amazonshikujiri.net

Issued by R3

About this certificate

This digital certificate with serial number 04:54:8d:2a:95:ab:94:b8:18:9e:0d:a0:e6:fb:34:97:f1:54 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=amazonshikujiri.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:54:8d:2a:95:ab:94:b8:18:9e:0d:a0:e6:fb:34:97:f1:54
Serial Number (int): 377220504807946622192353726360523359383892
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: da:fe:e9:67:6d:22:91:53:5c:8f:14:0d:c6:f0:4c:5b:3a:20:96:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:5b:2d:82:6b:28:bb:3d:77:d5:09:54:0d:d2:dd:dd:90:2e:78:17
Fingerprint (sha256): 46:2d:7e:0c:c0:75:5b:56:1a:11:d3:7f:00:7e:73:c6:e9:4d:74:d2:35:1b:cb:b8:fb:09:13:4c:c3:b2:1b:5f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate amazonshikujiri.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amazonshikujiri.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.212music.com
*.aboutoyu.de
*.allegriashoes.com
*.amazonshikujiri.net
*.appmenudino.com
*.archadeck-neatlanta.com
*.awsclic.com
*.bitcoins-gratis.com
*.boonedockerswelcome.com
*.cardiologist.net.au
*.cedarandseapicnics.com
*.dongallo.com
*.esclusivo.com
*.expressypn.com
*.fazum.com
*.festoo.de
*.florians-flammkuchen.de
*.fuzionzone.com
*.genopharm.com
*.hanqin.com
*.hocnhac.com
*.infinitetrades.com.au
*.iptvxxx.com
*.jednostki.com
*.jie.es
*.jige.com
*.kalidindi.com
*.kb83.net
*.koreandomain.com
*.kwikparts.com
*.mayerlin.com
*.mesotheliomalaw.com.au
*.moxito.com
*.musicshops.com.au
*.mysustainablehome.com
*.obour.com
*.paulikas.com
*.profit-line.biz
*.sharemyhealth.com
*.soney.es
*.spiss.com
*.tennissocken.com
*.thehiddenpearl.net
*.thetimbers.com
*.toolsets.com.au
*.towingmirrors.com.au
*.wahousing.com
*.www-netze-bw.de
*.wwwancestry.co.uk
*.wyldflower.com
212music.com
aboutoyu.de
allegriashoes.com
amazonshikujiri.net
appmenudino.com
archadeck-neatlanta.com
awsclic.com
bitcoins-gratis.com
boonedockerswelcome.com
cardiologist.net.au
cedarandseapicnics.com
dongallo.com
esclusivo.com
expressypn.com
fazum.com
festoo.de
florians-flammkuchen.de
fuzionzone.com
genopharm.com
hanqin.com
hocnhac.com
infinitetrades.com.au
iptvxxx.com
jednostki.com
jie.es
jige.com
kalidindi.com
kb83.net
koreandomain.com
kwikparts.com
mayerlin.com
mesotheliomalaw.com.au
moxito.com
musicshops.com.au
mysustainablehome.com
obour.com
paulikas.com
profit-line.biz
sharemyhealth.com
soney.es
spiss.com
tennissocken.com
thehiddenpearl.net
thetimbers.com
toolsets.com.au
towingmirrors.com.au
wahousing.com
www-netze-bw.de
wwwancestry.co.uk
wyldflower.com

Other certificates including the domain name amazonshikujiri.net

(limited to 100 certificates)
www.amazonshikujiri.net
amazonshikujiri.net
urgen.com
amazonshikujiri.net
amazonshikujiri.net

Certificate

The complete raw certificate details for amazonshikujiri.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtzK/izVaQrqcD7dlysGZ
n/L98EDFacsR+wIDm3Z441QM6xE0hyDCUYKra0MdnFnjjTRtSqGO/SdUGKDy7rJD
ScYRZkKheFAWzPhxL74d2w8I4xeX4Wqoh1qWniYJKUHyzazZH4HqSJKD8N9dNcSb
qsluJqBba8xIG0Bh3qrgKNNfk9vbBr1z9R4lv/sj10M4LKqAfYVX5nRYIq14hSsS
Aqr0mp86OQNkB6i2wxN0P5Nm4hwxf9TECIV86gaplp+6g4lixqc6oqOpyL94RV8l
+DsQItbwpJLDOC48JT6ncVZHX4jYqJK7EUUgoNDKcoKdarP6zaVMCg/LVZ+2dBot
lQyquoGVq17d2OVPNgKyrp8KMmtc4RC/ajCSwPMTN0+uyIw70OQztZU5twXH2PBD
4BPljeUch04Y6B1x6TX2Qwtv1oGHV/G3i/rAgQj2APaQ/6sI2T9yOdhz6weYWN8O
TOMHiVyNsUgnovLy2jWdeN6QIz+fYquWHY15BHbCSsGkbYoQSdIAD6UV0eQ5pbeR
AXVFkC617u3XSlpwLNf/htLjJS1JtiqeF3A2qGAtQblSSORZCS7WS0DrU+UfZzCu
GPYeLwJyOc357mnhHQ+HAVkWTzsPhyTqcfh6CuB2dRyIqYmiWa3AUR6BJa+H8ARn
vMnU6CipO1P3gf+ICLC8u1ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377220504807946622192353726360523359383892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 09:58:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:58:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amazonshikujiri.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747383593612235704951430125591186116142002966960081740991805330137290779247234423229359082661728124328288919260138252428917006578133043294725145499385886358651867089283702307471380099856123379436587095631669745349720304486669266084453335704974162816704432167372317988927554811514888768155326576668825933540269909081465410894647420677546880666924760154412785994026192317378199681598076600275590982476503518831618764715038470716608399829699820857293087959401285391978621700793927655258323054399769680431562786897095240334571072907128090179809352897813419574090571487940952237120848764161899076621291843154489054727714997061641254209368092470512411052464451651129843189923203403219750198284674257577186134135243911077694118236502612467983584847951590286180768696867893025324581310294239480006351877044490744333290950950412570470671320173943262569705894558417301016581845061454290648008717799245783098748721465561321264847524267991640637090483750148099503035237921899372967692570332673085567439780731946240054798731212561318406600369477681973044518254367991937851113976254449861547146068685539077516708913585078771625385656294080468862130000101519016098714938774408147120056921370773065640435102818260696664442225479802505592768292502353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dafee9676d2291535c8f140dc6f04c5b3a20960d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1748 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.212music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aboutoyu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.allegriashoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amazonshikujiri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appmenudino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archadeck-neatlanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.awsclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoins-gratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boonedockerswelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardiologist.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cedarandseapicnics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dongallo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esclusivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expressypn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fazum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.festoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florians-flammkuchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuzionzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hanqin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hocnhac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infinitetrades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iptvxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jednostki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jie.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kalidindi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kb83.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.koreandomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwikparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mayerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mesotheliomalaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moxito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.musicshops.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysustainablehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paulikas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profit-line.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharemyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soney.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennissocken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehiddenpearl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thetimbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toolsets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.towingmirrors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wahousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www-netze-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwancestry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wyldflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '212music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aboutoyu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allegriashoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonshikujiri.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appmenudino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archadeck-neatlanta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsclic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoins-gratis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boonedockerswelcome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiologist.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedarandseapicnics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongallo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esclusivo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressypn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fazum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'festoo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florians-flammkuchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuzionzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genopharm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanqin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hocnhac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infinitetrades.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jednostki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jie.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jige.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kalidindi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kb83.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreandomain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwikparts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayerlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesotheliomalaw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moxito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musicshops.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysustainablehome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paulikas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profit-line.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharemyhealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soney.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennissocken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehiddenpearl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetimbers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolsets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towingmirrors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahousing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-netze-bw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwancestry.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyldflower.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a987df53e0000040300473045022100abef43e295abd88767bd4919eb12acc2e7acf8ab4c3eec01e7c9e2e9cea29cfd02201168dfd00c854c4cc78e5f7bbb733d79aa5ca3ce8878259f63359919506e1585007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a987df5350000040300483046022100c23294e10cbc09275aeddfa336574f62a23d3e104637fd1b0b4cdd7ce3ab8863022100fdb69a380fce518c38f7581c4f1699778596ee25c6abf005e2695d5fa813c953
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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