district66.org

Issued by R3

About this certificate

This digital certificate with serial number 03:79:11:9b:61:dc:31:1d:02:35:7a:2d:e6:e6:3a:0f:23:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=district66.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:11:9b:61:dc:31:1d:02:35:7a:2d:e6:e6:3a:0f:23:a7
Serial Number (int): 302534427859494837629173227428243326313383
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:31:81:25:33:ce:ff:4c:c0:24:12:6e:4f:98:04:6b:9f:fa:77:e3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:5a:55:09:b9:44:ef:4b:f9:fb:c3:7f:fc:1d:e1:9e:95:17:05:27
Fingerprint (sha256): 3c:34:96:43:50:a9:25:f7:ec:08:a9:4d:02:6a:fe:cd:ea:7b:06:de:f0:d4:1a:09:98:6a:9d:fb:08:23:f1:a4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate district66.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for district66.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1nt.site
*.1pr.site
*.91ba.me
*.91gczx52.cc
*.accorntv.com
*.alambkstore.com
*.audiocom-ips.com
*.buysubscripions.com
*.comfortfurnituresolution.com
*.comprartpv.com
*.crossbow.com.au
*.ctobgynservices.com
*.dentistsmaroochydore.com.au
*.district66.org
*.dokadok.com
*.exiem.com
*.forleasepla.net
*.fruitstresser.net
*.galilishop.com
*.getpla.net
*.hyudia.com
*.intuint.com
*.kurtlarvadisifilistin.com
*.ldckrfnmwp.com
*.lycee-rascol.net
*.magov.org
*.miklurchtackle.com
*.mobilsuzukitangerang.net
*.mochistudios.com
*.mssgainesville.com
*.mylcar.net
*.online-nbg-cy.xyz
*.palladiumconservatories.co.uk
*.phalogenic.com
*.portalbrigsllc.com
*.pubjmobile.com
*.rayonka.com
*.redtheconsultancy.com
*.shootthebreezecomics.com
*.signinpla.net
*.singlespla.net
*.ssstini.ga
*.tcehy.us
*.ultragauge.com
*.vidprofixpro.com
*.vurrys.co.uk
*.wheretheroadrunsout.com
*.wlokamaars.com
*.wsvn7.com
*.xxkj2019.com
1nt.site
1pr.site
91ba.me
91gczx52.cc
accorntv.com
alambkstore.com
audiocom-ips.com
buysubscripions.com
comfortfurnituresolution.com
comprartpv.com
crossbow.com.au
ctobgynservices.com
dentistsmaroochydore.com.au
district66.org
dokadok.com
exiem.com
forleasepla.net
fruitstresser.net
galilishop.com
getpla.net
hyudia.com
intuint.com
kurtlarvadisifilistin.com
ldckrfnmwp.com
lycee-rascol.net
magov.org
miklurchtackle.com
mobilsuzukitangerang.net
mochistudios.com
mssgainesville.com
mylcar.net
online-nbg-cy.xyz
palladiumconservatories.co.uk
phalogenic.com
portalbrigsllc.com
pubjmobile.com
rayonka.com
redtheconsultancy.com
shootthebreezecomics.com
signinpla.net
singlespla.net
ssstini.ga
tcehy.us
ultragauge.com
vidprofixpro.com
vurrys.co.uk
wheretheroadrunsout.com
wlokamaars.com
wsvn7.com
xxkj2019.com

Other certificates including the domain name district66.org

(limited to 100 certificates)
district66.org
district66.org
update.district66.org
district66.org
district66.org
district66.org
district66.org
district66.org
district66.org
stockinvestingnewsletters.com
district66.org

Certificate

The complete raw certificate details for district66.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302534427859494837629173227428243326313383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 21:56:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 21:56:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'district66.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769746846783689899908916498493464511634897610250789964031414246146485079865985137346266084385469152603885248682616814417119084470207864859157677996452494978425012321756525171569339412379781656886020835467099577512823203356703167708331698206688475224724437980630636970712588905452838593868834092769103382070320838236753728195273447826578400660096898820823372542309024812095425671416382296394488875985977139022237792454291391150687791533336040717913026247174232760477099616865851919335451999616340172807765424981185323831439061727550978733341804799962598730491398518455359423405560577703218103399048297134690624217358175758472789959155887738524984601198429186786228786488661972700344297250549338802662184296530892290978655439479060978034999719097312999495302666992841507075562392044674937921382297100786739626368565752828731754900634013185425217818338312321577784779414302450598097700432059721006097809712108887223721505478842110725145797670332855954153200504410377135987148059114040285838126866241777316580668914718965934485065237706965641363510021406585461032914043793300952849280578973826612391376322105994621113945548406860779156879410166126087874991372283551915879633333950898009446325085864597375027104115832881737750795660977959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef31812533ceff4cc024126e4f98046b9ffa77e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1810 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1nt.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1pr.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.91ba.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.91gczx52.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accorntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alambkstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audiocom-ips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buysubscripions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comfortfurnituresolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comprartpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crossbow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctobgynservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentistsmaroochydore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.district66.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dokadok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forleasepla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fruitstresser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galilishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getpla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hyudia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intuint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kurtlarvadisifilistin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ldckrfnmwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lycee-rascol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miklurchtackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobilsuzukitangerang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mochistudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mssgainesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylcar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.online-nbg-cy.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palladiumconservatories.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phalogenic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalbrigsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pubjmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rayonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redtheconsultancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shootthebreezecomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signinpla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.singlespla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssstini.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tcehy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ultragauge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vidprofixpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vurrys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wheretheroadrunsout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wlokamaars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsvn7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxkj2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1nt.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1pr.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '91ba.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '91gczx52.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accorntv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alambkstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audiocom-ips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysubscripions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comfortfurnituresolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comprartpv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossbow.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctobgynservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentistsmaroochydore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'district66.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokadok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exiem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forleasepla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fruitstresser.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galilishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getpla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyudia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intuint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kurtlarvadisifilistin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldckrfnmwp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lycee-rascol.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magov.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miklurchtackle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilsuzukitangerang.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mochistudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mssgainesville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylcar.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-nbg-cy.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palladiumconservatories.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phalogenic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalbrigsllc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubjmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayonka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redtheconsultancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shootthebreezecomics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signinpla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'singlespla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssstini.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcehy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultragauge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vidprofixpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vurrys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheretheroadrunsout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlokamaars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsvn7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxkj2019.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e10d546ab0000040300483046022100a6d1bebd33dd32d324d143be0bb5311742910bcf475ceb784508b40c3b1e4fcc022100aa06b5ece48b41b5b45c66a05a8d139aa22650ca8ab41318646883879914b2100076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e10d546d20000040300473045022044370ebcc96f300f6adc10e54340598bb00b1137d74924999d545c609ec1a6b6022100ea4639c72cb028a1088916438fb0623adb394be20fac73600eee90706a6ab846
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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