geographyschool.com

Issued by R3

About this certificate

This digital certificate with serial number 03:60:7d:4c:87:2c:14:52:a3:88:1c:62:69:6f:89:4a:96:8c was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geographyschool.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:7d:4c:87:2c:14:52:a3:88:1c:62:69:6f:89:4a:96:8c
Serial Number (int): 294170515875342820811341717624150691583628
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:4e:97:3b:a7:56:4f:84:dc:d1:b9:a9:7f:c5:88:bd:3d:6e:1d:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:25:43:35:c3:0b:35:3c:ea:b1:38:6e:e6:31:9a:92:8f:97:27:1d
Fingerprint (sha256): 3c:55:92:33:54:b7:44:b7:6c:ff:5b:8a:4d:70:8c:d0:d3:b4:24:32:a9:6f:be:4e:31:b1:bc:a9:4e:7a:38:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate geographyschool.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geographyschool.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4217.com
*.bestialidades.com
*.bhave.net
*.bloodclub.com
*.chocolando.it
*.cocacolaemployment.com
*.commercecards.com
*.deivrivera.com
*.edilma.com
*.geographyschool.com
*.gitarklasik.com
*.grangestone.com
*.greenspotmarketing.com
*.guing.com
*.hodad.com
*.hypersomnia-treatment-58826.com
*.itler.com
*.kma.de
*.lagrangepk.com
*.lavishdinerestaurant.com
*.lungenkreb.de
*.lusir030.com
*.maison-ginkgo.com
*.mathbits.co
*.meanscam.com
*.mein-barmenia.de
*.mgalalloy.com
*.nojm.com
*.northshoreweddings.com
*.nosrecette.com
*.nwetterzentrale.de
*.pogge.com
*.privatehealthfund.com.au
*.rct.com.pl
*.scanvas.cc
*.socialstudysforkids.com
*.stacktivism.net
*.stoptext.com
*.syner.eu
*.tbtorrent.com
*.teppichflecken.de
*.thepassinglane.com
*.thmh.cc
*.torrentsome52.com
*.tvgook13.com
*.valeriehoffenberg.com
*.waterships.com
*.whalerun.net
*.wif.com.pl
*.zombablaboratory.com
4217.com
bestialidades.com
bhave.net
bloodclub.com
chocolando.it
cocacolaemployment.com
commercecards.com
deivrivera.com
edilma.com
geographyschool.com
gitarklasik.com
grangestone.com
greenspotmarketing.com
guing.com
hodad.com
hypersomnia-treatment-58826.com
itler.com
kma.de
lagrangepk.com
lavishdinerestaurant.com
lungenkreb.de
lusir030.com
maison-ginkgo.com
mathbits.co
meanscam.com
mein-barmenia.de
mgalalloy.com
nojm.com
northshoreweddings.com
nosrecette.com
nwetterzentrale.de
pogge.com
privatehealthfund.com.au
rct.com.pl
scanvas.cc
socialstudysforkids.com
stacktivism.net
stoptext.com
syner.eu
tbtorrent.com
teppichflecken.de
thepassinglane.com
thmh.cc
torrentsome52.com
tvgook13.com
valeriehoffenberg.com
waterships.com
whalerun.net
wif.com.pl
zombablaboratory.com

Other certificates including the domain name geographyschool.com

(limited to 100 certificates)
geographyschool.com
www.southfloridaexterminator.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
geographyschool.com
ditos.com
irefrigerator.com
geographyschool.com
fayettecountyrealestate.com
geographyschool.com
geographyschool.com
geographyschool.com

Certificate

The complete raw certificate details for geographyschool.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294170515875342820811341717624150691583628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 07:10:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 07:10:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geographyschool.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709502035494428822763471210131707644599439969957212261929426632467104621472187405575111088773139270766560312600189813604180080875311469891040688141385019067843681642212624793590682072874913017628134171769163110118895271464113431096802090081963780278785451470331874007004922941633432194693299260177385025357444022583996190762418670384358945073866147797829354503309979875444594148761888789313297378475606318754853574514058824082954026813889090186146288115711272720293857846255449324485039050118628409746737148410119878016458854110511376468353387912902390948060811712895269854210251084092654189083451046722890380795345681788752616720258697850828336698327153271025500388038830872981045894569012181450111060567608165954660132715807102521487783416365326481562110522058019145372775045179223241246573520969988463468949299938073397948636977769335858073797421098677105702610247137100790794941106386697165337213122771901158613886413850495159007443623441845073146205270167530123445472954310384886597858897615621288566696019301946194319587508201884546673800639450647235926210526083923546342222567763278764928989896679030255579741173902411168178316885216516886122520429159349035788446086985806276728681224902039310126353427782103527365921549321509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							504e973ba7564f84dcd1b9a97fc588bd3d6e1d1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4217.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestialidades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloodclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chocolando.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocacolaemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.commercecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deivrivera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edilma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geographyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitarklasik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grangestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenspotmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hodad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hypersomnia-treatment-58826.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lagrangepk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavishdinerestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lungenkreb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lusir030.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maison-ginkgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mathbits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meanscam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mein-barmenia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mgalalloy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nojm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northshoreweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nosrecette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nwetterzentrale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pogge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.privatehealthfund.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rct.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scanvas.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialstudysforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stacktivism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stoptext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tbtorrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teppichflecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepassinglane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thmh.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torrentsome52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvgook13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.valeriehoffenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waterships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whalerun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wif.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zombablaboratory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4217.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestialidades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhave.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chocolando.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocacolaemployment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deivrivera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edilma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geographyschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitarklasik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grangestone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenspotmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hodad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypersomnia-treatment-58826.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kma.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagrangepk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavishdinerestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lungenkreb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lusir030.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maison-ginkgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mathbits.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meanscam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-barmenia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgalalloy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nojm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshoreweddings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nosrecette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwetterzentrale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pogge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatehealthfund.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rct.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scanvas.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialstudysforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stacktivism.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoptext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syner.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbtorrent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teppichflecken.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepassinglane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thmh.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torrentsome52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvgook13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valeriehoffenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waterships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whalerun.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wif.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zombablaboratory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018db61e5aa400000403004630440220389561c86988156fb51c0e2833e21c2212b2ddec6ffd5516aef9dae8e03839cf02202fdbc9a1d5733051bc891c362f5ad5d72725dffcf5f18799d303ab23f854876900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db61e5afb0000040300483046022100976b9f7e839ce58c35f65fee7fb45b9f6f038009635c005190f178aa5f443971022100ac2fe64538405ed969e9c0640d8a3538bcf88d9be4ad4818e09126079ea2eaec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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