perfectgoft.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ce:b6:3f:e5:b2:69:88:b8:49:03:a5:de:7f:31:bd:84:b2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=perfectgoft.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ce:b6:3f:e5:b2:69:88:b8:49:03:a5:de:7f:31:bd:84:b2
Serial Number (int): 418789562581496325816936453470856557724850
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:65:a2:9f:be:aa:77:bd:15:42:27:e6:b7:ac:d4:f5:ab:b3:f9:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:3b:74:51:e9:11:e5:c1:f8:9d:bf:d7:42:03:bb:00:c4:de:e4:6c
Fingerprint (sha256): 37:e1:4b:6f:f2:d6:a3:32:b9:42:fb:5e:5e:96:dd:95:93:12:0b:15:23:38:73:83:45:2b:d3:9b:5b:d8:45:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate perfectgoft.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perfectgoft.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a1vacuumsiowa.com
*.adorebrand.com
*.affoedablehousing.com
*.appliancesalesandservice.com
*.atlanticsetor.com
*.bestrents.com
*.bey-simit-haus.de
*.disneyintern.com
*.edmc.com
*.elderpoint.com
*.gentechsomatropin.com
*.horturl.at
*.jefferspetsupply.com
*.jegswork.com
*.joingotomeeing.com
*.lnwgadget.co
*.lovuli.co
*.magnicficos.co
*.mantimeter.com
*.maxlifeinsuranc.com
*.mm1213.com
*.nationalarray.top
*.newtorrentz.org
*.nextemulate.top
*.nichedigital.com
*.observatoryprogram.buzz
*.occupycalcium.buzz
*.perez.ly
*.perfectgoft.com
*.perfetgift.com
*.poison-ivy-oak-sumac.com
*.por.la
*.rapidmi.com
*.ridemoves.com
*.senirbenefitsworth.com
*.siscounttire.com
*.sopankbang.com
*.southesttexas.com
*.spectrummonile.com
*.spokanebackpage.com
*.staedtereisen-24.de
*.swinglifestytle.com
*.telegraphonline.co.uk
*.ticktackticket.com
*.vanillaprepaid.co
*.vidreel.com
*.vietforum.vn
*.warthuder.com
*.wasserstoffperoxied.de
*.weldingwheels.es
a1vacuumsiowa.com
adorebrand.com
affoedablehousing.com
appliancesalesandservice.com
atlanticsetor.com
bestrents.com
bey-simit-haus.de
disneyintern.com
edmc.com
elderpoint.com
gentechsomatropin.com
horturl.at
jefferspetsupply.com
jegswork.com
joingotomeeing.com
lnwgadget.co
lovuli.co
magnicficos.co
mantimeter.com
maxlifeinsuranc.com
mm1213.com
nationalarray.top
newtorrentz.org
nextemulate.top
nichedigital.com
observatoryprogram.buzz
occupycalcium.buzz
perez.ly
perfectgoft.com
perfetgift.com
poison-ivy-oak-sumac.com
por.la
rapidmi.com
ridemoves.com
senirbenefitsworth.com
siscounttire.com
sopankbang.com
southesttexas.com
spectrummonile.com
spokanebackpage.com
staedtereisen-24.de
swinglifestytle.com
telegraphonline.co.uk
ticktackticket.com
vanillaprepaid.co
vidreel.com
vietforum.vn
warthuder.com
wasserstoffperoxied.de
weldingwheels.es

Other certificates including the domain name perfectgoft.com

(limited to 100 certificates)
perfectgoft.com

Certificate

The complete raw certificate details for perfectgoft.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418789562581496325816936453470856557724850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 08:25:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 08:25:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perfectgoft.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 874437494515106374925388640063274949561730897721436555259443436101682069666247742233524725393578699208919932549696618039968176352153364398345572451199998544432500245638187568521809712844698558758246579615206586067449985057361696866337569009182119297031957404645689560759371015980408966446570190916350810089935401435382034808324411548784854683168346100898278308344981439126143038335463156917142027147908661960948928050407269522778198603026746807331540706187531734985555873721729088741242730809996824129575913340405267316224178063709654604004720971149654373148217446696309559046545171201800044798767696017075328711775247778437349888881001480584086586234687693214628287383128931822570977730622651556332194662332535882178701908610875674679245529435801522574168414425295432037428627018727105237987165176821881840869896168039560251908897217313808276259244141413284853997176592814711035753411565507778509439167671906782815210235981405030014913854073322396859703400122602145044351623679050434684305811342242511328425205538777555260350958599596265553795863731401779923706538077487333041185661823954170571401422110837423546047896141580974661648097268781997215422734106980741717765828823989623994997841248941895725991107432661713581293232198459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd65a29fbeaa77bd154227e6b7acd4f5abb3f9f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1890 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a1vacuumsiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adorebrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.affoedablehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appliancesalesandservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atlanticsetor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bey-simit-haus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneyintern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elderpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gentechsomatropin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.horturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jefferspetsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jegswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joingotomeeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lnwgadget.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovuli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnicficos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mantimeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maxlifeinsuranc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mm1213.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalarray.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newtorrentz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextemulate.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nichedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.observatoryprogram.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.occupycalcium.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perez.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfectgoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perfetgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poison-ivy-oak-sumac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.por.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rapidmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridemoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.senirbenefitsworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siscounttire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sopankbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southesttexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spectrummonile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spokanebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staedtereisen-24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swinglifestytle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telegraphonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticktackticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanillaprepaid.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidreel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietforum.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warthuder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wasserstoffperoxied.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weldingwheels.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1vacuumsiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adorebrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affoedablehousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appliancesalesandservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanticsetor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestrents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bey-simit-haus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneyintern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elderpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gentechsomatropin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horturl.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferspetsupply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jegswork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joingotomeeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnwgadget.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovuli.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnicficos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantimeter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxlifeinsuranc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm1213.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalarray.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtorrentz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextemulate.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nichedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'observatoryprogram.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occupycalcium.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perez.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfectgoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perfetgift.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poison-ivy-oak-sumac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'por.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridemoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senirbenefitsworth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siscounttire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sopankbang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southesttexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrummonile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spokanebackpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staedtereisen-24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swinglifestytle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telegraphonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticktackticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanillaprepaid.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidreel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietforum.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warthuder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wasserstoffperoxied.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weldingwheels.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001896851dc170000040300473045022040f712d0b8877908b29a77c82a11df86b70e4892567b0004ecd549b64793b6c5022100f5918e9f89a98ad2beecdc5c2c6705483405914d2f3383daf41fbdece939a6e4007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001896851dc31000004030047304502201175830a6ade16139915bbf16f7bf0219362bd54f896c8204c28a90246ecd22b0221008ac4f8009326688119ef38519663ac072f54a79082d0313622ec361c690e1646
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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