stocktwis.com

Issued by R3

About this certificate

This digital certificate with serial number 04:73:5e:31:92:bf:82:da:ce:57:8b:36:75:dd:31:8d:62:b0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stocktwis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:5e:31:92:bf:82:da:ce:57:8b:36:75:dd:31:8d:62:b0
Serial Number (int): 387706820753503638928286648487902905721520
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1e:ee:d4:22:e8:a3:bf:d2:a5:c3:f8:5c:6c:32:a6:05:09:cf:c3:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:0a:5a:29:5a:f0:79:11:0a:b3:c1:30:c1:63:52:4b:c7:d4:05:7f
Fingerprint (sha256): 44:37:c3:e8:90:e9:f9:31:16:1a:62:4b:0c:2c:1f:88:cc:c2:6f:bb:3c:8c:72:7a:1b:37:9b:e3:e4:18:c3:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stocktwis.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stocktwis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abendjournal.com
*.alexopoulou.com
*.autolikesgroups.com
*.bluetrustoans.com
*.bnlist.net
*.brahmkhatri.com
*.bruising.com.au
*.bskbbd.com
*.buffers.com.au
*.californiaautos.com
*.callaw.com
*.camstaz.com
*.canrabank.com
*.cartridgereplacement.com
*.constructionsigns.com.au
*.cration.co.uk
*.dealerfit.com
*.dustbunnycleaning.com
*.entirelynew.com
*.environmentalpropertymanagement.com
*.giftcardallaround.net
*.graphict.com
*.groovydatalettertonoticetoday.info
*.hydie.com
*.ibc-tvnews.com
*.ibreaker.com
*.james-tailoring-and-clothing.com
*.jetttools.com
*.junocpa.com
*.kagittorba.com
*.ltdcommoditiea.com
*.minikoyun.com
*.mydlik.com
*.novacycles.co.uk
*.psyched.com.au
*.ringtoneten.com
*.rosado.es
*.sambasiva.com
*.shrimpboatlc.com
*.sintoniakuanyin.org
*.sskype.com
*.stocktwis.com
*.svingeri.com
*.tappy.com.au
*.textwheel.com
*.ticketverkoop.com
*.tnafllix.com
*.unafoto.com
*.webuycars.info
*.xpressfit.com
abendjournal.com
alexopoulou.com
autolikesgroups.com
bluetrustoans.com
bnlist.net
brahmkhatri.com
bruising.com.au
bskbbd.com
buffers.com.au
californiaautos.com
callaw.com
camstaz.com
canrabank.com
cartridgereplacement.com
constructionsigns.com.au
cration.co.uk
dealerfit.com
dustbunnycleaning.com
entirelynew.com
environmentalpropertymanagement.com
giftcardallaround.net
graphict.com
groovydatalettertonoticetoday.info
hydie.com
ibc-tvnews.com
ibreaker.com
james-tailoring-and-clothing.com
jetttools.com
junocpa.com
kagittorba.com
ltdcommoditiea.com
minikoyun.com
mydlik.com
novacycles.co.uk
psyched.com.au
ringtoneten.com
rosado.es
sambasiva.com
shrimpboatlc.com
sintoniakuanyin.org
sskype.com
stocktwis.com
svingeri.com
tappy.com.au
textwheel.com
ticketverkoop.com
tnafllix.com
unafoto.com
webuycars.info
xpressfit.com

Other certificates including the domain name stocktwis.com

(limited to 100 certificates)
stocktwis.com
stocktwis.com
bguiy.top
aragne.com
mpmarkfed.net
stocktwis.com
stocktwis.com
hexenschss.de
mpmarkfed.net
stocktwis.com
bguiy.top
stocktwis.com

Certificate

The complete raw certificate details for stocktwis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApBgkY5MMi3dlto9O+/Oj
rDDFKrbmunl5zj6tmPRs73oYSp7dXK7fo+Lw+8Vda3b7+ksW3wScfXXt0lkW2hw2
k/sClDIzgGJgcwKmDS2VynP+FGeks8rF4CD3dK8c2AA4dXCnkZc2dJkTCbcA1xhC
67rADoM5SfkpF1t7BqQxhj5AL1doIRusuKjzzH+BQ4ZsqE0EjE1KyIkba6Xb0Bk7
2L33UNOKlKPnUVnb8lPNuedJOy9gDABlGifc1emplrZ5czhPhborUaz7ePjdHMG5
sO5uiM7YguGt7ffizoWImc0YJs8JbzUT0kh5qRvrndkGRocIuAYvzCxTBJF7abjr
G6nJIe1KR+y/USULjufVXBB0CoCPuGAUoJ+zmcL1S0oEKmmNlJ61OGF9ZInljTkl
ea+BtDd4RxZ/xaEYxtRvSC8iSj5Lvq54HaO7fe1I+JvZvxdyFUI8MWPt4N8F2Elb
9cHofu5qdxkInlCibNZjg8CpjfHBQ8CbUyj3PCsLrwhfgflIlwnLhjMwnmLBLQHa
OsyICiErOR7OgS/bDTx09ON8GBCGrCg0cNEE2QdWAqCSuiowQ/W7leczVmcR8I84
l7s/crWy8F1Uy04JkP1ZnzdIbTEbpCFW5xyXEA42JEf7gm5FIMuP+8nlZS7mPv0/
MAmY0CN0dttx5EDPtx221hECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387706820753503638928286648487902905721520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 17:31:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 17:31:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stocktwis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669446359015180619450675518851037979289691906934806254842650667181005817668983791378985105454432449854283306685204292798210567026884013031554835670465754282198492313586663781506275156974420085033176649894181273992899511471185749231899830730773042816048318850937050475799451196216532187613574466497059420345935531992554782077530089098012662142336493476707360165918157437443611128185562440931154545268883777117564899835905263008629404078841609623830721733523820580563837199802694958380195056436927767701739222645579390294287228811676291650004525808340292836494539276205541583120383967501469678003803691327371895976715277723541190854659924078275437932203882327566087474820916172492651772584009398553606547972373283451137006264015786159782147679229511915605545347855805452997264618184981888008220192840290833994720622996519519848264468996331496672378059322908087147948804568427710017707279338716923362904022155081580345504134740258887483389146314392381733633823957699838422768018444139971504838744695860850475099327931172048619973705111002137061353596082997637956908899996314871181324607739151146180930000463436454589419614039049597103624003232944587695180272409916855486786709530695782380764983478956386372954958314237862798044442318353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1eeed422e8a3bfd2a5c3f85c6c32a60509cfc312
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abendjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alexopoulou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.autolikesgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluetrustoans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bnlist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brahmkhatri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bruising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bskbbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buffers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiaautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.callaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.camstaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canrabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cartridgereplacement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.constructionsigns.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealerfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dustbunnycleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.entirelynew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.environmentalpropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giftcardallaround.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groovydatalettertonoticetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hydie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibc-tvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ibreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.james-tailoring-and-clothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jetttools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.junocpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kagittorba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ltdcommoditiea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minikoyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novacycles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psyched.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ringtoneten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rosado.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sambasiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrimpboatlc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sintoniakuanyin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sskype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocktwis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svingeri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tappy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.textwheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketverkoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tnafllix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unafoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webuycars.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xpressfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abendjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexopoulou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autolikesgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluetrustoans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnlist.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brahmkhatri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bruising.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bskbbd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camstaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canrabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cartridgereplacement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'constructionsigns.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cration.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dustbunnycleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entirelynew.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environmentalpropertymanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giftcardallaround.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groovydatalettertonoticetoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibc-tvnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibreaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'james-tailoring-and-clothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetttools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'junocpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kagittorba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltdcommoditiea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minikoyun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydlik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novacycles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyched.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringtoneten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosado.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sambasiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrimpboatlc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sintoniakuanyin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sskype.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocktwis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svingeri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tappy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textwheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketverkoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tnafllix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unafoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webuycars.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xpressfit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0417809700000403004730450220675cad1ad4cdad799552bcb26835c2a1c4c121bde4e2fa544da743501773586d022100f092896418e40e453c43a00fc6ccb39131989678dd7779a6a67eeeb360e34bc5007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d041780a10000040300473045022100aca03d7f4a14eaf5cff0bf8d9e326b250a5b1687e97443d45abbc87ff8b8dc6502207dac2a5b2532c14f7feb1c45c2f243e7fd44562e1d6ddc0fd381bbbb62d7aabd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005620d8426163dc300a2510d4df13d077f55ba1ab2a14bb8017af97713fe520b685ac45843b1f0df98f6577c753c9f05db3babe5903ee4d68b19422804817bbcb44dcd5fd939b903578204f9008a445bfad062d382f4c1be591c3c160d39292275cf38dcbb7ef234c88f15aaf2554adee9f1c6eab462347ec61732b420233044076396e0fe3b28e5cdf5a4b8e47500747ff4e885a2f1a0c90088960a9c48cfe0e9522440ed65e63b3ee12863c983b291cdf2cedbfa486f7b548de7711f6b33f1186d822155ed3b32a56630d569ba3d5c4e886474b49bd4b7a0d156988ee05f8481c3e1e25fa345378ca43cf49dd26816fddb7c8403be970728706e7eb19c24de6