kleeno.co

Issued by R3

About this certificate

This digital certificate with serial number 04:70:79:fc:57:3f:90:79:ed:c0:9f:73:b6:f8:b7:f5:35:b8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kleeno.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:70:79:fc:57:3f:90:79:ed:c0:9f:73:b6:f8:b7:f5:35:b8
Serial Number (int): 386722915638090143091863852624200068314552
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f5:6a:8f:e6:ed:ba:8b:b8:6d:86:65:e6:a1:07:c6:bd:e9:a5:5f:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:cd:00:99:42:39:a4:a9:73:5c:78:35:f6:d2:c8:df:77:5b:b5:b1
Fingerprint (sha256): 30:fb:23:be:68:ee:d6:0e:00:ed:bb:93:77:50:91:df:46:cb:d6:a3:e8:c0:21:c2:f9:dc:08:aa:5e:e2:d5:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kleeno.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kleeno.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aleteia.co
*.altema.co
*.anaocaq.com
*.anolink.co
*.apotal.co
*.arabnn.co
*.arooma.co
*.bo-zi27.net
*.bricktownebeer.com
*.cbtspecialists.net
*.colfutbol.com
*.domodi.co
*.doorzo.co
*.downun.co
*.funacumen.com
*.funpot.co
*.gbcoin.co
*.gehalt.co
*.goldfreesoft.site
*.joporn.co
*.kleeno.co
*.lolcow.co
*.manaecolodges.com
*.mation.co
*.matuza.com
*.mcrate.co
*.mobidea.co
*.newportquant.com
*.oku.sx
*.popuk.com
*.rimnow.co
*.sciatica-trial.com
*.seceno.co
*.senler.co
*.sentapost.com
*.shayef.co
*.simfil.co
*.soomal.co
*.sovets.co
*.tanseco.com
*.toloka.co
*.torror.co
*.trigate.com
*.vistaridge.com
*.vodicka.com
*.wiki2.co
*.yamibo.co
*.yookou.co
*.zotero.co
*.zougla.co
aleteia.co
altema.co
anaocaq.com
anolink.co
apotal.co
arabnn.co
arooma.co
bo-zi27.net
bricktownebeer.com
cbtspecialists.net
colfutbol.com
domodi.co
doorzo.co
downun.co
funacumen.com
funpot.co
gbcoin.co
gehalt.co
goldfreesoft.site
joporn.co
kleeno.co
lolcow.co
manaecolodges.com
mation.co
matuza.com
mcrate.co
mobidea.co
newportquant.com
oku.sx
popuk.com
rimnow.co
sciatica-trial.com
seceno.co
senler.co
sentapost.com
shayef.co
simfil.co
soomal.co
sovets.co
tanseco.com
toloka.co
torror.co
trigate.com
vistaridge.com
vodicka.com
wiki2.co
yamibo.co
yookou.co
zotero.co
zougla.co

Other certificates including the domain name kleeno.co

(limited to 100 certificates)
kleeno.co
kleeno.co
kleeno.co
kleeno.co
kleeno.co
kleeno.co
kleeno.co

Certificate

The complete raw certificate details for kleeno.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0U+BeYn9iJRDq6iM+Myk
5wbKHnlEZsFOGuHrrPx/pEcZ2xWPAnTH3+4rFJz8dnxmvO1+TDLY5WIcQq67TMEE
QlIWAI9ExUzoDSCIhWd5tHkcJfUyA321c5NMOGZRemjkiZc6QfGrnM1wbDNz5T9M
UwmYQNhwqx2kCgt8Va6F04a3EixpSE1GdYazILS2MKTQUrCTO4t4mgoU3XnxhsXO
jhSotNemCmcdeUvDs+8WPa9mCD9byZoBTHkGikboPpEiSPL/ZlPXc2+jA4WsoBO5
VUK8ksbUDSOPn8K8OWiUcBlqFxG+OR2/R9bgkazPYXvrsDDOinfLGSh8y3ykhlNM
qWD9l9BZLq9lUBZcmn9Lz/eZxYCR4PetUWVf8ycoCjwX29pdUpTXD1jHQb49shBP
E0L4H6CHXhLBeJirGkDYWBp/CT9U3EqEMoHe6/LnPNhwwccqDt0PZj7OP+mrdxPL
OPcj+HWnmXFj8PbRxLNPQHKJxiNGKcn72FvNX8pYlfAE5eUjiTr5hG45+dEjf5cZ
98tAHFJ6bGzYJHM8ZhAGJYDhdmGH2tIgc8xoEyiqvoymDYy6rRMKjTfyUW6lAhyY
5tKpK8m4O2274hYOXtixEf9P1aeTWIQhWywyuxvUe0OmIAMWXUq5/4A+B1jTsbAY
s0CAynjTputPklLRAm/sCFUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386722915638090143091863852624200068314552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 20:58:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 20:58:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kleeno.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853912622737197131736559235235986064297786510456858531460615194991879004846768756263967179771189724066562840239057112851345272081272647508523452420615417639271916825727767598570200522582604076158680718730596833173565084378122676225393290296655513046719568352545352748569451281589141640939740650979760292010268175756833871324088542866504704103083072449847552849431456821884082052259618155264816141044668587514021898010178792812868165385897368155778665915295283395303712671033914711596826800659375238006171993126310370148731091286016137365479412520743609212961791373026573881009784477993862062737682918690885789703870698977934292073183565767188900659243497831255450276283973843313277752579029773874522922236790929378378975733180201432906200588115906976471133616248958255111427787907526161131281919617223167938759599793762297356920458912141308635406519892239305480309580074873579178137353170871443288747053503513481657591212823807507630107093549529938123323917920210229194813475146532292718575341992312641416874423757168056427343488636441621209044766455793526891008944055449782770559045316557059780050093526532542070828849802871129474184393943345143702580311630360297405680425542750724831315722825813293689517305231280260565159807551573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f56a8fe6edba8bb86d8665e6a107c6bde9a55fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aleteia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altema.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anaocaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anolink.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apotal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arabnn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arooma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bo-zi27.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bricktownebeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbtspecialists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colfutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.domodi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doorzo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.downun.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funacumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funpot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gbcoin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gehalt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldfreesoft.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joporn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kleeno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lolcow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manaecolodges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matuza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcrate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobidea.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newportquant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oku.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.popuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rimnow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciatica-trial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seceno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senler.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentapost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shayef.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simfil.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soomal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sovets.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tanseco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toloka.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torror.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trigate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vistaridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vodicka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiki2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yamibo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yookou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zotero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zougla.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aleteia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altema.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anaocaq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anolink.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apotal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arabnn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arooma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-zi27.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bricktownebeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbtspecialists.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colfutbol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domodi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doorzo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downun.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funacumen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funpot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbcoin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gehalt.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldfreesoft.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joporn.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kleeno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolcow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manaecolodges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mation.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matuza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcrate.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobidea.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newportquant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oku.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rimnow.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciatica-trial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seceno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senler.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentapost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shayef.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simfil.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soomal.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sovets.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanseco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toloka.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torror.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trigate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vistaridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vodicka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yamibo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yookou.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zotero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zougla.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e441f7fff000004030046304402205523aabd5e23c0edb28ecba21a4bc3ec4d431b95b2abab314c8bd1644282566302202439aae132cf8c5d2ca6df09f8129079bf32b7eed76b78f5aa609a2150086aa3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e441f8014000004030047304502201cd778706d9160d753d7c7956e5f00330e857ce6f5f0de77742fa6bb991f51a30221008114e06a9053a093662a3cd03e830a609741511b9292d2b327be5a34791c8831
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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