naurora.shop

Issued by R3

About this certificate

This digital certificate with serial number 03:fa:52:f6:10:16:c7:3e:33:69:6f:a7:4e:ec:9e:5d:26:5c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=naurora.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:52:f6:10:16:c7:3e:33:69:6f:a7:4e:ec:9e:5d:26:5c
Serial Number (int): 346517723852520154421771531272607972009564
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:9c:bb:a9:f0:cf:68:ef:7f:f1:c7:d7:7c:ba:26:c6:32:6f:c7:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:c4:07:8c:5d:25:b6:ea:93:af:23:9b:e0:46:54:e0:c9:ec:02:ca
Fingerprint (sha256): 25:1f:45:ab:0b:c1:b5:a5:b1:20:93:20:09:a2:20:0b:84:ef:e5:23:8f:40:fb:1e:99:89:3a:70:f9:ce:f4:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate naurora.shop

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naurora.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.36otraining.com
*.academu.com
*.beaconpulse.com
*.bigbadboys.com
*.boobstmobile.com
*.caringsurgeons.com
*.casinogratuitenligne.com
*.centerwire.com
*.cgooglechrome.com
*.childrensphotographer.com
*.crapcleaner.com
*.cruiseshiptracker.com
*.digits.au
*.discovertelegram.com
*.explorewildlife.com
*.exxonmobilebusinessaccountonline.com
*.f-a-c-e-b-o-o-k.shop
*.fight1.com
*.guitars-usa.shop
*.handwipers.com
*.inscentec.com
*.javbbus.com
*.lasvegaa.com
*.magsaysaycareer.com
*.mobile-discount.shop
*.mobilenotracker.com
*.naurora.shop
*.nitrition.com
*.nutritionchannel.com
*.ofertasyproductos.com
*.pdfonline.club
*.pregnancytestkits.com
*.reestimate.com
*.securitiesconnect.com
*.sttefrm.com
*.suoerchatlive.com
*.tacobellcareer.com
*.themegamillions.com
*.ubemate.net
*.vakit.com
*.voxfilmeoline.net
*.watchnowhd.com
*.wealthappeal.com
*.wifielpadrino.net
*.winplays.online
*.wwwdefloration.com
*.xjc.com.au
*.xn--hotmail-cie.com
*.yhdm08.net
*.zytwq.net
36otraining.com
academu.com
beaconpulse.com
bigbadboys.com
boobstmobile.com
caringsurgeons.com
casinogratuitenligne.com
centerwire.com
cgooglechrome.com
childrensphotographer.com
crapcleaner.com
cruiseshiptracker.com
digits.au
discovertelegram.com
explorewildlife.com
exxonmobilebusinessaccountonline.com
f-a-c-e-b-o-o-k.shop
fight1.com
guitars-usa.shop
handwipers.com
inscentec.com
javbbus.com
lasvegaa.com
magsaysaycareer.com
mobile-discount.shop
mobilenotracker.com
naurora.shop
nitrition.com
nutritionchannel.com
ofertasyproductos.com
pdfonline.club
pregnancytestkits.com
reestimate.com
securitiesconnect.com
sttefrm.com
suoerchatlive.com
tacobellcareer.com
themegamillions.com
ubemate.net
vakit.com
voxfilmeoline.net
watchnowhd.com
wealthappeal.com
wifielpadrino.net
winplays.online
wwwdefloration.com
xjc.com.au
xn--hotmail-cie.com
yhdm08.net
zytwq.net

Other certificates including the domain name naurora.shop

(limited to 100 certificates)
naurora.shop
hantaiporn.com
naurora.shop
anythingmart.com

Certificate

The complete raw certificate details for naurora.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346517723852520154421771531272607972009564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 03:41:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 03:41:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naurora.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 790901496193413110239721534191699039270033496439577030096053898639003183661310032811684955389529591866868838276081344484699768341885195659023050515941598936856632137376491464534611428113179979729709493378870412191011067836276090721118016453251871724159055646266070323544392685481758316174778359447304177676271197227067696807915014002506299031248219980935604490521509581760834714851671027248251406980832849339528002909144669803660564010915479344543351500036894485770611539754379630900532353999363043000320962363358326923537982172673130684693794645131448871086633064830944447800797786177703058656460879952138000214197261461562587707144397186486662431821560685046475703194615493317459666023196425635649673324097555080985882780227261367004333863662330556170810899885180750771465029398852942598935314022354035493880360563584880531687749027273441871415154300281724069822003385015923581433370880727629141371228829239823066906771204049898720836310428125223059808791490678244536421481722597048311283019810589144639412379502662155508663684044270564446817604100468432368759373148485833181706710516332733136149769073839390346994776497595442703041145532567415448404743677141679461276671703286162904195395626637457012202821681324675084394934753683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							229cbba9f0cf68ef7ff1c7d77cba26c6326fc74f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1922 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.36otraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.academu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beaconpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigbadboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boobstmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caringsurgeons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casinogratuitenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centerwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgooglechrome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.childrensphotographer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crapcleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cruiseshiptracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digits.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discovertelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.explorewildlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exxonmobilebusinessaccountonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.f-a-c-e-b-o-o-k.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fight1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guitars-usa.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.handwipers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inscentec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javbbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasvegaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magsaysaycareer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobile-discount.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilenotracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naurora.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutritionchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ofertasyproductos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdfonline.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pregnancytestkits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.securitiesconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sttefrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suoerchatlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tacobellcareer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themegamillions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubemate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vakit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voxfilmeoline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchnowhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wealthappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wifielpadrino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winplays.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwdefloration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xjc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hotmail-cie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yhdm08.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zytwq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '36otraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaconpulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigbadboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boobstmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caringsurgeons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinogratuitenligne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centerwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgooglechrome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'childrensphotographer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crapcleaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruiseshiptracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digits.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovertelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'explorewildlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exxonmobilebusinessaccountonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f-a-c-e-b-o-o-k.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fight1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guitars-usa.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handwipers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inscentec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javbbus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasvegaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magsaysaycareer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-discount.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilenotracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naurora.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutritionchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofertasyproductos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdfonline.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pregnancytestkits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reestimate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sttefrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suoerchatlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacobellcareer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themegamillions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubemate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voxfilmeoline.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchnowhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthappeal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifielpadrino.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winplays.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdefloration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xjc.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hotmail-cie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yhdm08.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zytwq.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e92d053a70000040300483046022100db18031a060fad8882231b61acbdb8990138286714c613752fb9fd9116a9810b022100fc3b05b65a50f90bdaf121a8b8c40a3bcf830d16d196959a68b4eef319f426e8007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e92d053b90000040300483046022100c409ec6f0f8a7d4d103b8ff87644c01eb52018b21bb43518d098b34a9eb98e73022100fdf8149ca89ab7d7e3b589224a85581f1f96f42b52d1e19a281df3f1302bd46e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007307e4ed57833c347132fe5f3377710b0eae277cf7d8a55c58322e1b76776c6fe5aa0395ff8a2da81b7c7e5a7cd5c96562c4c8e2ec3fb6948926eeaa5c9115e7eef161e927b1d3c1155f7f38907db2701782733341e0fb4f610ab6d197ddf99bd39d0efc2e8a26f600cd477ac99bd5379b80d48796887085c42dff89931755d3291ed5e9d1d8827f872b5591488199b6cbf9600a15e85b14e6f93d2064b48a8b2644896d92f5f691b2a4cb97ead3ec8ebe0a10831919a0bccd7b70db6f322be56d1414211ab5778b6a25aadee0eaf66e084402f246f2327a654ade2f601447e60273db78b190e5726ebe60a3f17ebb8722dc59fe3f6c02106087589b9db6884c