mneands.com

Issued by R3

About this certificate

This digital certificate with serial number 04:cb:a6:5d:a9:69:09:7d:6a:c5:64:8d:95:2b:23:0f:89:ce was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mneands.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cb:a6:5d:a9:69:09:7d:6a:c5:64:8d:95:2b:23:0f:89:ce
Serial Number (int): 417747602378948751509590131033708881217998
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 41:52:02:cb:4e:7f:89:2e:f8:53:69:33:05:fb:1b:41:1e:b1:0e:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:37:9b:7a:4d:50:56:46:51:a4:a2:55:a4:97:db:9f:0c:1e:19:12
Fingerprint (sha256): 23:f4:71:5e:9e:f5:c7:7e:61:32:a7:fb:f0:07:26:c3:a5:2b:ec:5b:5c:c5:a0:aa:fa:bd:c4:08:2e:a9:c9:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mneands.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mneands.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2ehypotheekberekenen.nl
*.50-shades-of-grey-movie.info
*.aidsprojectci.org
*.alternativabolivariana.org
*.animewarrior.pro
*.arcadius.group
*.asiascandal.info
*.barrafuerzaverde.org
*.bestdarkstar.info
*.blau.group
*.bluedvideo.run
*.body-piercings.info
*.canary-islands.info
*.chatib.info
*.chelseagreen.co
*.controversiasmexico.org
*.dewa-poker.info
*.doorstop.info
*.elq.me
*.enkhnomin.info
*.first-media.info
*.game-over.info
*.gaojishipin.run
*.global-voices.info
*.gvfuck.run
*.hack-fb.info
*.kailua-kona.info
*.konfi-camp.info
*.lotuscafeca.com
*.maps-bg.info
*.mariamemorialhighschool.com
*.mneands.com
*.multitudefoundation.org
*.nelp.info
*.pays-de-la-loire.info
*.rbtv77.live
*.renogy.co
*.school2018.org
*.sexvietnam.info
*.sinichka.info
*.soft4dle.com
*.sumai-sapo.info
*.theindianaroma.com
*.theministryofspeed.com.au
*.tinatapas.com
*.totalhomefinance.com
*.twentiethwither.cn
*.waterspout.info
*.websnap.io
*.zhengmei04.info
2ehypotheekberekenen.nl
50-shades-of-grey-movie.info
aidsprojectci.org
alternativabolivariana.org
animewarrior.pro
arcadius.group
asiascandal.info
barrafuerzaverde.org
bestdarkstar.info
blau.group
bluedvideo.run
body-piercings.info
canary-islands.info
chatib.info
chelseagreen.co
controversiasmexico.org
dewa-poker.info
doorstop.info
elq.me
enkhnomin.info
first-media.info
game-over.info
gaojishipin.run
global-voices.info
gvfuck.run
hack-fb.info
kailua-kona.info
konfi-camp.info
lotuscafeca.com
maps-bg.info
mariamemorialhighschool.com
mneands.com
multitudefoundation.org
nelp.info
pays-de-la-loire.info
rbtv77.live
renogy.co
school2018.org
sexvietnam.info
sinichka.info
soft4dle.com
sumai-sapo.info
theindianaroma.com
theministryofspeed.com.au
tinatapas.com
totalhomefinance.com
twentiethwither.cn
waterspout.info
websnap.io
zhengmei04.info

Other certificates including the domain name mneands.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mneands.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417747602378948751509590131033708881217998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 18:49:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-21 18:49:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mneands.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917975380741191050965282664649684626906467034587339072115271635014354495341454881164852295687857244962814465922493439312275211624660216873154597810543189873992661535374850255498379850657304123958056808547854374726907363044370512438899550584192363525861243476362581383732745357974101587974547662791421371915277902443345817886941132328005551661420236378322791438795470064818428038922114147278276233363245921732387606481387855930708620005881539283623040091157692572182437610741220786422469220659973639700017398625926075770523248860755573640326771117092319872991633605264351548657653369126278096265829433308127847496330575923651850975987306870825210905537994398679889442059952253165652561499875665195157252736110381450039253803597119811952456920328514587537088865439437742940142618545228658186816037782606654492359098551945220101660857516254676975228695933141342851246943127015720244914342492018550499299468604978049015527435335512518832809792606973095995871701649551755356954226618762073674901393292339242467097898558669650433344263415100263940177626312869634152452249908352818998492419170993217478270718902932556999949117136595518415465745772604032224406644247880595211162562807417524876083922393848369618293370517667250329071201790019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							415202cb4e7f892ef853693305fb1b411eb10efd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1890 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2ehypotheekberekenen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.50-shades-of-grey-movie.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aidsprojectci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alternativabolivariana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animewarrior.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arcadius.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asiascandal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barrafuerzaverde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestdarkstar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blau.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluedvideo.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.body-piercings.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canary-islands.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatib.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chelseagreen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controversiasmexico.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dewa-poker.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doorstop.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elq.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enkhnomin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.first-media.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.game-over.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaojishipin.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.global-voices.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gvfuck.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hack-fb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kailua-kona.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konfi-camp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lotuscafeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maps-bg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mariamemorialhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mneands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multitudefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nelp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pays-de-la-loire.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbtv77.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renogy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.school2018.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexvietnam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sinichka.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soft4dle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sumai-sapo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theindianaroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theministryofspeed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tinatapas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalhomefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twentiethwither.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterspout.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.websnap.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhengmei04.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2ehypotheekberekenen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50-shades-of-grey-movie.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidsprojectci.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativabolivariana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animewarrior.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcadius.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asiascandal.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barrafuerzaverde.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestdarkstar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blau.group'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluedvideo.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'body-piercings.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canary-islands.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatib.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chelseagreen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controversiasmexico.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dewa-poker.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doorstop.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elq.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enkhnomin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'first-media.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'game-over.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaojishipin.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global-voices.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gvfuck.run'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hack-fb.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kailua-kona.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfi-camp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lotuscafeca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps-bg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariamemorialhighschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mneands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multitudefoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelp.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pays-de-la-loire.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbtv77.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renogy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school2018.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexvietnam.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinichka.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soft4dle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumai-sapo.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theindianaroma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theministryofspeed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinatapas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalhomefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twentiethwither.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterspout.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websnap.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhengmei04.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f075b1c0e00000403004830460221009c2623857641ac6cae77430a8d3fb23508e7959ac0ff4e9255bce5e6f197c6b7022100df7c1bd1d5c1e74204548916e458073351e7c711945ae630ffc64b31f1c250c200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f075b1e230000040300473045022100fa7bf9f93627f8f9cc4411392fd47eafb0b6bcc133a8470692709b349da844ea02206a808cb78f32d0980b64ac99dad007ba779e345eac62f12642e3ac3b45d1f72e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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