bezpecny.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:8c:d9:c3:3d:a9:fa:31:e8:02:b0:a5:8a:4a:2a:71:58:65 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bezpecny.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8c:d9:c3:3d:a9:fa:31:e8:02:b0:a5:8a:4a:2a:71:58:65
Serial Number (int): 309265845387878842733673545670890666154085
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:ed:3b:f4:0f:38:ab:c4:71:4d:4d:c7:56:f9:b5:2a:09:5a:98:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7d:b7:3b:cb:fc:97:35:5e:f9:f3:f3:33:47:9b:88:db:78:39:72:82
Fingerprint (sha256): 3d:6e:99:d4:7c:02:0a:32:23:1a:35:b1:0a:70:87:a5:6f:de:94:06:6d:0e:b4:e6:9d:f5:3e:62:91:52:42:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bezpecny.cz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bezpecny.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5959douga.com
*.atrashop.com
*.bestmeal1.xyz
*.bestwaycleaning.us
*.bezpecny.cz
*.bratcheda.com
*.brokar-milano.com
*.casinokorona777.com
*.dcstudiotx.com
*.delive.me
*.dllindir.com
*.duckdnc.org
*.easemydebt.co.uk
*.floristdirectory.com.au
*.formatests.com
*.galleriespost.com
*.galway.pro
*.hoanghaile.com
*.larentan.com
*.lastinglongr.com
*.lizamuromskaya.com
*.logobuch.de
*.lpreisvergleich.de
*.mantrads.com
*.movimientosop.org
*.mwa-ny.org
*.nha.es
*.nitrogen.com.au
*.northcliffe.com.au
*.outsidelover4.com
*.pastorjoanwairimu.com
*.playgolfgetaways.com
*.pointfamily.org
*.poslovitsy-pogovorki.com
*.razzak.xyz
*.ristorantecosta.net
*.roxboroughreserve.com
*.runcircuit.com
*.schwefelquellen.de
*.shanbey.com
*.sokany-eg.online
*.srbg.info
*.steepacademy.com
*.t13.online
*.theinvisibleintrovert.com
*.tplinkerepeater.net
*.updaterangpur.com
*.vcrhlq.com
*.wbss.online
*.xonappy.com
5959douga.com
atrashop.com
bestmeal1.xyz
bestwaycleaning.us
bezpecny.cz
bratcheda.com
brokar-milano.com
casinokorona777.com
dcstudiotx.com
delive.me
dllindir.com
duckdnc.org
easemydebt.co.uk
floristdirectory.com.au
formatests.com
galleriespost.com
galway.pro
hoanghaile.com
larentan.com
lastinglongr.com
lizamuromskaya.com
logobuch.de
lpreisvergleich.de
mantrads.com
movimientosop.org
mwa-ny.org
nha.es
nitrogen.com.au
northcliffe.com.au
outsidelover4.com
pastorjoanwairimu.com
playgolfgetaways.com
pointfamily.org
poslovitsy-pogovorki.com
razzak.xyz
ristorantecosta.net
roxboroughreserve.com
runcircuit.com
schwefelquellen.de
shanbey.com
sokany-eg.online
srbg.info
steepacademy.com
t13.online
theinvisibleintrovert.com
tplinkerepeater.net
updaterangpur.com
vcrhlq.com
wbss.online
xonappy.com

Other certificates including the domain name bezpecny.cz

(limited to 100 certificates)
1198.icu
cavanaghtimbersupplies.co.uk
nightshiftworker.co.uk
bezpecny.cz
bezpecny.cz
bezpecny.cz
bezpecny.cz
newcarwarranty.com.au
bezpecny.cz
*.5daypouchtest.com
newjersey.com.au
notebooksbiulliger.de
bezpecny.cz
bezpecny.cz

Certificate

The complete raw certificate details for bezpecny.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsqsVNW9n6EbNJkAQxHE+
N0wiY/5375gHQZaccA7DSRnQuIVmvkigBykHFZIVO9mJTGIpI9ByyW/LxmXpFqKA
L9cJPj5ecBMhZP927Vhc1TvUJzCQiUTV/tiYyWKRiDAzMWIqpS5/Jd8ZD5UtBQbS
zP0BlrhvkyXZKRrbsXKSPwY93O92eVCt1RZtJaAOJjSIjzSCRPD30j/rk2HCf6rO
9jQMfYl4BsARCayGBDLlQg+ZITNuKJ0ABXFj2klTEQsK7V7WTKeLr/91awJ0zFqX
i4blsVxMoHuLDDchEy4i+ea+FCSvSK9vpwobLj5qHgLsXLmgmh5fFb6QNw3p4NUj
WQLn/zQGOAYVfBsrISDvzK0mw7dCwd6dGF02WRaaYEe/9d1yPWtDPUpVFqqb/9U4
dxqxQ5b++IKUv5PCd+WsPJZ01XgGDiG7QuuwKPo1ykKIxUqh6Dk1u+vPWS75bTar
T4c+UNj34c1eQ8H3xsswq/umMG8acudjDgA7KNVKcqFhq3d09SAWEKqGObGHye5/
xza2QqlOsdoThUqV/P0yPHSeZ5EBtlhbzdFt9Bhmq0EgNGQsb0xoF6uA8yPg0gK+
ZvRY49SZzxhkmoN3MbvZo4cWBmwc37bR2S+FMdo/k6ZqITq4u9AkikK9pr7aspUu
u5NEWIjp82drKJhw5juhJqkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309265845387878842733673545670890666154085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 21:49:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 21:49:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bezpecny.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728903039108741548545249733231668618396276538087756438707412918392100568105622390046747075335243728786704243787260997163452191428413059640293520232770254481920206473169251781511622969879808691163729690674988879107573698086077552925238485020727637660119770856265202403937129499343818109285871703137707785440465654292932995944311017983166984067269858170149890212009176943998239902391088644642404862370682650421277347174261322582963287360134059456505278462797986302664570729741937761718722121382338272451164643934144454635408083680980115840069784334565526390508681803725090412135699822815610827138102078162323469000186555955108916353596845151269454299315785937500259479055064739296777691785539111236547058617112075720018136543088531187128500623128371224375129657773905499030389988627235070285296156526217530635951026917965598596982685402388430190041295081966464004315438586558744262661986240203248438583353773394181323797028458266659742150459898001390452644213664445955817279771650092438743631273858299269457030529271700580240495826508205238403381398450982449201968610606572859135551186868650150821745423932728051936023482838172265954715491204673767095480736234899614952626818539247238395848294128368951117038909791538949466709974656681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7ed3bf40f38abc4714d4dc756f9b52a095a989c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5959douga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestmeal1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestwaycleaning.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bezpecny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bratcheda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokar-milano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casinokorona777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcstudiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delive.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dllindir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duckdnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easemydebt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floristdirectory.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formatests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galleriespost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galway.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoanghaile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larentan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastinglongr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lizamuromskaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logobuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpreisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mantrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movimientosop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mwa-ny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nha.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitrogen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcliffe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outsidelover4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pastorjoanwairimu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playgolfgetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pointfamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poslovitsy-pogovorki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.razzak.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ristorantecosta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roxboroughreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runcircuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwefelquellen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shanbey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sokany-eg.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srbg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steepacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t13.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theinvisibleintrovert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tplinkerepeater.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updaterangpur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcrhlq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbss.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xonappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5959douga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atrashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestmeal1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestwaycleaning.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezpecny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bratcheda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokar-milano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinokorona777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcstudiotx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delive.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dllindir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckdnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easemydebt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floristdirectory.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formatests.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galleriespost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galway.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoanghaile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larentan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastinglongr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lizamuromskaya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logobuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpreisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movimientosop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwa-ny.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nha.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrogen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcliffe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outsidelover4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastorjoanwairimu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playgolfgetaways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointfamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poslovitsy-pogovorki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'razzak.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ristorantecosta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roxboroughreserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runcircuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwefelquellen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanbey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokany-eg.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srbg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steepacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't13.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theinvisibleintrovert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tplinkerepeater.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updaterangpur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcrhlq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbss.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xonappy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c3706248a0000040300483046022100d8824894d1761caa1c2f1010a3d8862bb427e87ef11bf30791975702cfb7cfc6022100e8199ad881eeca6c878aa77e5dea967909221e6e3c093cebf3333adad351c13d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c370624df0000040300473045022100eb919ee4ffbf5a7a569b7797e03fe46dc898b2d1af049c224c75c8bfe0483aab02205c4c8c43f0a3f823fc5f491c5787711b001ce53238fdfa54e83f3dec7dda9a67
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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