barnaud.com

Issued by R3

About this certificate

This digital certificate with serial number 03:71:d8:91:39:46:3d:86:fa:09:a4:1f:39:5f:4c:8e:dd:56 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=barnaud.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:d8:91:39:46:3d:86:fa:09:a4:1f:39:5f:4c:8e:dd:56
Serial Number (int): 300076632549143176236358504248721764441430
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:5a:42:dc:6d:98:eb:dd:6b:12:7a:77:06:e8:b6:2a:3f:45:5d:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 86:89:9a:3d:74:9b:eb:84:1f:93:6f:fb:87:cf:dd:e3:7a:2c:00:b7
Fingerprint (sha256): 45:57:7f:c3:ab:c6:09:39:7d:c6:66:af:dd:32:08:00:0e:94:5a:98:ac:ff:2a:7c:f4:21:ed:a6:dc:c4:50:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate barnaud.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for barnaud.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abayan.com
*.alohamana.com
*.apptopi.com
*.augenbrauen.com
*.barnaud.com
*.behani.com
*.bestager.com
*.bokepgratis.com
*.christianstore.com.au
*.colies.com
*.comprarvivienda.com
*.credilist.com
*.dateorditch.com
*.deadliest201.club
*.discogratis.com
*.familycaremedicalcenter.org
*.flashionables.com
*.forstore.com
*.gotec.net
*.grenadacarnival.com
*.gypsyyoga.com
*.harradine.com
*.harriers.com
*.hdteenpornmovies.com
*.herlina.com
*.hoctinhoc.com
*.jeemain.com
*.katiba.com
*.keyz.org
*.maiketech.com
*.mclernon.com
*.medicaregateway.com
*.melotti.com
*.moneyley.com
*.nakedteenerotic.com
*.nanchuang.com
*.obesos.com
*.papapapapashop.com
*.pichuki.com
*.pocketteacher.com
*.queti.com
*.realmoftheabsurd.com
*.rupatv.site
*.seemoredomore.com
*.sevy.org
*.shortcircuitrepairs.com
*.showgirl1.com
*.skillplay.net
*.thevia.com
*.victorin.com
abayan.com
alohamana.com
apptopi.com
augenbrauen.com
barnaud.com
behani.com
bestager.com
bokepgratis.com
christianstore.com.au
colies.com
comprarvivienda.com
credilist.com
dateorditch.com
deadliest201.club
discogratis.com
familycaremedicalcenter.org
flashionables.com
forstore.com
gotec.net
grenadacarnival.com
gypsyyoga.com
harradine.com
harriers.com
hdteenpornmovies.com
herlina.com
hoctinhoc.com
jeemain.com
katiba.com
keyz.org
maiketech.com
mclernon.com
medicaregateway.com
melotti.com
moneyley.com
nakedteenerotic.com
nanchuang.com
obesos.com
papapapapashop.com
pichuki.com
pocketteacher.com
queti.com
realmoftheabsurd.com
rupatv.site
seemoredomore.com
sevy.org
shortcircuitrepairs.com
showgirl1.com
skillplay.net
thevia.com
victorin.com

Other certificates including the domain name barnaud.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for barnaud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsP61oNENxhh/XTCaiwdN
xpcVJrNlv25MepCVQpnxVfzCQ9+qzI5zUHrVruT6WAOedKiXf7+woppJb9aUP6z0
6pXt6370YlzGWLPw0tSQULaiL5x3vTGEEACZw+ECTr6ScJWfql4ujjrkZ87w5fQd
CynpgVQS7yp6K08c3Qf9j2Zd2Tt4LM1ENYjT2I9gWSevj+zuJV1QvOlqnvkncXmj
inPsCy6t+m93OUhYTKPNp4o44hXdPf+W96iZOZ/bh+1ZQWuPHLYDSoOQkl8rMrT2
t/QDH/T3gW0co5XsycIFK3wsiK+Bgkvoz0S1xmZQ7tZ2KdmfizKpI5S7RKhPhGx6
/+KeFRXpVfIXgVYzvUZ/IZn/eNVWqvSBoFI6nn+uuXjo9MOpteIpHJtPeC0ZFO2d
bVv97YXH7y2/4SxF9Q1VlB1/hUMANPr+qo7vqCkLL1X7bFRAUEBJC4HVrAceO3dz
byGDG6ZV1uJ7/Dv0KbvVQ2dcH8fd9t4NOgJUX4BC4DaiuZs+Cv+LrIB6WBpw51lM
8KyBFH9V+umeDcmRDRjjxzRSsG2sNuc7lqqG2bd7MWjeRqf8I1El0BNDQOVrld5x
uiNDN4UiEF8nY1T8QvY2whJofSnzwuWmYTkYS0f16MTSqafAXYB4xwJFQQF9F90H
F+pLFlpZ49EypJbE/jM01ukCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300076632549143176236358504248721764441430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 09:12:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 09:12:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'barnaud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722076434252891282105673094370737527992627110697498720930336136846992615079425617101227911037839481636105521049936309645611843554902651598047357379168697948034949690903539597533300617107387232275583146848899355728733522964748310343398928540516750242095513776868852020020630017255365439343156929562700011152642559200294534515234672366085614521096932715177205004694689599222350081208464732616351763779875213552126881422249943652123135385428820229758654291230814543764377211752707895153151696720730087247690239343196927152493367164231721106962700704779450724826220223039758128976712130802733640695833659864424939174009010488610084949029875140074271602270675712686825493472808046969660366218764239346518295886159660743624504841119236422750255605918079986266145846831838612333236452747890732940979406285023376286916595370972831248399565601747672461195124315469353144554024849216214206910477339465444559845838346285739545271551428051021596091053348206056709397342362648194549018191187391098119748304771657673837953136278738498355375229536525370656278698161152239309134947179293210667770980263938845596903678230226068561062112903293537205610373084971156011743550977078263933585120535525821280777595459485067670148828323421193267307796027113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4c5a42dc6d98ebdd6b127a7706e8b62a3f455d73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alohamana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apptopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.augenbrauen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barnaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.behani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bokepgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christianstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.colies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comprarvivienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.credilist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dateorditch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadliest201.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discogratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familycaremedicalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flashionables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gotec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grenadacarnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gypsyyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harradine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harriers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hdteenpornmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herlina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoctinhoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeemain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keyz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maiketech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mclernon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicaregateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.melotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneyley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakedteenerotic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanchuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obesos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.papapapapashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pichuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pocketteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.queti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.realmoftheabsurd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rupatv.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seemoredomore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sevy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shortcircuitrepairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showgirl1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skillplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thevia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abayan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alohamana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apptopi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augenbrauen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barnaud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'behani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bokepgratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianstore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comprarvivienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credilist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dateorditch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadliest201.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discogratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familycaremedicalcenter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flashionables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotec.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grenadacarnival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gypsyyoga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harradine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harriers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdteenpornmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herlina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoctinhoc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeemain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katiba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maiketech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mclernon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicaregateway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melotti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneyley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakedteenerotic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanchuang.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obesos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papapapapashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pichuki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pocketteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realmoftheabsurd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rupatv.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seemoredomore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortcircuitrepairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showgirl1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillplay.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001882e58cda300000403004730450221009b8903bf118b6aade6809824835096fadbf9c7ddc6ece4cd9b054712053d880b022006ce845f3e1a5763866c4d79d211415160ef97edc305a07056c1bab710452e0b007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001882e58cd8d0000040300463044022046e74a2f8877988e29620f28268026bd675d324166ce6acd543ffffa74e7b635022025064a9b992948917fd53c6a5ace9dc3af23febde6cb4a7f6c581dc4df547fb8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a34d4b35e0255728347a1c93db46728d93b41cf159c5ed517fdf77b190d1b23d97f3ae133b1629e6b48f8d9cc5ebc9cf679cc39da60b9f0caf7062995aeb8f7dfe70620dbdf1cdcdd1c6d0ad186bd0bb180ccb1bb3ee014213d77b0d1e384534d86fd2a4d6872c2c9a64e0fa6b5475fe04535f223e490f55319024e9840c694abf891823995475aa09d5d5da024d9487aecbdfecf9cc8b9e08b353564f7a59dbb7c62bc68f6b423377973a192337fea8503e4f8462f4451f5882d3b7846495ff0553337058180da2eb434d79f5c8388bee3d950d6199d83bc5479f864c4faac26c72536a63c5e3748ae13ef6d3e10e2bd38b0b1d7cc13521ca79df7d0b0ae0f