latvijastv.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c5:05:3e:32:56:5a:75:ad:7a:37:97:1a:5d:8d:46:46:4e was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=latvijastv.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:05:3e:32:56:5a:75:ad:7a:37:97:1a:5d:8d:46:46:4e
Serial Number (int): 328379453162051869054072964308760013456974
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0a:79:a6:9e:ae:b7:18:33:19:d2:e2:53:a0:b5:e2:c6:30:32:8b:6a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:6b:ed:4b:21:c3:37:4d:ce:88:ca:de:78:ee:2c:2c:c8:8e:a8:08
Fingerprint (sha256): 34:70:73:97:b7:dd:09:bf:db:50:f4:48:77:cc:a4:82:c0:d4:98:78:71:f6:5b:fe:8a:b9:4b:5c:ea:1a:ce:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate latvijastv.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for latvijastv.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amin-teb.com
*.ancientfutureandbeyond.com
*.billsroll.com
*.ccccatering.com
*.cedany.com
*.cocinas-click.com
*.corakihotel.com
*.dislexya101.com
*.dmz.au
*.edoc.online
*.flying-book.com
*.gokanqiu.net
*.good0013.com
*.gouv-amendes-gouv.com
*.heaveyfetish.com
*.hidra1-mkt.com
*.hoafinancialmanagement.net
*.homerunbar.net
*.honda-accords.com
*.inkyourskin.org
*.javanhd.com
*.javbd.net
*.jerksy.com
*.jionpd.co
*.jumpinbanana.com
*.junkersmalaga.com
*.kinabalu-car-rental.com
*.kuttymovis.com
*.latvijastv.com
*.lcb.au
*.ljlimited.co
*.mard.online
*.moscovita.org
*.nune.online
*.omegleuk.com
*.omibodmodels.com
*.opornpics.com
*.pistegonflable.com
*.providentbanknj.com
*.rosey.au
*.rxresu.com
*.sexbevin.com
*.soakemi.com
*.spodelide.com
*.supergyro.org
*.tossgenre.cn
*.uvaldehillcountry.com
*.wwwprogresive.com
*.xasual.com
amin-teb.com
ancientfutureandbeyond.com
billsroll.com
ccccatering.com
cedany.com
cocinas-click.com
corakihotel.com
dislexya101.com
dmz.au
edoc.online
flying-book.com
gokanqiu.net
good0013.com
gouv-amendes-gouv.com
heaveyfetish.com
hidra1-mkt.com
hoafinancialmanagement.net
homerunbar.net
honda-accords.com
inkyourskin.org
javanhd.com
javbd.net
jerksy.com
jionpd.co
jumpinbanana.com
junkersmalaga.com
kinabalu-car-rental.com
kuttymovis.com
latvijastv.com
lcb.au
ljlimited.co
mard.online
moscovita.org
nune.online
omegleuk.com
omibodmodels.com
opornpics.com
pistegonflable.com
providentbanknj.com
rosey.au
rxresu.com
sexbevin.com
soakemi.com
spodelide.com
supergyro.org
tossgenre.cn
uvaldehillcountry.com
wwwprogresive.com
xasual.com

Other certificates including the domain name latvijastv.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for latvijastv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328379453162051869054072964308760013456974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 14:01:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 14:01:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'latvijastv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 691733513710430698483264261791699662196856296307573418882641176438858715315330295992843567092171267157200352500259852144649538974605026906730988642682189522122153318570720417020369117452827208366636478528631152107016324379148736868334902297259394120947527156481187442669672872709367987399441230789064276412723109164913935460808819549857776460754653878406514616231392128105173340710408809632785310872324416283155489001746051167785572166386462860007115934799308044009268298029633791414402878781870275657979916689209058638788337385086829795979438017129082832651795800658959521317779993973370514778446762899695635153851188526658152098750362084021326349392406018099972304878560416585278405441203532063920240423588065093975281658990149186065169520201536300198346344465024686153384634962743539653492495615374087341313870077598391802156557670664192509083838660677043923221804896117670315121995936052133853084764512283841283554376009836484766958481609463132146613169028255876581878112564957844537889070509814844153943385237120740720143588811887655139645676068157235314740821306603803544294672851739252474881067739575328753741124070262744278909377744359320205591959100697473386184492572094730194496492563311674366670742632929781417623227838679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a79a69eaeb7183319d2e253a0b5e2c630328b6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1664 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amin-teb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancientfutureandbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.billsroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ccccatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocinas-click.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corakihotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dislexya101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmz.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edoc.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flying-book.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gokanqiu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.good0013.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gouv-amendes-gouv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heaveyfetish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hidra1-mkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoafinancialmanagement.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homerunbar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honda-accords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkyourskin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javanhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javbd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerksy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jionpd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jumpinbanana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junkersmalaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinabalu-car-rental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuttymovis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latvijastv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcb.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ljlimited.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mard.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moscovita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nune.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omegleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omibodmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opornpics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pistegonflable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.providentbanknj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosey.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rxresu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexbevin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soakemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spodelide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supergyro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tossgenre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uvaldehillcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwprogresive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xasual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amin-teb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancientfutureandbeyond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billsroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccccatering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocinas-click.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corakihotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dislexya101.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmz.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edoc.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flying-book.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gokanqiu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'good0013.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gouv-amendes-gouv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heaveyfetish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hidra1-mkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoafinancialmanagement.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homerunbar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honda-accords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkyourskin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javanhd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javbd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerksy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jionpd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jumpinbanana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junkersmalaga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinabalu-car-rental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuttymovis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latvijastv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcb.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ljlimited.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mard.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moscovita.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nune.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegleuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omibodmodels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opornpics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pistegonflable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providentbanknj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosey.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxresu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexbevin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soakemi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spodelide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supergyro.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tossgenre.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uvaldehillcountry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwprogresive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xasual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6f7d149300000403004630440220344c09a1f573d22f7ff246ec1639421eb933c529f871fc8d509af8c4380e89ab0220667bc42a952ec9ca049d088b5e2734f819aa75232293ae56b3bc66e466b022ca007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d6f7d14a2000004030047304502206a89e3dbd9f5ebf62b7aca07c75a4d28dce5b81b8f49a78c2d999c41eb09cfe5022100befffb2ba73b8e23d8aef7e62d4d3dfc78eaf64e8998952a4f087fa436a97938
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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