wandfightteam.com

Issued by R3

About this certificate

This digital certificate with serial number 04:72:04:c1:5a:8f:08:ba:ec:ee:20:17:7b:cb:f2:f8:fe:a4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wandfightteam.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:04:c1:5a:8f:08:ba:ec:ee:20:17:7b:cb:f2:f8:fe:a4
Serial Number (int): 387247654418054001733886509883919286468260
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ce:10:fe:35:ed:99:5e:54:8b:39:77:44:6e:77:92:ca:6b:70:33:04
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:99:ed:3b:87:b9:d3:5d:24:3a:08:f0:01:1d:0f:22:b4:ca:48:3c
Fingerprint (sha256): 20:48:4f:5d:32:57:6c:d3:84:9d:a2:2a:e1:e4:15:b5:bc:02:cc:5f:b6:e2:c7:df:4b:64:9b:6c:56:5e:fc:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wandfightteam.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wandfightteam.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.113751.com
*.2click.com
*.accp.com.au
*.alifemoreinteresting.com
*.areobile.com
*.augie-march.com
*.bootcarelearning.co.uk
*.bwhitefitness.com
*.chsoxing.com
*.comedyclubs.com.au
*.confeccion.online
*.crystalofreunion.com
*.doomfallofmars.com
*.ecanthuspress.com
*.ecmsexpress-scripts.com
*.exercisegym.com.au
*.fraenkisches-weinkontor.com
*.gardenlinked.net
*.generators.co.nz
*.gigglingdogs.com
*.heirlooms.de
*.hornyarea.club
*.hqt333.biz
*.iibilibili.com
*.illustrativemath.org
*.kauaian.org
*.maxgomovies4k.club
*.maxrollgg.com
*.mho.au
*.parispornmovies.de
*.peb.de
*.ristorantemascarpones.com
*.sacramentogoths.com
*.sms-activat.org
*.snake-io.org
*.steuerefklaerung.de
*.steuerterklaerung.de
*.sunnysex.net
*.tagssisalo.ga
*.teamspirit.com.au
*.usla.de
*.wandfightteam.com
*.xn--autol-mua.de
*.xn--briardzchter-jlb.de
*.xn--cambridgedit-qcb.de
*.xn--kondomgrssen-cjb.de
*.xn--kuferkredit-l8a.de
*.xn--vervollstndigen-8kb.de
*.ygreenpacefinancingsettlement.com
*.yuss.tv
113751.com
2click.com
accp.com.au
alifemoreinteresting.com
areobile.com
augie-march.com
bootcarelearning.co.uk
bwhitefitness.com
chsoxing.com
comedyclubs.com.au
confeccion.online
crystalofreunion.com
doomfallofmars.com
ecanthuspress.com
ecmsexpress-scripts.com
exercisegym.com.au
fraenkisches-weinkontor.com
gardenlinked.net
generators.co.nz
gigglingdogs.com
heirlooms.de
hornyarea.club
hqt333.biz
iibilibili.com
illustrativemath.org
kauaian.org
maxgomovies4k.club
maxrollgg.com
mho.au
parispornmovies.de
peb.de
ristorantemascarpones.com
sacramentogoths.com
sms-activat.org
snake-io.org
steuerefklaerung.de
steuerterklaerung.de
sunnysex.net
tagssisalo.ga
teamspirit.com.au
usla.de
wandfightteam.com
xn--autol-mua.de
xn--briardzchter-jlb.de
xn--cambridgedit-qcb.de
xn--kondomgrssen-cjb.de
xn--kuferkredit-l8a.de
xn--vervollstndigen-8kb.de
ygreenpacefinancingsettlement.com
yuss.tv

Other certificates including the domain name wandfightteam.com

(limited to 100 certificates)
wandfightteam.com
wandfightteam.com
wandfightteam.com
wandfightteam.com
wandfightteam.com
wandfightteam.com
wandfightteam.com
wandfightteam.com

Certificate

The complete raw certificate details for wandfightteam.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387247654418054001733886509883919286468260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:50:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 00:50:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wandfightteam.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 980267083000309018110056090681116058261677282587186107001812902855617294876422032849395294605450933494153690466825442017180978923231615512581224293257531689885055271047167301519616765248231914822897058434746382026329057689322302121453000609919703327463346202026637835890419305669099712721559571557466877148021739303739507687393082980124472166606574629990334175354362282446057279962254340253608542192298575958250901126337003962148495011392799781312365807267147943444109025497605559377258181701302329320402879255155518809967123214211573985618702866663372294978709084758799333809416923450589302825269266704673846220146899242715215587515397120821427182585586304358267449080410219239885808750651286162389555161607791553156986609478957711636152815636645894780328060822089900973957888110683894499059485336983686050824910707244711273454546410979441291002148269756821898728854176186148855504696160530045667114242913872892328327923973541078910769626345995374329729520118902056204352092201126579911643315011443013018422122577978633702083088965433726532948830090355143938391151993783528384854898741650464493136949579962934118518453567321420106300689701742554406305948807462310677089045338549831991151528866569796191080458784169390573852366598679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce10fe35ed995e548b3977446e7792ca6b703304
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1964 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.113751.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2click.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alifemoreinteresting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.areobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augie-march.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bootcarelearning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bwhitefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chsoxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comedyclubs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.confeccion.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crystalofreunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doomfallofmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecanthuspress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecmsexpress-scripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exercisegym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fraenkisches-weinkontor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gardenlinked.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generators.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gigglingdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heirlooms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hornyarea.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqt333.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iibilibili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.illustrativemath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kauaian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxgomovies4k.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxrollgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mho.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parispornmovies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ristorantemascarpones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sacramentogoths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sms-activat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snake-io.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuerefklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steuerterklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sunnysex.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tagssisalo.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teamspirit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wandfightteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--autol-mua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--briardzchter-jlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--cambridgedit-qcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kondomgrssen-cjb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--kuferkredit-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--vervollstndigen-8kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ygreenpacefinancingsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yuss.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '113751.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2click.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alifemoreinteresting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'areobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augie-march.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bootcarelearning.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bwhitefitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsoxing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comedyclubs.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confeccion.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crystalofreunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doomfallofmars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecanthuspress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecmsexpress-scripts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exercisegym.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraenkisches-weinkontor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gardenlinked.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generators.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigglingdogs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heirlooms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornyarea.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqt333.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iibilibili.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illustrativemath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauaian.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxgomovies4k.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxrollgg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mho.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parispornmovies.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ristorantemascarpones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacramentogoths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-activat.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snake-io.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuerefklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steuerterklaerung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnysex.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagssisalo.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamspirit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandfightteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--autol-mua.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--briardzchter-jlb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--cambridgedit-qcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kondomgrssen-cjb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--kuferkredit-l8a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--vervollstndigen-8kb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ygreenpacefinancingsettlement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yuss.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c5bb7afd60000040300473045022100a93b7f2f486de9997e0e9bb442a188914048d838ea541f2b182e42300b46ba5302201ea3dd798eee1dc004e659096cd94edcead89cf1e793dc2c13259eb3490695d700760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c5bb7b1de0000040300473045022100da4294c25d11fc376921fd9a6e96bd8fedb8f50eb4e39b1b1d331332daf1249d02202851802bcf3720697810a5eb39787750c3cfbe07b9ad6a66f2a6c4638c275701
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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