negarin.shop

Issued by R3

About this certificate

This digital certificate with serial number 03:8d:4f:ab:5f:f4:e3:06:84:7b:8c:dc:07:54:66:d8:6b:bb was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=negarin.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:8d:4f:ab:5f:f4:e3:06:84:7b:8c:dc:07:54:66:d8:6b:bb
Serial Number (int): 309422570371793726074496424549879631080379
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 23:00:05:13:c7:43:f3:b8:ce:1a:07:87:36:f3:50:66:2a:25:f7:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:23:f1:a6:7e:fe:ca:ff:94:d2:01:ef:a8:23:60:09:47:c6:e3:15
Fingerprint (sha256): 3a:7d:c9:b0:82:86:63:b6:99:7c:4e:99:4d:1c:cb:fd:27:2a:c2:5e:ec:3f:6f:69:54:1e:e0:5a:fc:a4:39:d9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate negarin.shop

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for negarin.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.123movieshd.net
*.24hrkeyplumbing.com
*.accountacess.com
*.adventures-in-food.com
*.afishionadosportfishing.com
*.afisqonline.com
*.allthingspinkbeauty.com
*.banofofamerica.com
*.bartonnutritional.com
*.basketballposters.com
*.booksinpdf.com
*.castelhanos.com
*.ddwoodfinishers.com
*.decoffeecompany.com
*.empireautosd.com
*.empowerbraces.com
*.execution.online
*.eyecandy.online
*.flyingphotoschool.com
*.freeukgoodies.com
*.funeyetest.com
*.gausarts.com
*.gazettemail.com
*.getaffair.com
*.greenchicskin.com
*.happybirthdayquotesmessages.com
*.honeyharbour.net
*.ideaworld.tv
*.leton.tv
*.luxoca.com
*.mochasofa.com
*.najaxconstruction.com
*.negarin.shop
*.payup.me
*.picknknitpatterns.com
*.pinoytambayan.tv
*.propriete-privees.com
*.revellin.com
*.shovup.tv
*.studymedicines.com
*.thedavishouse.net
*.tkgames.online
*.vutamins.com
*.wallstreetstockexchange.com
*.watch8.com
*.waterretreat.com
*.webages.com
*.wineposters.com
*.youtuae.com
*.zamzamsaney.com
123movieshd.net
24hrkeyplumbing.com
accountacess.com
adventures-in-food.com
afishionadosportfishing.com
afisqonline.com
allthingspinkbeauty.com
banofofamerica.com
bartonnutritional.com
basketballposters.com
booksinpdf.com
castelhanos.com
ddwoodfinishers.com
decoffeecompany.com
empireautosd.com
empowerbraces.com
execution.online
eyecandy.online
flyingphotoschool.com
freeukgoodies.com
funeyetest.com
gausarts.com
gazettemail.com
getaffair.com
greenchicskin.com
happybirthdayquotesmessages.com
honeyharbour.net
ideaworld.tv
leton.tv
luxoca.com
mochasofa.com
najaxconstruction.com
negarin.shop
payup.me
picknknitpatterns.com
pinoytambayan.tv
propriete-privees.com
revellin.com
shovup.tv
studymedicines.com
thedavishouse.net
tkgames.online
vutamins.com
wallstreetstockexchange.com
watch8.com
waterretreat.com
webages.com
wineposters.com
youtuae.com
zamzamsaney.com

Other certificates including the domain name negarin.shop

(limited to 100 certificates)
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop
negarin.shop

Certificate

The complete raw certificate details for negarin.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2L4Gnf0LhfMBfafiY3TO
iEVoIa89Gs2G1u0/pODOXVOA4smbSpcrLn9QUrg2n7bNwnkehpnpa1Cu2m4J3Vuj
kqPdDUTWc5iP486vKlXKufemYwo1msUNXQKhvk3N7ExJeXTcDDkascgZ1d8QZRv+
yQ+78z+vYc3UqoCFFgBGq981tm3VYzy27fAVSOOS4jd9N9mnhyS2JO78KWRbM5Vf
j3um96QZmFgtknyqx3GUxL5sIcK3BhgYdOmEsw1JyecHrq1bynorGU1KmuEXCuvH
z3B7UWGGuoFqIKQDsYj4oDViAR7Ygt0HUtL9vZzXFzZqOqD2eus3bTq4g6RxzfKR
hYw3RDD2iUP78jSS07iYFf8AReOx/akuwRRwdgiRe3RtLRQO7+P+xNl6sCv71cN5
7cSYOLQ+0ArAhGmD2aZYXqusnyVe/6yND/gUj6bdWZwu53L+njda4E6Yn2C92WOG
0/CxberhMy3c7Nqomyl2GgeAq30+bYlSGSz3PGCrz0N2GXOHLKf6Bki+nWN2nTNU
0q57LlWRG/EZqjjbuyeQ8Jrrj/zpWk+KBDQFOUrFUEKi4wi1s4YzICeXexrFtF8O
n4uu4IjmQR2ZiOiL4OTgRetOUwkry9pqbllmaNX5EAFYSG70Plvm4xoqaBvCAnG4
+DV5l8dEaOrvyFWn9mTc+lsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309422570371793726074496424549879631080379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-30 10:29:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 10:29:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'negarin.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884231391444030183568142760583962017478421125305074527540199196594333684335955334161516844389807162675010649964709308384884011760675492861314221861268335056760360470768304937499945376405025560658484597930692130790372731960628498955099664221972047193717977067613714895124582207171246893203643907154326551071755278097244006401737645296186444175199882441785035528911773623662926380698097457319134122392651364384752903362887674933005558864603596761463175953335168985605342386074562355396144690024404951039767012671663773771831152335193734699929096854136308352411004820608962432145329396675074115520311658296089355105284622188621971286605181214625657566301485650958157859198595592134528154476499340413353022225054802683753473618332292693776713873316084299009863378450681607177108672349249242631891224656833805167373919212462306584670416492798226356128987070881671976537622759959967655454339985779060725861120167264270089262943530070584499750788876396511590731627651956253682539161745780083707683034775685301168369344616587472076852083362450190073166374454823188332829928487230729107055018300159782267322650631845938275335527463683999150219874495654488546205820393038701415985033880275971841598882816724557143856074212039172841610799807067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23000513c743f3b8ce1a078736f350662a25f77e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1930 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.123movieshd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.24hrkeyplumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accountacess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adventures-in-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afishionadosportfishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afisqonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allthingspinkbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banofofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bartonnutritional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basketballposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.booksinpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.castelhanos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ddwoodfinishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decoffeecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empireautosd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.empowerbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.execution.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eyecandy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingphotoschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeukgoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funeyetest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gausarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gazettemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getaffair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenchicskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happybirthdayquotesmessages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeyharbour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ideaworld.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leton.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mochasofa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.najaxconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.negarin.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payup.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.picknknitpatterns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinoytambayan.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propriete-privees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revellin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shovup.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studymedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thedavishouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tkgames.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vutamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wallstreetstockexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watch8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wineposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youtuae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zamzamsaney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123movieshd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '24hrkeyplumbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountacess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventures-in-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afishionadosportfishing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afisqonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allthingspinkbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banofofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bartonnutritional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksinpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelhanos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddwoodfinishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decoffeecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empireautosd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'empowerbraces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execution.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyecandy.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingphotoschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeukgoodies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funeyetest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gausarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gazettemail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getaffair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenchicskin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happybirthdayquotesmessages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeyharbour.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideaworld.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leton.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxoca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mochasofa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'najaxconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'negarin.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payup.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picknknitpatterns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinoytambayan.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propriete-privees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revellin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shovup.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studymedicines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedavishouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkgames.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vutamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wallstreetstockexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterretreat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wineposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youtuae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zamzamsaney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fc943493a0000040300483046022100a9e4ff430ae25bcce491c0303d065394867e1b0b874bd58b69443ac93356a884022100edbb0b2192f6ff27cdb1a528b497bed7cbf609f11832f429767f758bea89abd70076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fc94349a7000004030047304502210098abf88b5b299825eb2c9eb33f975158e2fae44299b85a8fa12c016f6d87e008022011a888cd05ace7c1fff44353eef0e543fccb6b2104c2b5d89fe61fa4e7eb6c0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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