dominadaria.com

Issued by R3

About this certificate

This digital certificate with serial number 04:8f:e3:2e:84:f8:b1:f8:ad:de:35:f4:36:af:a2:5f:aa:fd was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dominadaria.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:e3:2e:84:f8:b1:f8:ad:de:35:f4:36:af:a2:5f:aa:fd
Serial Number (int): 397411498494415586833946404181142409292541
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f9:1b:c0:e2:5c:0b:e4:0c:8e:45:a0:59:6c:27:4d:bb:87:ae:3b:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4e:9a:27:bb:f2:a6:b2:16:97:3a:71:2e:2a:97:d2:a7:ae:40:5b:fb
Fingerprint (sha256): 38:ea:00:4b:6a:4e:f4:3e:5a:cb:c0:0c:86:2a:8b:04:9d:6c:ae:ac:04:ee:c4:fa:b6:7b:21:4c:6d:9c:b9:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dominadaria.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dominadaria.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1walmart.com
*.afdahmovies.com
*.ages.us
*.badehospital.in
*.becckenbodentraining.de
*.bestsetsforsoccerplayers.com
*.blovkaway.com
*.bmwwoodlands.com
*.cartoonnetworkenglish.com
*.clerck.org
*.clpis4sale.com
*.contestgiveoutluckywinclaim.rest
*.corporategoth.co
*.dominadaria.com
*.drazby.org
*.echangeoutlook.com
*.emscharts.org
*.eposn.com
*.evolovo.com
*.fndembroidery.com
*.freedomintlchurch.com
*.frenteampliopormexici.org
*.fuckyoudirty.com
*.gfakboi.org
*.greetings.au
*.hebtaihanf.com
*.hethisnakedmindapp.com
*.homesciencetool.com
*.idiskitimws.co
*.insolvencylawyer.au
*.irwinroyesmagic.com
*.islearning.co
*.kharan.com
*.lovelypartythings.com
*.magicleaning.com
*.moneyfroma3minuteyoutube.video
*.mycheckree.com
*.newstarautogroup.com
*.pinnacleframes.com
*.plisplas.com
*.porbgameshub.com
*.preferredfcu.com
*.qualitynaturalstones.com
*.renewmytag.com
*.repairassign.xyz
*.softsparklingtube.com
*.wwsofibank.com
*.xn--hgrtelrose-beb.de
*.xn--mgbai2a9huo.com
*.zelepay.com
1walmart.com
afdahmovies.com
ages.us
badehospital.in
becckenbodentraining.de
bestsetsforsoccerplayers.com
blovkaway.com
bmwwoodlands.com
cartoonnetworkenglish.com
clerck.org
clpis4sale.com
contestgiveoutluckywinclaim.rest
corporategoth.co
dominadaria.com
drazby.org
echangeoutlook.com
emscharts.org
eposn.com
evolovo.com
fndembroidery.com
freedomintlchurch.com
frenteampliopormexici.org
fuckyoudirty.com
gfakboi.org
greetings.au
hebtaihanf.com
hethisnakedmindapp.com
homesciencetool.com
idiskitimws.co
insolvencylawyer.au
irwinroyesmagic.com
islearning.co
kharan.com
lovelypartythings.com
magicleaning.com
moneyfroma3minuteyoutube.video
mycheckree.com
newstarautogroup.com
pinnacleframes.com
plisplas.com
porbgameshub.com
preferredfcu.com
qualitynaturalstones.com
renewmytag.com
repairassign.xyz
softsparklingtube.com
wwsofibank.com
xn--hgrtelrose-beb.de
xn--mgbai2a9huo.com
zelepay.com

Other certificates including the domain name dominadaria.com

(limited to 100 certificates)
artimimpimenikah.com
dominadaria.com
dominadaria.com
dominadaria.com
dominadaria.com
dunkirk.us
lovelypartythings.com
dominadaria.com
filmdewasa17.net
dominadaria.com
topschoolngr.info

Certificate

The complete raw certificate details for dominadaria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397411498494415586833946404181142409292541
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 04:56:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 04:56:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dominadaria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853570239514081500085405545062911876028712455987634512390828066102859512607545894081401880238651554736515281913843957643687569702441007747953649703909447491328214292366118946802494748100818018021572204957826045514545286977529482671559006056443728785079065041641238635061080652960943931278202839933831472561164000785611098483482868638793847579764698619804089264280582282601629714689568447346374768320362819093432844867237268766228784688862558418129800267438154627227167666644166567487726170008415028039878941168762409599526047140857953250203071782742457775126781281206551080104916567966241372032931446841151448625043875766082101811334121543053716899535104458530195739004447940072691744618544276723352326138036408621513203419055012997188318906261768554486243875814153186651716458361893421833774829662302686042586170432335328555457795422323003300076046889051001925669175931486985157962614098802045047015410936323695862572724275484140127212588694381437038151501477433027536411236498461072483645371209908376516200218076531029083566556437505710509166437056052161420329684951298020798998211848004407745912353960979155576606300926578458719587715950020264270159344839878658393765118317924576363195391073830354896987898474458539893808717817661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f91bc0e25c0be40c8e45a0596c274dbb87ae3b7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1978 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1walmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afdahmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ages.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.badehospital.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becckenbodentraining.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestsetsforsoccerplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blovkaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmwwoodlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartoonnetworkenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clerck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clpis4sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.contestgiveoutluckywinclaim.rest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corporategoth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dominadaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drazby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echangeoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emscharts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eposn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evolovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fndembroidery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedomintlchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frenteampliopormexici.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuckyoudirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfakboi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greetings.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hebtaihanf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hethisnakedmindapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homesciencetool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idiskitimws.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insolvencylawyer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.irwinroyesmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islearning.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kharan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovelypartythings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magicleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneyfroma3minuteyoutube.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycheckree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newstarautogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinnacleframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plisplas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.porbgameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preferredfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualitynaturalstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renewmytag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repairassign.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.softsparklingtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwsofibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--hgrtelrose-beb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mgbai2a9huo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zelepay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1walmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdahmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ages.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badehospital.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becckenbodentraining.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestsetsforsoccerplayers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blovkaway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwwoodlands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartoonnetworkenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clerck.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clpis4sale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contestgiveoutluckywinclaim.rest'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporategoth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dominadaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drazby.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echangeoutlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emscharts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eposn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evolovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fndembroidery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomintlchurch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frenteampliopormexici.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuckyoudirty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfakboi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greetings.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hebtaihanf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hethisnakedmindapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesciencetool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idiskitimws.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insolvencylawyer.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irwinroyesmagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islearning.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kharan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovelypartythings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyfroma3minuteyoutube.video'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycheckree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newstarautogroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinnacleframes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plisplas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porbgameshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferredfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualitynaturalstones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewmytag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repairassign.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softsparklingtube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwsofibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--hgrtelrose-beb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mgbai2a9huo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelepay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bcc673329000004030046304402205910ef71d3f1f0d9cd0defca6ace9aca9fea629a2171e4cc0f1cc33b0b53a86f022008e7e0f06b17433f1db7fe4d53e4cd85c553b77810515c4dbdf921a7e06ea92d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bcc6733310000040300473045022100c42033548541effefb4d4cbe1ec858c448d1f2523f48585d54ba195e07be4e6702202e0650d0768579a387f4a9273b00f662f37c27360786f4b3d6077bc36b0b652e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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