djknare.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f7:38:fb:fe:b3:48:1d:65:e9:11:8b:5b:5c:dd:00:dd:8a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=djknare.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:38:fb:fe:b3:48:1d:65:e9:11:8b:5b:5c:dd:00:dd:8a
Serial Number (int): 345462347624964186824334481017822815247754
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:61:fd:85:16:15:7b:50:33:b6:4d:3a:74:b7:a8:d5:d6:89:83:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:99:f3:db:50:93:0f:1d:6a:a3:12:8d:fa:eb:b8:42:6b:19:be:a0
Fingerprint (sha256): 43:16:dc:53:d4:af:2d:f0:0d:e9:56:d3:a0:69:72:0b:4a:7a:99:ac:58:87:f5:13:19:35:05:e7:a9:f2:d4:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate djknare.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for djknare.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.4ever.site
*.adulthat.net
*.aircanadaa.com
*.alkvmipro.xyz
*.alvanews.net
*.andriodoyun.club
*.angcapital.net
*.archetypo.xyz
*.becra.net
*.behomesolutions.com.au
*.bhm02.net
*.carsonministorage.net
*.clickercounter.io
*.conleyweb.net
*.countrychristian.net
*.dance-dance-with.me
*.dickwulf.com
*.digitalecongo.net
*.djknare.com
*.doelt-hawaii.xyz
*.espionapp.com
*.freearticlestore.net
*.fzmuvies.net
*.gizlesen.net
*.hire-a-hitman.com
*.huallywood.co
*.insstructure.com
*.instantrank.co
*.jrhackett.net
*.kalimbapiano.net
*.knickerbockergolf.net
*.krwiki.net
*.lasaricreation.com
*.llahz.vip
*.mailingbiz.net
*.manatok301.net
*.mapsxm.net
*.materialdidatico.net
*.migw.org
*.mogulize.net
*.movieto4k.net
*.musicindiaonline.co
*.oxtorrent.org
*.partnershipphp.org
*.portsmithco.com
*.povpervert.com
*.thewhyfactor.co
*.ttfl.online
*.usa3v.vip
*.vpnbook.co
4ever.site
adulthat.net
aircanadaa.com
alkvmipro.xyz
alvanews.net
andriodoyun.club
angcapital.net
archetypo.xyz
becra.net
behomesolutions.com.au
bhm02.net
carsonministorage.net
clickercounter.io
conleyweb.net
countrychristian.net
dance-dance-with.me
dickwulf.com
digitalecongo.net
djknare.com
doelt-hawaii.xyz
espionapp.com
freearticlestore.net
fzmuvies.net
gizlesen.net
hire-a-hitman.com
huallywood.co
insstructure.com
instantrank.co
jrhackett.net
kalimbapiano.net
knickerbockergolf.net
krwiki.net
lasaricreation.com
llahz.vip
mailingbiz.net
manatok301.net
mapsxm.net
materialdidatico.net
migw.org
mogulize.net
movieto4k.net
musicindiaonline.co
oxtorrent.org
partnershipphp.org
portsmithco.com
povpervert.com
thewhyfactor.co
ttfl.online
usa3v.vip
vpnbook.co

Other certificates including the domain name djknare.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for djknare.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345462347624964186824334481017822815247754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 11:50:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 11:50:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'djknare.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722171634846300134015340614418439339782051782646029381998225031035987648906106641626656938187666820112975410406509453199453790389603631568613188642734699993988855006636987773809404760172009301729337196635510252272670610762625624792136961051294238318762152770033471491159365136218606158727654790637630878891281778837426449511812941210974732726298179323881086769478697816238922490870219173728784891504775323541676480838243273868416175028986323083166526610526679408679554708008981515710227641183618431607779964863413601571268258819276347165208303757063640910268298940820929138961628749823107881275287867876455634003586205606442974914282341893836093626711026551369155246422032212547966880501396310916153076758908943677937089150541958195630137271196727653444816094353168202626592707108673331732726397710207019415578527511619987175373692688623807072198771481095574902290724604603196358866257700074671764844548492929556373860372142585145290691021804054147273455004361824464286375544703399280727420763860184542695676866100405621924199877815578761025143726859386140552331051171389763015200982882355247118362253897847204436750633904871453550491774062101034798641313009168881483345105207494974119175000991484121588184489701935748148417826332601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8661fd8516157b5033b64d3a74b7a8d5d68983d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1722 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4ever.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adulthat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aircanadaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alkvmipro.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alvanews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andriodoyun.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.angcapital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archetypo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.becra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.behomesolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bhm02.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carsonministorage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clickercounter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conleyweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.countrychristian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dance-dance-with.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dickwulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digitalecongo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.djknare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doelt-hawaii.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.espionapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freearticlestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fzmuvies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gizlesen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hire-a-hitman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huallywood.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insstructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instantrank.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jrhackett.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalimbapiano.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knickerbockergolf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krwiki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasaricreation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llahz.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailingbiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manatok301.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mapsxm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.materialdidatico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.migw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mogulize.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movieto4k.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicindiaonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oxtorrent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnershipphp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portsmithco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.povpervert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewhyfactor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttfl.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usa3v.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vpnbook.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4ever.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adulthat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aircanadaa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alkvmipro.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alvanews.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andriodoyun.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'angcapital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archetypo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behomesolutions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhm02.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsonministorage.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clickercounter.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conleyweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrychristian.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dance-dance-with.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dickwulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalecongo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djknare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doelt-hawaii.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espionapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freearticlestore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzmuvies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gizlesen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hire-a-hitman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huallywood.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insstructure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instantrank.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrhackett.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalimbapiano.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knickerbockergolf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krwiki.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasaricreation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llahz.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailingbiz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manatok301.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapsxm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materialdidatico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migw.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mogulize.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieto4k.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicindiaonline.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxtorrent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnershipphp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portsmithco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'povpervert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thewhyfactor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttfl.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa3v.vip'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnbook.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1252c4520000040300473045022041964dd195dd2c3f52911581660a69842cb202e6fe630e2cf0ee658d1b6f0805022100e77f574b7a211e7e1d98993cade03df41b79f9fc1652276fd7580370c866993400750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d1252c4c500000403004630440220077c5e915472465260f2d1a56fe11e8ded049a48ea5a7da8895629b52cd30367022058ec5aa635cd784001b0127cd95b857d219deb71ab3735e0d0775367cdf42137
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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