gemoishop.com

Issued by R3

About this certificate

This digital certificate with serial number 03:da:d1:1e:51:16:61:17:07:88:7c:06:4d:2b:b7:c4:4a:5f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gemoishop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:da:d1:1e:51:16:61:17:07:88:7c:06:4d:2b:b7:c4:4a:5f
Serial Number (int): 335796379848718373795073015382607309064799
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:88:45:d6:2d:b8:46:5f:d4:1c:e9:5c:da:17:f0:bc:37:0b:6f:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:34:b5:d7:b5:03:c9:f9:cf:2b:1e:08:e2:28:8c:c2:47:3a:bb:3d
Fingerprint (sha256): 3c:c1:4c:8b:75:d1:7c:ef:d4:2d:de:07:85:1c:e4:62:c5:40:dd:98:2e:48:df:94:05:7d:f6:f0:8e:af:06:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gemoishop.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gemoishop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2022gamesland.info
*.51vob.com
*.albatrosheadcovers.com
*.altadefinizione01.co
*.animallover.store
*.arborexpertsonline.com
*.art-news.online
*.banhcanhvinhphu.com
*.breakdownservicesaus.com
*.carnalter.com
*.cnn-news.site
*.coinisio.net
*.dakarville.com
*.dance2sense.com
*.elbiky.net
*.elleryland.com
*.euronewdeals.com
*.everworldsite.com
*.fullphimzz.net
*.funnelmafias.com
*.gemoishop.com
*.gfmsme.com
*.godsmurfs.com
*.hennaskriver.com
*.hertees.com
*.igre6.net
*.inmapower.com
*.ismaroc.com
*.jurorks.com
*.kavehafrouz.com
*.klinikhidupbaru.com
*.langadvisor.com
*.lianyingqipei.com
*.lisikaerdun.com
*.mariachieltriunfo.com
*.martabasadrenutricion.com
*.moneytrack9.com
*.namstoredongnai.com
*.net-25.com
*.pervertgirlavideos.com
*.ponkotsunews.com
*.redarmydsm.com
*.repossessed-cars-68474.com
*.smokinjoesbbqdenver.com
*.smu-sics.com
*.supercutegirls.com
*.thanhphocanho.com
*.thewinehouseproject.com
*.vitquaybinhduong.com
*.zenxnovel.com
2022gamesland.info
51vob.com
albatrosheadcovers.com
altadefinizione01.co
animallover.store
arborexpertsonline.com
art-news.online
banhcanhvinhphu.com
breakdownservicesaus.com
carnalter.com
cnn-news.site
coinisio.net
dakarville.com
dance2sense.com
elbiky.net
elleryland.com
euronewdeals.com
everworldsite.com
fullphimzz.net
funnelmafias.com
gemoishop.com
gfmsme.com
godsmurfs.com
hennaskriver.com
hertees.com
igre6.net
inmapower.com
ismaroc.com
jurorks.com
kavehafrouz.com
klinikhidupbaru.com
langadvisor.com
lianyingqipei.com
lisikaerdun.com
mariachieltriunfo.com
martabasadrenutricion.com
moneytrack9.com
namstoredongnai.com
net-25.com
pervertgirlavideos.com
ponkotsunews.com
redarmydsm.com
repossessed-cars-68474.com
smokinjoesbbqdenver.com
smu-sics.com
supercutegirls.com
thanhphocanho.com
thewinehouseproject.com
vitquaybinhduong.com
zenxnovel.com

Other certificates including the domain name gemoishop.com

(limited to 100 certificates)
gemoishop.com
gemoishop.com
gemoishop.com
gemoishop.com

Certificate

The complete raw certificate details for gemoishop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz1EgNHN3JBPORAZW4RGp
e2LpYDsi69K2kJOR3xdQp3LdJQDFgzxWeTTndBy6gTuSNHnuCdFzp17PhNDZJvEO
7Ly8sq7vBtDQiVgB30zEBnZDHCFFV/FMud0oLpBZB7OLmjjaF5hdzxRSBNIROZ9g
yQIgXhCAc9YovxvlIvKDGST4kcPjhCjHJrzetEWdbd29C24EYjP7YkmrRlHYFku7
1O4YI1PHymql18GTCzSr4LiSX8/MdcWQEmHbGBOjrGIf3GZUykKGOrUpLaByN+Kq
0D/TVX9FJHajSyWTN1ia7XyY6gtMAef7zBLzdEahiz+uYVfPyrgwckyk2BqaHkBu
AanrfB/AErl1poRpGdIxxUiRruDniAh35MC71r2+wkX/eRoSWHBmmdTwyRWWAQ3L
LFNBiNqY1KyEcHXx5fDmFcL1ggcWUF4ipCYu062pvldRCHwC1Xsq9bhTPsSGufMr
+RKqJPsVKO6g5kAS4I3RcfuLWPxMxfr9jlgasxcvOA2C2RzNPYstfPfTIQN+s4sv
RQvCdPvAfATGYFWIeMWXwK9d0iYBt6uzKW0j8exPoIuC7NvAsrx/NxlEZaKx2+bc
zLwKhuLSQDumY2UaKHc57wYuJ6YpoMmX05vhQlMycJ7lhICLsAEP6czou65y5p27
NuD53yOfP+NGaQiBPdv+AV0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335796379848718373795073015382607309064799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 08:19:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 08:19:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gemoishop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845779151729063281130287127397878756092195670552159512747840292157974873917249497152846436796757399808310226540398329619521314742284026976851669842134004235009775546475748995581885374353256590503314046285116196746295059426434629377665741740844204042463833001275852419240284741636038519107759479064472871680623860676399406492832774511895933923500969451951337953010752989298195458552525481213444269331929733702864934998334085006699942351501816980590791660501259940318677909289546254668863125809861484201762360484288784637564056187614290818570345729790530111950886643988594752035717458023394509586992367081638699020155508945148161617694076117540163134246341309802780027279572106343347735993154329261927357503425724344604693476795551424707024739787538587517572582218978100503160314567842724637811197644324296238340580817577698543437495213140730791590228508210035463822419122189092751507339643669741711436826878560671920339909624888259841686029662017391228666785777484765647588674042719861224621105794893246129237328240993394249763536153078465865389269629172471988755693078970161963381545542129298416513078558043398794510620477055208070531802762366862506032045471943650563898776484991113179674611532232879968335597961219693732810951885149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							388845d62db8465fd41ce95cda17f0bc370b6ff4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1908 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2022gamesland.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.51vob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albatrosheadcovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altadefinizione01.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.animallover.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arborexpertsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.art-news.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banhcanhvinhphu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breakdownservicesaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carnalter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnn-news.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinisio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dakarville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dance2sense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elbiky.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elleryland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.euronewdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everworldsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullphimzz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funnelmafias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemoishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfmsme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.godsmurfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hennaskriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hertees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.igre6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inmapower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ismaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jurorks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kavehafrouz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klinikhidupbaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.langadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lianyingqipei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lisikaerdun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mariachieltriunfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.martabasadrenutricion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneytrack9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.namstoredongnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.net-25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pervertgirlavideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ponkotsunews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redarmydsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.repossessed-cars-68474.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smokinjoesbbqdenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smu-sics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.supercutegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thanhphocanho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewinehouseproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitquaybinhduong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zenxnovel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2022gamesland.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '51vob.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albatrosheadcovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altadefinizione01.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animallover.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arborexpertsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'art-news.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhcanhvinhphu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakdownservicesaus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnalter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnn-news.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coinisio.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dakarville.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dance2sense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbiky.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elleryland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euronewdeals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everworldsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullphimzz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funnelmafias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemoishop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfmsme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'godsmurfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hennaskriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hertees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igre6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inmapower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismaroc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jurorks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kavehafrouz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klinikhidupbaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'langadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lianyingqipei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisikaerdun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariachieltriunfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martabasadrenutricion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneytrack9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namstoredongnai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net-25.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pervertgirlavideos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponkotsunews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redarmydsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repossessed-cars-68474.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smokinjoesbbqdenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smu-sics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercutegirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanhphocanho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewinehouseproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitquaybinhduong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenxnovel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fd83f47a800000403004830460221008cc9a548f4fe6d5f5daf85c3f432cf6f6eaaebf4d45e46688d0c073b95102509022100b16287ffbe08b6994ee87876c66c5a4b4d5851424d4c2175dc72090db5ec80ea00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fd83f47c50000040300483046022100b6deb30822413be9065e5587863b4bd343a9b73a3a2e1e8fd4eda0df526da88e022100f1bd0eb4ea7a58ce7f41aceaa1e3b811e1253292195cd42961a5db29b5dd3473
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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