offenda.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:60:3a:2e:ad:bb:c9:1e:b9:fb:35:c7:f5:3c:c2:d1:9f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=offenda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:60:3a:2e:ad:bb:c9:1e:b9:fb:35:c7:f5:3c:c2:d1:9f
Serial Number (int): 358785522722237718153170704187089024635295
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 19:67:8e:c3:ba:ca:d3:ae:72:cd:ab:92:43:cd:de:a0:75:2a:16:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 93:91:93:8f:0c:9b:b2:ae:76:7e:5b:10:fc:a3:26:b1:44:8b:8f:2f
Fingerprint (sha256): 2f:3f:c2:aa:d8:7d:3f:7a:a2:65:fa:32:fe:57:92:5d:ae:69:aa:82:ea:ab:b7:9c:29:72:e4:0c:11:c5:0a:cb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate offenda.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for offenda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1hgirl.com
*.99ro.cc
*.addobe.com
*.aliexpe.com
*.ascentas.com
*.auctionzp.com
*.batdoc.com
*.brazzera.co
*.chorac.com
*.cleansextube.com
*.clintonfund.com
*.compass.cm
*.desirulez.us
*.ecologicallyproduced.com
*.educacioilestic.com
*.emplloyeenavigator.com
*.femdomvip.com
*.ffh.com.au
*.gaminformer.com
*.gewinnen-c-a.com
*.gitllab.com
*.graybird.com
*.greytrip.com
*.groupoikikai.com
*.hdful.co
*.htfashion.co.uk
*.imgwet.com
*.imsatv.com
*.ingcelular.com
*.krantekoppen.be
*.lemonscrub.com.au
*.mccormickrealestate.com
*.mediadisk6.net
*.mekimeki.info
*.metrorail.com.au
*.microsofhup.com
*.mortgagerescue.com.au
*.offenda.com
*.office365inaday.com
*.ogomovies.tv
*.portonvpn.com
*.reappraisers.com
*.retro-games.co
*.risveglio.com
*.streamlabstudio.com
*.surfdome.uk
*.thinxbig.co.uk
*.wrongtown.com
*.xfinitystreamapp.com
*.zabarsky.com
1hgirl.com
99ro.cc
addobe.com
aliexpe.com
ascentas.com
auctionzp.com
batdoc.com
brazzera.co
chorac.com
cleansextube.com
clintonfund.com
compass.cm
desirulez.us
ecologicallyproduced.com
educacioilestic.com
emplloyeenavigator.com
femdomvip.com
ffh.com.au
gaminformer.com
gewinnen-c-a.com
gitllab.com
graybird.com
greytrip.com
groupoikikai.com
hdful.co
htfashion.co.uk
imgwet.com
imsatv.com
ingcelular.com
krantekoppen.be
lemonscrub.com.au
mccormickrealestate.com
mediadisk6.net
mekimeki.info
metrorail.com.au
microsofhup.com
mortgagerescue.com.au
offenda.com
office365inaday.com
ogomovies.tv
portonvpn.com
reappraisers.com
retro-games.co
risveglio.com
streamlabstudio.com
surfdome.uk
thinxbig.co.uk
wrongtown.com
xfinitystreamapp.com
zabarsky.com

Other certificates including the domain name offenda.com

(limited to 100 certificates)
offenda.com
offenda.com
offenda.com
offenda.com
theaddictions.org
keshishyan.com
offenda.com
smartpackage.buzz
offenda.com
offenda.com
shemalefetish.com
offenda.com
norplant72.com
tefillah.com
offenda.com
offenda.com

Certificate

The complete raw certificate details for offenda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358785522722237718153170704187089024635295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 12:25:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 12:25:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'offenda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 682830952438271044576568043922686027656314680872623542702686867587146431401260465234398143420285450777839187264978551798497180005867240151219155901715051241208898135904883487395034840296458130728076151180365504155724840556856813020991964937425114878248166087694457107182109437133950032631150059550930084483790504662719334205064227398720154121035642375362358407286735789782363628805346600853921033309857705303750869822198130270242924261280235531461033844131733181145341105907190977439366258439223897267403747000028345608046073062888891040570427547043843878541282658579904672069298510926905618082051535876337668876204972746309665878370702413980553375600526331631973354053191211513411099819143902238512501287250025781172439848252844833063725782207793689670123429319038635452941439406733553641114407264245584980626168681850477586840124114347826770520891492283825464389749196757678998166267330555456701447953146459609502205325054255752856536205962876261422861101240492219668909213422714146163610359768876626976220435861480745426073583351864390862571050536271054599087907536287868886607456006450140561943510060580812786744213669878845542616341849859360047250796901079163839224002731831436429754562183296461078088184256909493614296949640767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19678ec3bacad3ae72cdab9243cddea0752a16f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1694 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99ro.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auctionzp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brazzera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleansextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clintonfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compass.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educacioilestic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emplloyeenavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gewinnen-c-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graybird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupoikikai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdful.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgwet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ingcelular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krantekoppen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemonscrub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mccormickrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediadisk6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metrorail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.office365inaday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ogomovies.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portonvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retro-games.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamlabstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfdome.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrongtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zabarsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99ro.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auctionzp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazzera.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleansextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clintonfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compass.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educacioilestic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emplloyeenavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffh.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gewinnen-c-a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graybird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupoikikai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdful.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgwet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingcelular.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krantekoppen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemonscrub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccormickrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadisk6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrorail.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office365inaday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ogomovies.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portonvpn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retro-games.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamlabstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfdome.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrongtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zabarsky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d03002ed0000004030047304502210090eb053a784c5521654ea8471a7cf361c7c3457ba46f203ce46d444bd16044ae02206676deb3bdf38a3a920d74a3fd070db66673c2e4f23ec29ae8573ba138a7f84d007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d03002edd00000403004730450221008df73da2ea4e979e98bbe91432e749cebe8d7d7ebc09ac4ff420b052f0bb274e0220272b443ea349d2a01a955014294a2a66e2d8041fbe6f96ca140cf441d8565a37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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