oiy.de

Issued by R3

About this certificate

This digital certificate with serial number 03:1e:54:6d:12:fb:4d:de:c1:b4:ef:c3:01:42:ef:e7:db:d4 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oiy.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:54:6d:12:fb:4d:de:c1:b4:ef:c3:01:42:ef:e7:db:d4
Serial Number (int): 271657550299906148372161402513804887579604
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:f3:29:82:31:98:a7:a2:22:07:20:3f:8b:c0:37:aa:42:f9:78:00
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c6:a7:f2:6d:5f:34:54:09:cc:33:8b:a5:68:dc:81:1b:32:3a:34:7f
Fingerprint (sha256): 26:11:ac:71:ed:ea:e5:bb:08:8e:27:41:db:5b:1b:ab:16:cf:c5:35:5a:f6:25:9c:f2:a8:55:9a:54:54:ea:e5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oiy.de

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oiy.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123-hp-setups.us
*.12vm.us
*.aaliyahmendez.us
*.acrdozer.us
*.adidasnmdsxr1.us
*.adidasoutlet-stores.us
*.adipexbuy.us
*.ajer.us
*.allways-always.us
*.americaexpress.us
*.animalbuddy.us
*.arielzaragoza.us
*.automotiveopedia.us
*.betteroffwed.us
*.birthdaydesign.us
*.blackstone-maine.us
*.blueprairielabs.us
*.boinkshop.us
*.bonefashion.us
*.brandfashion.us
*.breathingspace.us
*.brotherdriver.us
*.buffets.com.au
*.businessecho.us
*.businessformula.us
*.businesshandsome.us
*.businesskayak.us
*.businesslucky.us
*.businesssplash.us
*.businesssweet.us
*.bvcde.us
*.cafetinha.us
*.cameleonpaints.us
*.canadagoosejackets-ctb.us
*.canadanews.us
*.catch-forum.us
*.citytour.com.au
*.condamine.com.au
*.costcotravel.cm
*.djtenora.com
*.fishingsuitusa.com
*.fisicatic.org
*.jyi.de
*.oiy.de
*.tulsa.cc
*.win10key.org
*.xkf.de
*.xsf.de
*.xvide9s.co
*.yzl.de
123-hp-setups.us
12vm.us
aaliyahmendez.us
acrdozer.us
adidasnmdsxr1.us
adidasoutlet-stores.us
adipexbuy.us
ajer.us
allways-always.us
americaexpress.us
animalbuddy.us
arielzaragoza.us
automotiveopedia.us
betteroffwed.us
birthdaydesign.us
blackstone-maine.us
blueprairielabs.us
boinkshop.us
bonefashion.us
brandfashion.us
breathingspace.us
brotherdriver.us
buffets.com.au
businessecho.us
businessformula.us
businesshandsome.us
businesskayak.us
businesslucky.us
businesssplash.us
businesssweet.us
bvcde.us
cafetinha.us
cameleonpaints.us
canadagoosejackets-ctb.us
canadanews.us
catch-forum.us
citytour.com.au
condamine.com.au
costcotravel.cm
djtenora.com
fishingsuitusa.com
fisicatic.org
jyi.de
oiy.de
tulsa.cc
win10key.org
xkf.de
xsf.de
xvide9s.co
yzl.de

Other certificates including the domain name oiy.de

(limited to 100 certificates)
oiy.de
oiy.de
oiy.de
www.oiy.de
www.oiy.de
www.oiy.de
oiy.de
oiy.de
oiy.de

Certificate

The complete raw certificate details for oiy.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271657550299906148372161402513804887579604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 15:09:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 15:09:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oiy.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 942378989327445672126298958145850717924549540345768093449315543107926359878147687087529860196675009164995034911032532671724616449200315180141662683200055217997944946600478397731975547723665037107875163489403238803905446579403734631146497035735534211634154621034917093937291819541005552746988823632069471964637234146870796445305394705902011486848604245670153366214956912281374521767060487903985005346594598101729230249826210127263566195649107567887034928669379211929772139925074524571975178162921579195326852963409261179375614204256910811028934326267942202309505190092666939133987197015277101616667574124846284844734127443278729389070231076417458765115169279672002586058411919575849570213531336068775186424506754806434965523255903439614876975569308862479403804999282749867913024881170142177450999835287361746554929454857535776018212044842549944468643172159925154862863616959217790583324538579019298273130568254312016583317678260062484556873853247621903448247039713672819986557784026045868103027909903713847927768326571838826310183642868794693318441690365491245690998450790606756254658728993124278078050306278224845388051941915078782686228042351290833608306605133065644053873114290998709569186394555731672509744814478479603212581996863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18f329823198a7a22207203f8bc037aa42f97800
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1708 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123-hp-setups.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.12vm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaliyahmendez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acrdozer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adidasnmdsxr1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adidasoutlet-stores.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adipexbuy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allways-always.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americaexpress.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animalbuddy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arielzaragoza.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.automotiveopedia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.betteroffwed.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birthdaydesign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackstone-maine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueprairielabs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boinkshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bonefashion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandfashion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breathingspace.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brotherdriver.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buffets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessecho.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessformula.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesshandsome.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesskayak.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesslucky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesssplash.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businesssweet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bvcde.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafetinha.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cameleonpaints.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadagoosejackets-ctb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadanews.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catch-forum.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citytour.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.condamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.costcotravel.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djtenora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishingsuitusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fisicatic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jyi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oiy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tulsa.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.win10key.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xkf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xsf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xvide9s.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yzl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123-hp-setups.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12vm.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaliyahmendez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrdozer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adidasnmdsxr1.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adidasoutlet-stores.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adipexbuy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allways-always.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americaexpress.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalbuddy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arielzaragoza.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automotiveopedia.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betteroffwed.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birthdaydesign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackstone-maine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprairielabs.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boinkshop.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonefashion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandfashion.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breathingspace.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brotherdriver.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessecho.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessformula.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshandsome.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesskayak.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesslucky.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesssplash.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesssweet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvcde.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafetinha.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cameleonpaints.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadagoosejackets-ctb.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadanews.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catch-forum.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citytour.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costcotravel.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djtenora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingsuitusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisicatic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jyi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oiy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tulsa.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'win10key.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xkf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xsf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xvide9s.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yzl.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c6917252300000403004730450220393fa1f78be96217483a29db96ecca803a0990cc4d707d938373544548b9cc34022100bf8cb63f7a36d62132b350530f2cdf3c66565bd87bd2ef55dc5b08b66efd8468007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c6917253b0000040300473045022100e03dc548943ffa4ba40b23072795822dcf65829c2b7189b7bf99791fbba962b8022028d4c3cdda001135d0f8b2dc7f9cd1117f1fa17eb8a9853b656eb9636614fae5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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