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khleg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kobylin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liangsao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumau2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccalmont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methdtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methetreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methstreaams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methxtreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metjstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nobutaka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nunn.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyathi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oirase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olimpicastereo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panduan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'penazzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rafin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rent1st.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaldomino.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sulkava.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsukui-saiyou.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhensan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9850664400000403004830460221009f0522af415ef79c7f326e616b94951c2e005d8fdb34340ca184f352a4f4122e022100fc080cbfd8d7a21cd03317e61fc83eba03ec84e935fe18df0039521abe1926f60075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a985066540000040300463044022004f7e94156bbc7a0e042bc90055ab5c34d0219285f6a28a3b8ff2f591605c6620220312dac4be6b6eceac258dfceadb025983d9ece10bd7553848005842e00965ed5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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