barneyclay.com

Issued by R3

About this certificate

This digital certificate with serial number 04:e4:bf:b4:b9:28:7a:88:10:87:46:5c:38:e1:57:7d:8e:02 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=barneyclay.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e4:bf:b4:b9:28:7a:88:10:87:46:5c:38:e1:57:7d:8e:02
Serial Number (int): 426288344301097236296135288930048147295746
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fd:58:af:ad:64:69:59:9b:f7:fd:32:81:41:f4:a0:d6:0c:8b:4b:41
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:bb:44:2f:dc:e8:f3:1a:c2:7e:82:d3:e1:13:47:47:4f:9d:ab:02
Fingerprint (sha256): 3c:e5:7b:73:9d:21:75:9d:02:33:7f:6f:5e:fa:47:97:76:d6:8a:91:cd:20:91:cb:f2:ec:07:5b:de:ff:fc:c6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barneyclay.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barneyclay.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abacus-arte.com
*.absolutgranada.com
*.baoshuu.cc
*.barneyclay.com
*.bautiza.me
*.bestfantasystories.com
*.botanicandterre.com
*.broome-tioganaacp.org
*.canarygirl.com
*.cartography2.org
*.cloudworks.com.au
*.comapany.site
*.cuacuonaustdoorvn.com
*.cutlink.org
*.dtrip.chat
*.ejournal1.com
*.elpartidodelau.com
*.elshanhaydar.com
*.ethiodailypost.com
*.great-taste-chinese.com
*.hkjenis.com
*.hospitaldivinaprovidencia.org
*.icefust.net
*.intelindia.com
*.jedimouseketeer.com
*.lifbay.com
*.mrfellows.net
*.multi114.com
*.mummysknee.com
*.mustanggt.info
*.noirthetic.com
*.ostst-altimetry-2022.com
*.pobedimstress.info
*.prokuratura.guru
*.qianli2.xyz
*.revive275.com
*.rftuozhan.com
*.rtppentaslot.pro
*.sailing2008.org
*.skylarmainecoonkittens.com
*.societalmetabolism.org
*.specialtylife.com
*.stcrispin.org.uk
*.swimsuitboys.com
*.synonym.guru
*.theretroblog.com
*.tudodeblog.com
*.whatanime.com
*.wow197.com
*.zaksmoker.com
abacus-arte.com
absolutgranada.com
baoshuu.cc
barneyclay.com
bautiza.me
bestfantasystories.com
botanicandterre.com
broome-tioganaacp.org
canarygirl.com
cartography2.org
cloudworks.com.au
comapany.site
cuacuonaustdoorvn.com
cutlink.org
dtrip.chat
ejournal1.com
elpartidodelau.com
elshanhaydar.com
ethiodailypost.com
great-taste-chinese.com
hkjenis.com
hospitaldivinaprovidencia.org
icefust.net
intelindia.com
jedimouseketeer.com
lifbay.com
mrfellows.net
multi114.com
mummysknee.com
mustanggt.info
noirthetic.com
ostst-altimetry-2022.com
pobedimstress.info
prokuratura.guru
qianli2.xyz
revive275.com
rftuozhan.com
rtppentaslot.pro
sailing2008.org
skylarmainecoonkittens.com
societalmetabolism.org
specialtylife.com
stcrispin.org.uk
swimsuitboys.com
synonym.guru
theretroblog.com
tudodeblog.com
whatanime.com
wow197.com
zaksmoker.com

Other certificates including the domain name barneyclay.com

(limited to 100 certificates)
barneyclay.com
barneyclay.com
barneyclay.com
pubgf.co
barneyclay.com
barneyclay.com
barneyclay.com
pubgf.co
barneyclay.com
barneyclay.com
pubgf.co

Certificate

The complete raw certificate details for barneyclay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnRAyNZz2bDIgJVKzDy9t
5VVl5QNTcTDS8KTbR86Vglr0e9c6uJx9rz/EiZDZCB7+X8YnOxEAeB9Yz/g+Hi9L
1BYFIDS66Ca/C5nbL0ypwLWlR8tQodYmBzfolOX/jLiC41iTZbrvjnmLePYeRNVb
/V95a2ZpKRnjYK5bOi49taQyHzTCDsC8HN22Y0iJ/jB2GckYAiIHxRFjarZTTYb4
+5xeelYSio7vB5pPDrAJCHbCSuZ4uNRG/aXE4PehYMfeIC949Cv5YcZhQvKJLa0P
U6OEUw+z+pPQBVjoQru9s4HBRB1fOlZ8xh69TJ6fInymGLDi8K+EKPHBHhXoUzeU
AJMC8b1HpmjdIcBBB6jDJCIjVALFITvEQ7n9sIoa4aR0hqKp75r+zk+dq3796bbe
M7rAtCsy/nqm64Yx88/tf2/5yzZYhgpi6kl2d3iynIMI6hdUaQUHo+kb0zcW6hYW
LhTO+xXTO6BbcvDadmYjhHQraWPt4SYb2LuOQQy12U1EsQ2n49FmIAoStLDquEef
YVssZMqN+Vkke4M2ctSz/gbTbFmhD8Q5eXG5BXEtpnrFIIkIf8rLmWWYQJ4yKYl0
6h7jBuuO9BOChp8eNB1+k/Fl8JEb80n//JUIbzw81zreJKc6Bb1qC1Mi4dnnnqb0
ekpV4dx4qDnLGj0TC/TBTicCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426288344301097236296135288930048147295746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-02 19:37:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 19:37:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barneyclay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640762221991702824515794363886752964942031812356086395949914380611870085240426009166901813619718487198147514596291980310976930561791309319228923051875218930873774459267955107990012002450070492239876798810921434185137380315293965236977400970175370421104509200818056259886972503333299994306252877016963546118029521730316171475116767038319771350780042055244502095289543844370929800928422795742166853599988714593274422746891631751737275463761043621848833839536388880076886514395706603223629368681707067759500155948596517701266015585746474567365478249720307124606853126488503758365138829731545760099136497644411302713817702010014441217103219671342525940555030213090814042383442069526406566888017079362917120345751515216730684610220370125996976177150731139230926174353972093410721296793823902114909316198447480915589919619008741978091733369103813722360015153438826327690489994496367167204258018328965303998640929594247629663649563551995405024984514625721149053184734744580031723091321961070078202923253383825353834769407759828357374550335359594959332731911578589656811483955471140450038394909858177678206643122859910000864028150047588831462286887422970593193750419587396445325641571183926884280578990996869639139448876952779046921667956263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd58afad6469599bf7fd328141f4a0d60c8b4b41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1866 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abacus-arte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.absolutgranada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baoshuu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barneyclay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bautiza.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestfantasystories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanicandterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broome-tioganaacp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canarygirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartography2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudworks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comapany.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuacuonaustdoorvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cutlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dtrip.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ejournal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elpartidodelau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elshanhaydar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ethiodailypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.great-taste-chinese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hkjenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hospitaldivinaprovidencia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.icefust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intelindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jedimouseketeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mrfellows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multi114.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mummysknee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mustanggt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noirthetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ostst-altimetry-2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pobedimstress.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prokuratura.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qianli2.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revive275.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rftuozhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtppentaslot.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sailing2008.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skylarmainecoonkittens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.societalmetabolism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialtylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stcrispin.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.swimsuitboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synonym.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theretroblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tudodeblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatanime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wow197.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zaksmoker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abacus-arte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'absolutgranada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baoshuu.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barneyclay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bautiza.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestfantasystories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanicandterre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broome-tioganaacp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canarygirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartography2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudworks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comapany.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuacuonaustdoorvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutlink.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtrip.chat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejournal1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpartidodelau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elshanhaydar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethiodailypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'great-taste-chinese.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hkjenis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitaldivinaprovidencia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icefust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jedimouseketeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrfellows.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multi114.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mummysknee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mustanggt.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noirthetic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostst-altimetry-2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pobedimstress.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prokuratura.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qianli2.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revive275.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rftuozhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtppentaslot.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailing2008.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skylarmainecoonkittens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'societalmetabolism.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialtylife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcrispin.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swimsuitboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synonym.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theretroblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tudodeblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatanime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wow197.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zaksmoker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e00e308a50000040300483046022100a0591a6d181a5dcfc3e54177b42cf0efb89f29fd23004f09d14fa0b3045902d2022100fbff012a8fdf2fffb01f5302d0f7ce229d2831b8726206069960f786e22b6be700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e00e308d60000040300473045022100fca9f546e407d62ea06eb799b3bde9a1ad11e1b1f74726d6502fd76ccfac1ba0022028e361d7da703de07552fe9d9217eb3d10e24b443a2a8f2fc0cdab8b97a2707b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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