lucita.com

Issued by R11

About this certificate

This digital certificate with serial number 03:89:e8:1d:09:d6:96:b6:5e:cd:9f:c3:61:60:5f:88:12:81 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lucita.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:89:e8:1d:09:d6:96:b6:5e:cd:9f:c3:61:60:5f:88:12:81
Serial Number (int): 308264073734623463861454448108487144116865
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:d4:06:9e:1e:0b:a0:f8:87:6e:bc:85:b7:69:cd:22:7e:20:f1:a8
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): 9d:b9:c2:da:cc:1f:2a:fc:e1:25:85:ca:ef:b5:72:28:bc:4f:23:b4
Fingerprint (sha256): 41:f3:c8:9e:15:a5:c4:94:c5:f5:c6:74:39:ad:a3:5a:06:7a:b9:fa:95:96:e7:df:d3:54:87:8c:1e:22:f8:9d

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate lucita.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucita.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5ivefrags.com
*.adsglobals.net
*.ajuma.com
*.akepe.com
*.angelhelp.com
*.asbos.com
*.avgleam.com
*.barefootslippers.com
*.basah189slot.com
*.bunao.com
*.chabadpuerto.com
*.christeen.com
*.clevopa71.store
*.cristello.com
*.cuentame.com
*.cuentoslossilos.com
*.felicepatra.com
*.funbe124.com
*.guanjiu.com
*.haded.com
*.jealycheat.com
*.jschallenger.com.br
*.koulu.com
*.kpopnews1.com
*.kuzhel.com
*.literal.online
*.locating.mobi
*.logicalshoutupdateswhatsap.com
*.lucita.com
*.matrimonioslgbt.com
*.mentero.es
*.minimensajes.com
*.musallam.com
*.oldhaven.net
*.orbitmultiplex.com
*.pandhi.com
*.piste.net
*.pizzeriababylon.com
*.refinancebrokers.com.au
*.sexnow7.us
*.strahovski.com
*.tattoli.com
*.thecouponcard.com
*.uelynchmusic.com
*.ukiyo.com
*.us-trumpchristmasbox.us
*.vmst.us
*.xrgoovy.com
*.yasushi.com
*.yeileng.com
5ivefrags.com
adsglobals.net
ajuma.com
akepe.com
angelhelp.com
asbos.com
avgleam.com
barefootslippers.com
basah189slot.com
bunao.com
chabadpuerto.com
christeen.com
clevopa71.store
cristello.com
cuentame.com
cuentoslossilos.com
felicepatra.com
funbe124.com
guanjiu.com
haded.com
jealycheat.com
jschallenger.com.br
koulu.com
kpopnews1.com
kuzhel.com
literal.online
locating.mobi
logicalshoutupdateswhatsap.com
lucita.com
matrimonioslgbt.com
mentero.es
minimensajes.com
musallam.com
oldhaven.net
orbitmultiplex.com
pandhi.com
piste.net
pizzeriababylon.com
refinancebrokers.com.au
sexnow7.us
strahovski.com
tattoli.com
thecouponcard.com
uelynchmusic.com
ukiyo.com
us-trumpchristmasbox.us
vmst.us
xrgoovy.com
yasushi.com
yeileng.com

Other certificates including the domain name lucita.com

(limited to 100 certificates)
lucita.com
lucita.com
lishun.com
lucita.com
lucita.com
lucita.com
lucita.com
kagoot.com
manateecountyrealestate.com
www.vrloving.com
lucita.com
lucita.com
kuleler.com
lucita.com
lucita.com

Certificate

The complete raw certificate details for lucita.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5AGxNl8cFUefnJxEvu/n
WvTZD0mDSdLTkYaVuhPV46oHKYGkLue8U9zl33w8NwVq2ErIXn0RvEI5ueiDPSwV
DXLq1HphT5wQh261IFS35+/LnMA+BCc1ShBSjWQ399fK58nSfCFaMC7OWRdkCMoP
t17OAWRE98FhVn2ivaafUYE5dqU8za/kv1qJPFeot0k5hqk09KNr8HvyEqtguP7s
6g0evw259iaxQD0SE5aSD5mlgLdS/DlcoW2CMsqct1ZJQFMfUDHlFdoQpBqrw9W2
i0uVxuj4CviMfT/kc/oci010ThfsELLoJkxB3IBFHnRQ9fNSGWnNvYXITUkJqkcL
VkTEOyXCBe102xMwu6gfF2KF2jgISEZF2SY6eEzebyKd5ZAiVJHNeSJGaI/Fxb6q
mBAVgmQCr9oopuB9zYhNUGKvPKQV5IJ9DmlNmX7k/NDQwXhxqSqNt0w/wQM87CPL
LGXxStKwmrL633xrp5ZK4MgdDpwunqH//rAp+Z8/w6wT6fcIfPg135a+j3WLZxSO
odh2NoJTiYE3ZNi6Yp8G4b53+AC4LQYP0o7KtxvQvCp7SXRoqK+WIURlMhR1kNZH
cFQyQh5f2W3qX+8C1nFPsBNHX3gKPr/B7q3s6NXfvcx628OFxCfuQjYamwB4YcWa
AVkvJbwNT4HC74cS/MsAyfECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308264073734623463861454448108487144116865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 07:25:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-14 07:25:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucita.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 930185815165327123475300025200825257414895049299051493560682420400290060978649962283215111653297082251062023320799504007052058923708257458745838287867867355371473124393715117821649236107290659350972391929297345067800159087615694517398308471260971335655544619746232041593218226619970139344713172041153170110053595845539687553520574382891813454749495549258345989308326407005201291790892697085003951464579346593422989459381867261100849344709904300778230177822356146315077132141061021808775269467732248770255987976260369232719640586335051963512915351812550108334755639290582883863353314151210365424927268726465956033280340164449112534197889364090371463032339235770502048223272413673588770376377124584594299611389344533627640825292187495631952011848668821702432958673183925794591533526236719131807860659665680813908641570284672295192016196866456290001146801822436477860903172083416570693653747813172292264567487480411198665550760666220978151017377895123066705517060960951377303108445206150563467861956344122691956806297938015016036548680560570494764678602594942317033992895211601912046277035942380059820252985143914934874419914479324828336018141488196030607243268534448732237015519104477532278731206996217037908522561641720655532078975473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7d4069e1e0ba0f8876ebc85b769cd227e20f1a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5ivefrags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adsglobals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angelhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avgleam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barefootslippers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basah189slot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bunao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chabadpuerto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clevopa71.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cristello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuentame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cuentoslossilos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.felicepatra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funbe124.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guanjiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jealycheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jschallenger.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kpopnews1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuzhel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.literal.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.locating.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicalshoutupdateswhatsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matrimonioslgbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mentero.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minimensajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musallam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oldhaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orbitmultiplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pandhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.piste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizzeriababylon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.refinancebrokers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexnow7.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strahovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tattoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecouponcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uelynchmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ukiyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-trumpchristmasbox.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vmst.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xrgoovy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yasushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yeileng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5ivefrags.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsglobals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajuma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akepe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angelhelp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asbos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avgleam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barefootslippers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basah189slot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bunao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chabadpuerto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevopa71.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cristello.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuentame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cuentoslossilos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felicepatra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funbe124.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guanjiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haded.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jealycheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jschallenger.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koulu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpopnews1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuzhel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'literal.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locating.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicalshoutupdateswhatsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matrimonioslgbt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentero.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minimensajes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musallam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldhaven.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orbitmultiplex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pandhi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piste.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzeriababylon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refinancebrokers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexnow7.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strahovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tattoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecouponcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uelynchmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukiyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-trumpchristmasbox.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmst.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xrgoovy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yasushi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeileng.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001902026acdf000004030047304502207a46add299a96ebf7d83d8951aa2a03c14a0a048d1e57a4da72ce870f1dd299c022100f1767d07e1f97928b73502bc188ae9fddaecde57c8d9834d9b3f73923b793db900760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001902026acda000004030047304502204586e1859c1668a69d6840aac6479f27d389d17aba6f536a19cc8a0b793aaf120221009bdb1ffb06cded0a5d5d964ddab1c9cd143d1ba63a545e27f97bd65f98da549e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a7fad9b1b9f0f0b2bf27439baf48e6513bc58f9f277a85115325ed61f40a737bca92f1debed75a1e7661e94b6aea6447283a372e1e29e89226d41c4a9b709148a3db4c1473877749b509dbde8ad79c42cb23b4a42eba49e2d0f9eb33dbcde476a7734d91a33ea6ad6e717fd1650b350c68b8c8c4b7c9bd1968b0ab831a2e41042228720497adb340c93e9ac0cc0bad032c0b7fad470a048e41b767778cd45384a566d9a95d42d2e26839e506d79d2e94e693dd48fcd44871b3caa5c548943c1cb439b19a3453e4f4dff4d3e1aa578dbab03f5375f73a36575cc73db5536fc7be90055ffd9a6758f97032f13ff96d39c38b374dd833004104bf92ef43811406d