offenda.com

Issued by R3

About this certificate

This digital certificate with serial number 04:21:ca:ea:a3:f7:78:8f:13:51:8f:b1:56:8b:73:28:26:5f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=offenda.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:21:ca:ea:a3:f7:78:8f:13:51:8f:b1:56:8b:73:28:26:5f
Serial Number (int): 359948184213684838741824445603591905355359
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:3c:cd:17:8a:51:18:80:99:b2:c1:19:bb:9d:60:74:e2:15:f1:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cc:1a:1f:80:f0:14:71:24:20:00:35:fe:fb:3d:0c:c8:85:33:8d:3f
Fingerprint (sha256): 44:2a:8e:20:e6:74:67:36:39:c7:11:74:b4:39:42:ec:0f:83:34:62:ad:59:9d:e8:f8:31:59:06:04:79:e9:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate offenda.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for offenda.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.11anime.net
*.1hgirl.com
*.20sogirl.co
*.aliexpe.com
*.ascentas.com
*.batdoc.com
*.casero69.com
*.chasea1.co
*.choiceadvantsge.com
*.chorac.com
*.chuyennhadat.co
*.cleansextube.com
*.coblix.co
*.desirulez.us
*.ecologicallyproduced.com
*.emplloyeenavigator.com
*.fairwindgroup.co
*.femdomvip.com
*.filgentgenetics.com
*.flaviogbainvestimentos.co
*.gaminformer.com
*.gitllab.com
*.greytrip.com
*.htfashion.co.uk
*.imgwet.com
*.imsatv.com
*.kinogidrogen.com
*.ktownautosales.com
*.lennonnoah.co
*.mediadisk6.net
*.mekimeki.info
*.microsofhup.com
*.mortgagerescue.com.au
*.mypervyfamily.co
*.northq.com.au
*.offenda.com
*.partesdeautos.com
*.payxhex.com
*.reappraisers.com
*.risveglio.com
*.sekisuihouse.co
*.thinxbig.co.uk
*.unarcrush.com
*.vansetistudio.com
*.w5m.co
*.wrongtown.com
*.wunderwheel.co
*.ww5n.co
*.xfinitystreamapp.com
*.zabarsky.com
11anime.net
1hgirl.com
20sogirl.co
aliexpe.com
ascentas.com
batdoc.com
casero69.com
chasea1.co
choiceadvantsge.com
chorac.com
chuyennhadat.co
cleansextube.com
coblix.co
desirulez.us
ecologicallyproduced.com
emplloyeenavigator.com
fairwindgroup.co
femdomvip.com
filgentgenetics.com
flaviogbainvestimentos.co
gaminformer.com
gitllab.com
greytrip.com
htfashion.co.uk
imgwet.com
imsatv.com
kinogidrogen.com
ktownautosales.com
lennonnoah.co
mediadisk6.net
mekimeki.info
microsofhup.com
mortgagerescue.com.au
mypervyfamily.co
northq.com.au
offenda.com
partesdeautos.com
payxhex.com
reappraisers.com
risveglio.com
sekisuihouse.co
thinxbig.co.uk
unarcrush.com
vansetistudio.com
w5m.co
wrongtown.com
wunderwheel.co
ww5n.co
xfinitystreamapp.com
zabarsky.com

Other certificates including the domain name offenda.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for offenda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359948184213684838741824445603591905355359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 12:28:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 12:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'offenda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663771453948051984312221280924389419069916732797196174706658189199435481062031247096764160878080387254733256949839261583641037998498327561876800901857271936421660459160453325333742239762170822036254918653328818348437850773393247694457397715546979484768427552396192064416025035929985530505890217100815357434204432750270339130400867990009080241388275968828163100742848138330092541980156360508806116676679223306430219361290078546185147973801009363427686556015651690980978824394026329955068744119586391307622311567767678721239261579707515972411731635667845866022182865027062863176796424393011975615505416912373549761625890812491427383904281108786247198024397472989167889665002377284430412990075836713015253664189293285705649389516524887693099520873901894997235332451383307096597352776549477422295386471910977313842168766496833240314471634822216607569388685096275641879794972015436644936844358622179672166555664285658413183639792592897421215666451303114448370806008754620740577840516829474126711370723391012022771185325076538855387075707776352595854608300329502165072323354654253898036653846618779479980216344839375783494136290382402784290221706142997108628784136697944281325975662345550151653956143429001471001469783111095282017916097979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b03ccd178a51188099b2c119bb9d6074e215f1ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1700 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.11anime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20sogirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casero69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chasea1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.choiceadvantsge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chuyennhadat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleansextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coblix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.emplloyeenavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fairwindgroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filgentgenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaviogbainvestimentos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imgwet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kinogidrogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ktownautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lennonnoah.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediadisk6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypervyfamily.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partesdeautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payxhex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sekisuihouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unarcrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vansetistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w5m.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrongtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wunderwheel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ww5n.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zabarsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11anime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1hgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20sogirl.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliexpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascentas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batdoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casero69.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chasea1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choiceadvantsge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chorac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chuyennhadat.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleansextube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coblix.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desirulez.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecologicallyproduced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emplloyeenavigator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fairwindgroup.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femdomvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filgentgenetics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaviogbainvestimentos.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaminformer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitllab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greytrip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htfashion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgwet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imsatv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinogidrogen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktownautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennonnoah.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadisk6.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mekimeki.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsofhup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagerescue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypervyfamily.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northq.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partesdeautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payxhex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reappraisers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risveglio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekisuihouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinxbig.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unarcrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vansetistudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w5m.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrongtown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wunderwheel.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww5n.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinitystreamapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zabarsky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bce04794c0000040300483046022100a513c3132895cfa16730923ff75ed4826997fadcd06f01ffd6fcb609ded50773022100bf81334e6e27ff0c3192998b19b0f3a2d28519d4e4745f1e874368f2a05cec4300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bce0479860000040300473045022059836e1fa98865a92b7f39b76f9a30f4934383e60d7395b8c09dbff5de371826022100ac3b0f60935a5e2730eb3dbb0f7cc4aaab10cd8fd26ddb5e362580b456343fce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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