straightkinda.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3e:ce:48:9f:3f:a7:bf:2d:c9:a3:ed:f2:be:5d:12:64:3d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=straightkinda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:ce:48:9f:3f:a7:bf:2d:c9:a3:ed:f2:be:5d:12:64:3d
Serial Number (int): 282708562586830848188720423967423437366333
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:02:da:05:07:5d:54:0f:4a:38:83:4b:99:a4:ee:49:70:2a:14:c7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:7d:a1:ca:2e:6d:eb:c1:84:87:39:3e:41:49:93:66:a8:4e:f8:c1
Fingerprint (sha256): 28:1d:72:d2:33:b2:0a:bf:60:d4:bf:fb:07:96:d9:be:8a:9f:96:9c:e0:5f:aa:bb:7d:71:22:9e:22:99:8a:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate straightkinda.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for straightkinda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.3cxpbx.com.au
*.99aip.com
*.accessdane.com
*.astoldbybex.com
*.b-pk.cc
*.ballhopper.com
*.biblicaltimestheatre.com
*.blacktea.com.au
*.blindquotes.com.au
*.bnjworks4u.com
*.booklivemusic.com.au
*.brandify.com.au
*.burcincos.com
*.carrepairs.co.za
*.casateconmigo.es
*.deuttrade.com
*.dizzim.tv
*.e-knigi.net
*.finestay.co
*.gadget-pratique.com
*.hartlandamerica.com
*.henrymakov.com
*.indepndt.com
*.inlamag.com
*.iplaysoft.net
*.kcom-shares.com
*.kinbeer.com
*.krishnasenonline.org
*.maryky.com
*.pabbly.co
*.proyectoguadalupe.com
*.qiuxia77.com
*.recumbent-bikes-truth-for-you.com
*.rinconchivoradio.com
*.rubeehq.com
*.russia-vulcan.com
*.shockwave.au
*.spicemeridian.com
*.straightkinda.com
*.suying000.com
*.tc88883.cc
*.theartgardencrafts.com
*.themodernmomsclub.com
*.travelyric.com
*.videoslucrativos.co
*.whichdesigner.com.au
*.whichliposuction.com.au
*.winterparkfarms.com
*.xxhu85.com
*.xy2163.com
3cxpbx.com.au
99aip.com
accessdane.com
astoldbybex.com
b-pk.cc
ballhopper.com
biblicaltimestheatre.com
blacktea.com.au
blindquotes.com.au
bnjworks4u.com
booklivemusic.com.au
brandify.com.au
burcincos.com
carrepairs.co.za
casateconmigo.es
deuttrade.com
dizzim.tv
e-knigi.net
finestay.co
gadget-pratique.com
hartlandamerica.com
henrymakov.com
indepndt.com
inlamag.com
iplaysoft.net
kcom-shares.com
kinbeer.com
krishnasenonline.org
maryky.com
pabbly.co
proyectoguadalupe.com
qiuxia77.com
recumbent-bikes-truth-for-you.com
rinconchivoradio.com
rubeehq.com
russia-vulcan.com
shockwave.au
spicemeridian.com
straightkinda.com
suying000.com
tc88883.cc
theartgardencrafts.com
themodernmomsclub.com
travelyric.com
videoslucrativos.co
whichdesigner.com.au
whichliposuction.com.au
winterparkfarms.com
xxhu85.com
xy2163.com

Other certificates including the domain name straightkinda.com

(limited to 100 certificates)
straightkinda.com
straightkinda.com
straightkinda.com
straightkinda.com
straightkinda.com
straightkinda.com
straightkinda.com
straightkinda.com
straightkinda.com
straightkinda.com

Certificate

The complete raw certificate details for straightkinda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282708562586830848188720423967423437366333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 18:42:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 18:42:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'straightkinda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772849115847815784791126262383454071580792325329031312179804320444410416515777941038872451051823683630933206515317413705490207175424546006724129499728466181173482999846680272741487022585491703496689637634965473296944151569158923939498559428334948247251044835759627021065653809724243139342813636352876200382137658916191164493427694569846155428891698643193815049944487615384340505505860650689127535005336506130585934555810929204638559379287891815664573042725473418019267852492642893728333524774406494233422222428606550858119740478953760600896853932605358063403845886143785498920534261216521347497633552981423372608011736700746287298469812207756299977411643518155811998667550981304226350507627625807789222096200701616300773045011126216219793846308076223996886953510180373566364110065959744048223593980666426547024140316261902462757743788189685488340178314745774709211682239074680406262369812851122734672638883583635764200942976814514088921170437979037927300469041051293561555889312121209259074472744375904687294660904669921580531184573712576682041233536808631427289038967358701409734067434649389203944810303072907412635667077867207599673276156505570695779857778446994638879035432887318541379086444723560297413874441746434296549633692253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad02da05075d540f4a38834b99a4ee49702a14c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1826 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3cxpbx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99aip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accessdane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astoldbybex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b-pk.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ballhopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biblicaltimestheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blacktea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blindquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnjworks4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.booklivemusic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burcincos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrepairs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casateconmigo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deuttrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dizzim.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-knigi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.finestay.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadget-pratique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hartlandamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.henrymakov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indepndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inlamag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iplaysoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcom-shares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krishnasenonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maryky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pabbly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proyectoguadalupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qiuxia77.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recumbent-bikes-truth-for-you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinconchivoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubeehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russia-vulcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shockwave.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spicemeridian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.straightkinda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suying000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tc88883.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theartgardencrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themodernmomsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelyric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoslucrativos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichdesigner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichliposuction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.winterparkfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxhu85.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xy2163.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3cxpbx.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99aip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessdane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astoldbybex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-pk.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ballhopper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblicaltimestheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blacktea.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blindquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnjworks4u.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booklivemusic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandify.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burcincos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrepairs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casateconmigo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deuttrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dizzim.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-knigi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finestay.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadget-pratique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hartlandamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'henrymakov.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indepndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inlamag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iplaysoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcom-shares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinbeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krishnasenonline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maryky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pabbly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proyectoguadalupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiuxia77.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recumbent-bikes-truth-for-you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinconchivoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubeehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russia-vulcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shockwave.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicemeridian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straightkinda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suying000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tc88883.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theartgardencrafts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themodernmomsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelyric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoslucrativos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichdesigner.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichliposuction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winterparkfarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxhu85.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xy2163.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bd9a830ec0000040300473045022078b3b04ae2604eeacd722c576728b9f68c1bce3b2df4c41dc87bce553b774e3b022100b1c96aec548b86fa2840509be3e74296f7e57be40e7cae6dfaa605ec0a2503ea00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bd9a83132000004030046304402202a4a14dc460cd033dc2b83dcf25442d73db39f35e57f98953f17a36d9ce69e270220428a7acd74af0b9e9883c3262ecc359690d15830a85e98bf005a79ed800d8e30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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