birkensock.com

Issued by R3

About this certificate

This digital certificate with serial number 03:1f:f5:54:06:c0:53:25:54:bc:3d:3b:2b:fd:3e:54:b8:e3 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=birkensock.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:1f:f5:54:06:c0:53:25:54:bc:3d:3b:2b:fd:3e:54:b8:e3
Serial Number (int): 272211708318665250832488997988604912646371
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:2b:d7:9f:2d:3e:ad:bd:d7:4f:d0:68:3b:a9:4e:18:20:53:63:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:69:09:fb:23:74:bc:fd:e0:8b:17:2a:e3:e9:35:e7:3d:2c:6c:b4
Fingerprint (sha256): 39:c7:88:ba:e9:27:c6:e2:72:08:af:2f:44:6e:4b:15:0a:66:dd:ca:cc:c5:13:d6:63:e0:02:ec:be:c7:94:c8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate birkensock.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for birkensock.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.altrarunningshoes.com
*.antresty.com
*.birkensock.com
*.bluesshieldca.com
*.boatingbc.com
*.bokep18.com
*.buongustocloster.com
*.butget.com
*.colorantlab.com
*.darkreign40k.com
*.dentalsolutionshvt.com
*.e-favormart.com
*.elfqrim.com
*.epidemio.com
*.furries.com
*.guardiannanytime.com
*.hdmovies2.digital
*.heartlandretnals.com
*.homegooods.com
*.inkagame.com
*.insuranceppa.com
*.javdb03.com
*.kfdmtv.com
*.linkdir4u.co
*.lucycorr.com
*.mahattanprep.com
*.marchvisoncare.com
*.minkycoutour.com
*.nethersporkskins.com
*.northshoremysecurebill.com
*.pchclassmates.com
*.pdf-downloader.online
*.pqyer.com
*.prolineparts.com
*.prply.com
*.qualityinnwestmemphis.com
*.ridgetowngolf.com
*.rirerack.com
*.rotarynotary.com
*.sangkilat.com
*.sdg2mastercard.com
*.shareyourexperience.com
*.traingreliaslearning.com
*.tropicalgrillnyc.com
*.umantis.co
*.voyeureb.com
*.weathertect.com
*.weekendtailgating.com
*.xizifashion.com
*.yummeiart.com
altrarunningshoes.com
antresty.com
birkensock.com
bluesshieldca.com
boatingbc.com
bokep18.com
buongustocloster.com
butget.com
colorantlab.com
darkreign40k.com
dentalsolutionshvt.com
e-favormart.com
elfqrim.com
epidemio.com
furries.com
guardiannanytime.com
hdmovies2.digital
heartlandretnals.com
homegooods.com
inkagame.com
insuranceppa.com
javdb03.com
kfdmtv.com
linkdir4u.co
lucycorr.com
mahattanprep.com
marchvisoncare.com
minkycoutour.com
nethersporkskins.com
northshoremysecurebill.com
pchclassmates.com
pdf-downloader.online
pqyer.com
prolineparts.com
prply.com
qualityinnwestmemphis.com
ridgetowngolf.com
rirerack.com
rotarynotary.com
sangkilat.com
sdg2mastercard.com
shareyourexperience.com
traingreliaslearning.com
tropicalgrillnyc.com
umantis.co
voyeureb.com
weathertect.com
weekendtailgating.com
xizifashion.com
yummeiart.com

Other certificates including the domain name birkensock.com

(limited to 100 certificates)
birkensock.com
imaginetravellers.com
birkensock.com
birkensock.com
imaginetravellers.com
birkensock.com
imaginetravellers.com
imaginetravellers.com

Certificate

The complete raw certificate details for birkensock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA16k1c5fcGYN/PTYwHmMM
9ijYk2AyFX9ZvTjgsy9JSFQo3BIOgJ5qWl3SVtK4Oid7/hbrU6NKQoC+JH02GNT9
sv9IfqqwBFgYaaziZYrrxymb/dwK0JEUl0WitNnvIOri5pDmQCGwVG5A5pVXsouq
iUTTr7/rquO6/VezQ5tHYn92eDKEx+gCBBBil3rUfcHujGbIBZDLb5tys+0BefIm
GION7yAObwqhTwERN3iZxIBYvom5EwX1hdeSyasxIcC/OCbE5qA6xnwrXWLswSZh
pxdQM7SkTro09zX4ehiEc+aOAe1Dn3Qsf8ORW5UNV3M4/8hk9gPDV05/rInt7CGc
hmj7UyoGCBkz6lxuQqe2phBVhSheNaxcFhBfsQ6lqpuzx5QVphbdWOfyI5JPcYN/
OMeFl5X2T//Guqro8ubk3tqIcJ6TEjkg3r+So7YS2Mf6KG6bc1uraAnZ3dKUbLKC
vCBn+ucH3qMX5AnsbD7oK6OuuUfS8r3aZuNXa/L7idbaadX2AYYRfoEcwZwYWNjB
zbUe9uWy7n1jERpesRBB543Pc+OV6yypiF+29/dele9S1MMftoRVBISfPL1DL3Uo
WjFULmvTivHpzGS24pu02HZK6ax0yr9E5agPJOjx2qmMbNCjXD87Fs5bLi1du1iY
o5caLLNnFHeQ1+E7vE95Kj0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272211708318665250832488997988604912646371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 13:12:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 13:12:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'birkensock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 879820004534611295423034465088623357692374816713592842618551073043289207649493840496526787818034818429727469079400347932494947968160719730810234718645544455713802570097784989382690032033041033799907723400837371497659242642581290898880188777975773398191710923157605462779553062571643851557492921736500322666167475967756712479274822178354795091316322674367391608393507400787061915914855538092420430484293263604570841706506964897276905944298784456982877276594161067784081744767756078886854557067968944805391943899634623070087504735976335116333689149644270639541400225997920517680123273710465186691173315169056052159474623409291343613360203237341593225684099198388420903361166580082217657721689723649928436336330668620448524350284865230001010499605904893413601287184767977970675687304244140654915400156714902775738370867792145858495332368898602742241483117734799736133470781949636289376603074020950247094948323369291236630417195407781241571459336391169141939900034975130374005989594030946241221535979541441537107381365805682243850759511818166302008200605349588609799957458087534969953126737293763457476480561055457879739400877906327259817123795681256885131701239741994141917162740724858873043241393387018803261507064133948243075258722877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e32bd79f2d3eadbdd74fd0683ba94e18205363e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altrarunningshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antresty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birkensock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluesshieldca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatingbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bokep18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buongustocloster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colorantlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkreign40k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalsolutionshvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-favormart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elfqrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epidemio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.furries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guardiannanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdmovies2.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heartlandretnals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homegooods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insuranceppa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javdb03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfdmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkdir4u.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucycorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahattanprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marchvisoncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minkycoutour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nethersporkskins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northshoremysecurebill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pchclassmates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdf-downloader.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pqyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prolineparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityinnwestmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgetowngolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rirerack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rotarynotary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sangkilat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdg2mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareyourexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traingreliaslearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tropicalgrillnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umantis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voyeureb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weathertect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekendtailgating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xizifashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yummeiart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrarunningshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antresty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkensock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluesshieldca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatingbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bokep18.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buongustocloster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colorantlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkreign40k.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalsolutionshvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-favormart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elfqrim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epidemio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'furries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardiannanytime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdmovies2.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartlandretnals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homegooods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuranceppa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javdb03.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfdmtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkdir4u.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucycorr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahattanprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marchvisoncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minkycoutour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nethersporkskins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshoremysecurebill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pchclassmates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdf-downloader.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prolineparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityinnwestmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgetowngolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rirerack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotarynotary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangkilat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdg2mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareyourexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traingreliaslearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropicalgrillnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umantis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voyeureb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weathertect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendtailgating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xizifashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yummeiart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f4e3f876400000403004730450221008086b383136fc2ee89f5b92ec38bcbbb50c559da48703dbbe0bb516d0a166e3702204ca39562144826a602d6b3e10e477bd65f57d258660018936278fa20a6c7594f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f4e3f87b0000004030047304502201c8eeb0d18a796db875b10c4869e73a792fb1f9bfb2f8e40e5f0e91578a209ec022100e9fbe9a4314be8008dfec070629003f02f3e9e3e178bc086dd7c818bc5877486
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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