dd214tee.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a2:24:56:9e:90:70:c2:71:6d:09:28:73:d3:20:4c:e9:59 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dd214tee.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a2:24:56:9e:90:70:c2:71:6d:09:28:73:d3:20:4c:e9:59
Serial Number (int): 403623189129675578801528630146824881891673
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f5:35:38:6a:ab:ee:11:e2:9c:da:c3:78:9b:7f:28:0a:54:65:80:45
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:a6:c5:b5:c8:cd:1c:bf:c6:b6:46:b7:69:75:2e:f9:a0:fb:9d:c8
Fingerprint (sha256): 3f:7b:f1:ea:bb:d1:b2:f9:7c:87:88:98:eb:af:f8:8f:00:e6:64:db:15:2e:72:68:af:5c:0c:80:51:81:6d:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dd214tee.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dd214tee.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ajbellworldchampionships.com
*.alirn.net
*.alternative-photonics.com
*.bayareafarmersgroup.com
*.bigshare.info
*.blueredroad.com
*.brandregard.com
*.brisaslowfashion.com
*.caralbert.com
*.chinaokk.com
*.cloud-common.com
*.conferencealert.online
*.cowboyscustom.co
*.curious-lepechaun.co
*.dana.au
*.dark-water-studios.com
*.dd214tee.com
*.dinheirotop.online
*.dvtv1.com
*.fataltoftheflesh.com
*.glmtrades.pl
*.gpornoogle.com
*.happkha.xyz
*.hwf.au
*.j1nx.xyz
*.kitchen-inosse.com
*.linkrajasloto.win
*.lolasonline.com
*.marketingmaker.co.uk
*.melisssa.net
*.nsbutterflyhouse.com
*.organclearinghouse.net
*.orgcoveredca.com
*.paytouchstoneimaging.com
*.pearlietoothbrush.com
*.pinderbags.com
*.profe.me
*.sciways.co
*.simulationarguement.com
*.steringtonjewelry.com
*.teksoup.com
*.tidenstanker.online
*.tiggal.xyz
*.tritonswim.info
*.viastructures.co.uk
*.vuekyg.pl
*.widzewiak.mobi
*.yellowaccounting.asia
*.zdiar.info
*.zi6w8.space
ajbellworldchampionships.com
alirn.net
alternative-photonics.com
bayareafarmersgroup.com
bigshare.info
blueredroad.com
brandregard.com
brisaslowfashion.com
caralbert.com
chinaokk.com
cloud-common.com
conferencealert.online
cowboyscustom.co
curious-lepechaun.co
dana.au
dark-water-studios.com
dd214tee.com
dinheirotop.online
dvtv1.com
fataltoftheflesh.com
glmtrades.pl
gpornoogle.com
happkha.xyz
hwf.au
j1nx.xyz
kitchen-inosse.com
linkrajasloto.win
lolasonline.com
marketingmaker.co.uk
melisssa.net
nsbutterflyhouse.com
organclearinghouse.net
orgcoveredca.com
paytouchstoneimaging.com
pearlietoothbrush.com
pinderbags.com
profe.me
sciways.co
simulationarguement.com
steringtonjewelry.com
teksoup.com
tidenstanker.online
tiggal.xyz
tritonswim.info
viastructures.co.uk
vuekyg.pl
widzewiak.mobi
yellowaccounting.asia
zdiar.info
zi6w8.space

Other certificates including the domain name dd214tee.com

(limited to 100 certificates)
dd214tee.com
*.allworkstation.site
dd214tee.com
dd214tee.com

Certificate

The complete raw certificate details for dd214tee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403623189129675578801528630146824881891673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 09:50:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 09:50:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dd214tee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688564363985648374344314981394381821972811250302956997183272002485410232090708901518523687798878107800947656647484805472144518272919593114912098316686595276874703325056682977335681430218202569121587032396176626403384299895234870680396807911687937439848729884988199289009506630301700182010336203994828183043340260372916934990639386622051504648752545529451085797648434827234120142668106441848425438405148120188166089367002533263532010780644310060518089906248453780858661622067449676033377724738628987789640407996858189973943926388076283338442969973258441811670037639812092916057543348115401585055582681477067299411358270557535872347525722738950026863035236595231707444020325798640577974770144832991687835801823754285650831532899940378808203475774212944165868628836530838238965628376804840865694683133330968907414328256849115439969956023049352900463218496494596837223933009177909385137488952807379132881548672430738219953399060029248533977475343958902490279189985188529782331790842845839155199594515598455283950884709863856711462982579582097883830139161600047920031433774841217842819203628787226447700258085818824580623726910538314526248078926408510191693685401880716234500375116242819301292474612371702859791210178910028318821165260569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f535386aabee11e29cdac3789b7f280a54658045
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajbellworldchampionships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alirn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alternative-photonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayareafarmersgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigshare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueredroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brandregard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brisaslowfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caralbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinaokk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud-common.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conferencealert.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cowboyscustom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.curious-lepechaun.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dana.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dark-water-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dd214tee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dinheirotop.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dvtv1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fataltoftheflesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glmtrades.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpornoogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.happkha.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hwf.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.j1nx.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchen-inosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkrajasloto.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lolasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketingmaker.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melisssa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nsbutterflyhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.organclearinghouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orgcoveredca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paytouchstoneimaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pearlietoothbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinderbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profe.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sciways.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simulationarguement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steringtonjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teksoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tidenstanker.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiggal.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tritonswim.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viastructures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vuekyg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.widzewiak.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yellowaccounting.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zdiar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zi6w8.space'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajbellworldchampionships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alirn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternative-photonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayareafarmersgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigshare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueredroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandregard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brisaslowfashion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caralbert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinaokk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud-common.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conferencealert.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cowboyscustom.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curious-lepechaun.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dana.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dark-water-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dd214tee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dinheirotop.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvtv1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fataltoftheflesh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glmtrades.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpornoogle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'happkha.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hwf.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'j1nx.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchen-inosse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkrajasloto.win'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolasonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingmaker.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melisssa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsbutterflyhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organclearinghouse.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcoveredca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paytouchstoneimaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pearlietoothbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pinderbags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profe.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sciways.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationarguement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steringtonjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teksoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tidenstanker.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiggal.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tritonswim.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viastructures.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vuekyg.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widzewiak.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yellowaccounting.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zdiar.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zi6w8.space'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c2500aedb0000040300473045022100a192da5169e0770c14c15cae2e766c113d105da96ab0341c7dd8739f5878d2ff0220336f2d4de3b8191cf5099f6b77e42f848e79721b34354fa3f81cb049b3ab557f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c2500aee700000403004830460221008ae0ef31fe2cfaf2fe26ca7238c973d113558362b91db1e2e9eaf62ccabf6b4b02210084c963322e21e0a017bd3a093f806a0f6f8aaf98698935a610c3c707f7557370
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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