goodens.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:56:dc:f7:eb:61:9a:3d:c4:cb:26:1b:32:52:68:d2:75 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goodens.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:56:dc:f7:eb:61:9a:3d:c4:cb:26:1b:32:52:68:d2:75
Serial Number (int): 405391759944188087217065322452662771831413
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 72:e3:9c:32:bd:18:63:e9:ab:62:f5:d2:1b:9c:68:e1:51:fe:d3:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 79:93:40:ff:e6:4f:2f:e1:b8:4a:84:94:3c:72:5c:24:ac:03:f3:57
Fingerprint (sha256): 38:35:7a:9f:f8:cc:d6:8b:62:86:fe:45:b0:12:a6:c3:ca:60:c5:69:95:7b:31:43:2a:79:01:cd:3f:ff:9f:4a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate goodens.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goodens.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.anieflv.net
*.arbahme.com
*.bdmusichd.com
*.bergdorfgoosman.com
*.bluebaseball.com
*.boxingstream.live
*.brighrspace.com
*.fidekityrewards.com
*.fullmoviesonlinehd.com
*.goodens.com
*.hoyobi.me
*.jj85.me
*.jj86.me
*.kimochithailand.com
*.lawsocietyfbc.co
*.lightpill.com
*.lookupdns.com
*.mamegyorai.net
*.medicareadvantageplans.us
*.melaniediosporngif.co
*.merchandise2us.com
*.mymovieclips.com
*.narcissisticpersonalitydisorder.org
*.octoplush.org
*.oliveextract.com
*.pelvic.au
*.planassam.org
*.punjabschoolgames.com
*.realdeal-forum.com
*.regalosbebes.com
*.reslme.com
*.rockstragames.com
*.sanacion.com
*.sietevisionesfilms.com
*.spatkof.in
*.superdiski.info
*.thefling.com
*.thirtyplusone.co
*.tusmetas.com
*.unwinedbythesea.com
*.veteranweldingfabrication.com
*.victoriaboiko.com
*.victoriahorlle.com
*.visoin.net
*.whitewanna.com
*.wuteh.com
*.xn--dolarmaana-z9a.co
*.yinner.com
*.zaysev.net
*.zonajuegos.org
anieflv.net
arbahme.com
bdmusichd.com
bergdorfgoosman.com
bluebaseball.com
boxingstream.live
brighrspace.com
fidekityrewards.com
fullmoviesonlinehd.com
goodens.com
hoyobi.me
jj85.me
jj86.me
kimochithailand.com
lawsocietyfbc.co
lightpill.com
lookupdns.com
mamegyorai.net
medicareadvantageplans.us
melaniediosporngif.co
merchandise2us.com
mymovieclips.com
narcissisticpersonalitydisorder.org
octoplush.org
oliveextract.com
pelvic.au
planassam.org
punjabschoolgames.com
realdeal-forum.com
regalosbebes.com
reslme.com
rockstragames.com
sanacion.com
sietevisionesfilms.com
spatkof.in
superdiski.info
thefling.com
thirtyplusone.co
tusmetas.com
unwinedbythesea.com
veteranweldingfabrication.com
victoriaboiko.com
victoriahorlle.com
visoin.net
whitewanna.com
wuteh.com
xn--dolarmaana-z9a.co
yinner.com
zaysev.net
zonajuegos.org

Other certificates including the domain name goodens.com

(limited to 100 certificates)
awanaclubs.com
goodens.com
goodsleeps.com
www.stopmyboat.com

Certificate

The complete raw certificate details for goodens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnTG0f40KuGFP7tiGsYI2
7uu4EEKJ1sMLd8rTH9BBphNon2dk7o5dy4g4vvlid8k4/AbYNDm+Br58+nMezera
Y1n+yl9Exrn/ki6U852XxZUnG30oGLauT+p3l4KnYvyL+0k6pfz0ILAbGDY7CeH8
DE5jNFEZtjQMKm8+E8cLjBeB7xN7Cd30X0oHfN9HFbVtqBntFbdPF2cjcf2rGfRD
2y03wHVmGzlaDoHmWT9gKX2vZkClu476B1ubFaJqwiZS0m5mhCEHANBYxhleTGh3
hCuaF3wfbvHM8YjgBOxdz+I+jBIwcdSSO0yUGoVUIM4mqtrqpHPCPAarHm5ffDyT
KxnSl7CD59EoTXj2McNGKxfXNaCS23kyRBOa+e7QLg8GxggywAdstUR/hWcKxynY
Hv551FkvvSDXdO8jlV0FCX+NG4+pT1cVBeAT2HNl9cSj0ckAQVuMdDJdFNI/M/0O
mOTkrUTxvZvMQRDIClKHY5Z7b1H2ucd7RPMbZbE4TyNM9jNT207PC3tgzJG0gRLh
aajHhuWC0m4HBkSXyTXR5I77e9hnNP2//3CSo+G3q9TSsUBW2EcPPkmT6tWaVapc
1lN2e7d31/03OG4hr9lwAWV3SVvk3vKFI7KKvc6wjgI0zdgFiWCQGcG5VegiMF2L
AEIeGJof94SxM1qr4IohtW0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405391759944188087217065322452662771831413
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 11:13:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 11:12:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goodens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641296224144664843686504017799398334390878134166543896447258011454741737508429883108696012667334105554041395427179316090387433619626475155142543390405677476122086132700635532714877658904576234780817059602001649318242062192723327704925233971983184598603830410385151157286382369968686454646002580492945926475888863742579634625864593169867465195455492422105829272379865712659446110884044595144856868014267580196614755213204090206490849085693206834339082607899937092719054615338940724132220103208458871838640502791417884152786730913556623172957882565541578924690990078955168360109051092197445027892951508555415719184293151344559501998100079296438611276276461297035493543679838867677925048156601850388425652047523106679172680759327248009722938403292927402820232605972895551398197360314560234183667935252043326678302964188214146377379403925291079074121024273304304759403486605763708818578408767686157195565907662080629971097710618777032306186418872622474406581216059668036900846401060032082017121614847513330898230831900608685750315299420660207273113858124079838509508178688914640206528651574414230047294373250325144694125066382910327616912527369193715425642852388005165824246975902760178428940166645006484268661157382749885191504816878957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72e39c32bd1863e9ab62f5d21b9c68e151fed35b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anieflv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arbahme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdmusichd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bergdorfgoosman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluebaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boxingstream.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brighrspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fidekityrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullmoviesonlinehd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goodens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoyobi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jj85.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jj86.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimochithailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawsocietyfbc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightpill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lookupdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mamegyorai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicareadvantageplans.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melaniediosporngif.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.merchandise2us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymovieclips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.narcissisticpersonalitydisorder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.octoplush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oliveextract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelvic.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planassam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.punjabschoolgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realdeal-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regalosbebes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reslme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockstragames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sanacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sietevisionesfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spatkof.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superdiski.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirtyplusone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tusmetas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unwinedbythesea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veteranweldingfabrication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoriaboiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victoriahorlle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitewanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wuteh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--dolarmaana-z9a.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaysev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zonajuegos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anieflv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbahme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdmusichd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bergdorfgoosman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebaseball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingstream.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brighrspace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fidekityrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullmoviesonlinehd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoyobi.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jj85.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jj86.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimochithailand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawsocietyfbc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightpill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookupdns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamegyorai.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicareadvantageplans.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melaniediosporngif.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merchandise2us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymovieclips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'narcissisticpersonalitydisorder.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octoplush.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliveextract.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelvic.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planassam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'punjabschoolgames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realdeal-forum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalosbebes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reslme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockstragames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sietevisionesfilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spatkof.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superdiski.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirtyplusone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tusmetas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unwinedbythesea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veteranweldingfabrication.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriaboiko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriahorlle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visoin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitewanna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuteh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--dolarmaana-z9a.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yinner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaysev.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonajuegos.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186a23d70ab0000040300463044022045e79bd71401d9d65ef060dbb6502a5a7b74f149a3e65ad63c84ed5e9ed59dd402204e282db3eff9701d6a8a5f157ffbe99e762cd6397d0fe5a85010ba8b47c55ec9007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186a23d70a3000004030047304502205bcf275651cecded3865a749c967169f1339161732a126e4d62bceca6b246f15022100ed795a6c4671dcc78837394c6d1d56951316bf5a36d2bd2ad999bd3493204850
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0099a98791cec7555481989bb512e6f15df43fc738b439d271e1e6b0f2f4dd9e4db66e1f8594de24d1e05d564ee471f95022ff1e634cc5405f5cd6902f1ae08ff58fd43aa3cae0812c5ef80d902a4e050e45e8c288422d3a51df2652c070553f47eaa3b5a1bc6ea51e05f4cb7f2fe68526c379b237ca0f8922e1efe7fceb7d80fac5b310530efc0b730b7ca90e2bad90040b3fcc174308fd5ff6f9daf5c389747a5877fad5354735389ae69b448332c835e68fddefb5bc8634ab0969e57a5d354e53e60ac5d6af66ddf1835a961dbb971dfc8d958851f883538a6f17c0105323086c928df4cb10717add466dcec09a02f0d510195dc42302bdc635f7d0d3dc1c12