negarin.shop

Issued by R3

About this certificate

This digital certificate with serial number 03:e9:1d:aa:a3:e9:0f:cd:4f:54:c6:1a:ce:8f:3b:7a:a1:86 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=negarin.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e9:1d:aa:a3:e9:0f:cd:4f:54:c6:1a:ce:8f:3b:7a:a1:86
Serial Number (int): 340662082914700933148466007164010515571078
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:70:50:e3:07:2a:08:76:d1:b8:0f:26:08:95:d3:50:cc:13:08:29
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:f4:b5:71:4f:ad:21:71:a2:b7:18:fd:97:02:47:db:db:f5:8b:e2
Fingerprint (sha256): 22:d9:ce:7b:77:d1:41:1d:bb:68:03:d9:d0:d1:a6:50:5c:cb:39:7e:ba:fc:33:3b:31:d5:cc:09:06:2a:40:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate negarin.shop

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for negarin.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.24hrkeyplumbing.com
*.adventures-in-food.com
*.afishionadosportfishing.com
*.afisqonline.com
*.allthingspinkbeauty.com
*.bartonnutritional.com
*.betterbuisnessbureau.com
*.booksinpdf.com
*.chasebanklogon.com
*.comcvast.com
*.conyernissan.com
*.ddwoodfinishers.com
*.decoffeecompany.com
*.eatsmart.com.au
*.empireautosd.com
*.empowerbraces.com
*.execution.online
*.eyecandy.online
*.faceboofacebook.com
*.flyingphotoschool.com
*.fordaccelerate.com
*.freeukgoodies.com
*.frontiermyyahoo.com
*.fulltillpoker.com
*.funeyetest.com
*.gausarts.com
*.gazettemail.com
*.greenchicskin.com
*.happybirthdayquotesmessages.com
*.honeyharbour.net
*.ideaworld.tv
*.js53777.com
*.kingshondaandtoyota.com
*.kjcpenney.com
*.leton.tv
*.luxoca.com
*.mochasofa.com
*.motorheadco.com
*.najaxconstruction.com
*.negarin.shop
*.picknknitpatterns.com
*.pinoytambayan.tv
*.propriete-privees.com
*.shovup.tv
*.steps-of-sewing.com
*.studymedicines.com
*.tigerdorect.com
*.tkgames.online
*.todaysskinnews.com
*.zamzamsaney.com
24hrkeyplumbing.com
adventures-in-food.com
afishionadosportfishing.com
afisqonline.com
allthingspinkbeauty.com
bartonnutritional.com
betterbuisnessbureau.com
booksinpdf.com
chasebanklogon.com
comcvast.com
conyernissan.com
ddwoodfinishers.com
decoffeecompany.com
eatsmart.com.au
empireautosd.com
empowerbraces.com
execution.online
eyecandy.online
faceboofacebook.com
flyingphotoschool.com
fordaccelerate.com
freeukgoodies.com
frontiermyyahoo.com
fulltillpoker.com
funeyetest.com
gausarts.com
gazettemail.com
greenchicskin.com
happybirthdayquotesmessages.com
honeyharbour.net
ideaworld.tv
js53777.com
kingshondaandtoyota.com
kjcpenney.com
leton.tv
luxoca.com
mochasofa.com
motorheadco.com
najaxconstruction.com
negarin.shop
picknknitpatterns.com
pinoytambayan.tv
propriete-privees.com
shovup.tv
steps-of-sewing.com
studymedicines.com
tigerdorect.com
tkgames.online
todaysskinnews.com
zamzamsaney.com

Other certificates including the domain name negarin.shop

(limited to 100 certificates)
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop

Certificate

The complete raw certificate details for negarin.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu5Rnx7iOMisSn/16Xfch
zT5mPArKv61PmAnm89AYxYlVuK5o6gitI3HJTTQgsMBYkdF1cyC6/DCuexXq6nLH
rDPhQLVyeccmsRtlfJ9Ly7VZ+PbpCZ9+8EiRUjC0+FN8YOODq6nbbGSIRRdQyIFV
+/E4X5baw2FSUg0jiNoZuzvoE+FdBECm4IGxiQxyakRS6XqWJeS+kudxrrTGaaIo
8Am6XjkGf/wSCYDHXRqBgRf0ScoIilzMlDYMogQ/TBjCvDNZhgMnE7p/KHMUlfWW
Bp1+iSlbTbpak80Lal4MRJUJTRL4v3QA4Mk2y6KflfO7i6h+k/M+igdupgdZTSD7
S5rrKbe1QRC7pSETh3msvMCvtTsvR0LnNIPPp0lS13Aupr0sc9vnSimBudtuY5gN
OGC7FD1ydim/y4av4Y67Mg4en3/QyMeSvW6iYxYH8kvW5wLpnIKTcwaGeIQaRFgv
3FcgX8Rv/goxs17YvH2pjbVFxm7MaHZHYNSHXl3wucDYZVisYQXYEGLIH7GPDYxZ
e/VhuKMdLjsDtr1Pkr6S+IeWkkOawXe+Dw5SGUDPPDef4G7prkoscfoYSdbGAWL3
4pq+S/wOQG5xLFg5Fdge9sKBgREkrfkfoLV8TKbm5zmCGkpnA+WOfGHHg5QI36Cu
d4VeiYS+umwV+j671ZlKw90CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340662082914700933148466007164010515571078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 09:26:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 09:26:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'negarin.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765258445305985472660177734162661122443342907857716765235986482346055135471290584629315527456638802333864437784435946226873160489906393081506661391555679239412203326243136271679345349656152214311213169359866411367265135992271881621671015098745351634365232928370728622129955843276587198037197160888023668307552008164743433641258055451087009496234794273395098242029303760909631866652441143427067867766521968293995370011895801118700315563961350497928698122561880466103222787626330991647358545720428474684363217482187531206045998706857942159026881883869487009120012584382208155990484370188129833545722937951285081839877741746340941401651127815665931138644946857845720014697229526811301439323219109214053612349556810796893591835243949865694347183693610801623740981892585158941363426344242074270684826485363198440786225965378890036878598291544354612472518113233024829771539054234984945625637160950442049620686456872881842193412415303165428257826247497012380077591188581232161906897883294629556836550733383678834993892836019796735721980404132153524579336111859355535527782320997316499240528103746803937070344500021181745971117238450708560783522979501299761148015125291125419383812632773226421062494970087309480504850327023375192189051782109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf7050e3072a0876d1b80f260895d350cc130829
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24hrkeyplumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventures-in-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afishionadosportfishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afisqonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allthingspinkbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bartonnutritional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betterbuisnessbureau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.booksinpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chasebanklogon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comcvast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conyernissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddwoodfinishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decoffeecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eatsmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empireautosd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empowerbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.execution.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyecandy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faceboofacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingphotoschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fordaccelerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeukgoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frontiermyyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fulltillpoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funeyetest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gausarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gazettemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenchicskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happybirthdayquotesmessages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeyharbour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ideaworld.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.js53777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingshondaandtoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kjcpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leton.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mochasofa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorheadco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.najaxconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negarin.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picknknitpatterns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinoytambayan.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propriete-privees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shovup.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steps-of-sewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studymedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tigerdorect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tkgames.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaysskinnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zamzamsaney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24hrkeyplumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventures-in-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afishionadosportfishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afisqonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allthingspinkbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonnutritional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betterbuisnessbureau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksinpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasebanklogon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comcvast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conyernissan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddwoodfinishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoffeecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatsmart.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empireautosd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowerbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execution.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyecandy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faceboofacebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingphotoschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fordaccelerate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeukgoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontiermyyahoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fulltillpoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeyetest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gausarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazettemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenchicskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happybirthdayquotesmessages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeyharbour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideaworld.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'js53777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingshondaandtoyota.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcpenney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leton.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mochasofa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorheadco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'najaxconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negarin.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picknknitpatterns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinoytambayan.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propriete-privees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shovup.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps-of-sewing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studymedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tigerdorect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkgames.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysskinnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamzamsaney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e940c1780000004030046304402207156fb7bc67429ee86f156c05fb8639414c7fdec73785007046fcf24d1a963ab02201aa74eae3c36e23634af2cebd841874c97afb6c0b043373f775c5e9e6caf7e2b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e940c17c3000004030047304502203167df6b07a17fe40e7da1441b02512c73ef21d68ffbbef529c514fc9005a4ab022100fa8c652c3574b2c74f1a55fc227d9ec13b6b8c3bbac9715980192d80cc83189d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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