lofot.shop

Issued by R3

About this certificate

This digital certificate with serial number 03:13:e4:a3:62:e8:0c:5a:11:8c:d9:60:45:e9:3c:04:f6:66 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lofot.shop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:e4:a3:62:e8:0c:5a:11:8c:d9:60:45:e9:3c:04:f6:66
Serial Number (int): 268106135100266370309094421830905744389734
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:70:83:0d:04:d0:1d:7c:59:08:e3:90:1f:df:cc:a8:87:09:45:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 30:d9:b9:2e:da:28:ea:ca:64:6c:49:3c:ad:73:21:e8:37:ef:e4:5b
Fingerprint (sha256): 47:12:01:a2:91:f9:ad:c8:58:9b:c3:32:f6:0f:8b:ad:f2:40:ed:aa:f8:01:a6:89:bf:fa:84:9f:c5:d1:e8:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lofot.shop

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lofot.shop

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5mobile.com
*.altosdelbonito.com
*.bboscovs.com
*.bluedartexpress.com
*.bobword.com
*.bodycoaches.net
*.celiacos.site
*.chsttijd.be
*.cirdown.com
*.codigosancho.com
*.craigslisst.org
*.daovies2.co
*.duzal.at
*.gamatotv3.com
*.goalservice.com
*.gruporecovery.co
*.heathershultzphotography.com
*.holidaylettingsco.uk
*.hsalyer.com
*.idontwant.us
*.industrynet.us
*.islamska-biblioteka.net
*.jedpho.com
*.komeps.com
*.labrijafilosofica.com
*.latesthdmovies.shop
*.lofot.shop
*.magnolialanebywhitney.com
*.megacineuhd.biz
*.mein-endered.de
*.movieswood.us
*.nxtgens.org
*.patientconect365.com
*.pelisplu.net
*.precisioncarpentrync.com
*.prizedraw.la
*.sitesappvideo.xyz
*.studioalfaghi.net
*.stygg.xyz
*.switzerlandairport.com
*.sydspetcare.com
*.thegoodkarma.co
*.theoldbrewery.com.au
*.tkconstructionltd.com
*.turnurearchitecture.com
*.victorraulr.info
*.vtrmail.net
*.walking-britain.co.uk
*.watchfreemoviesnow.org
*.wzfenghu.com
5mobile.com
altosdelbonito.com
bboscovs.com
bluedartexpress.com
bobword.com
bodycoaches.net
celiacos.site
chsttijd.be
cirdown.com
codigosancho.com
craigslisst.org
daovies2.co
duzal.at
gamatotv3.com
goalservice.com
gruporecovery.co
heathershultzphotography.com
holidaylettingsco.uk
hsalyer.com
idontwant.us
industrynet.us
islamska-biblioteka.net
jedpho.com
komeps.com
labrijafilosofica.com
latesthdmovies.shop
lofot.shop
magnolialanebywhitney.com
megacineuhd.biz
mein-endered.de
movieswood.us
nxtgens.org
patientconect365.com
pelisplu.net
precisioncarpentrync.com
prizedraw.la
sitesappvideo.xyz
studioalfaghi.net
stygg.xyz
switzerlandairport.com
sydspetcare.com
thegoodkarma.co
theoldbrewery.com.au
tkconstructionltd.com
turnurearchitecture.com
victorraulr.info
vtrmail.net
walking-britain.co.uk
watchfreemoviesnow.org
wzfenghu.com

Other certificates including the domain name lofot.shop

(limited to 100 certificates)
lofot.shop
lofot.shop
lofot.shop
lofot.shop
lofot.shop
lofot.shop
lofot.shop
lofot.shop
lofot.shop
lofot.shop

Certificate

The complete raw certificate details for lofot.shop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268106135100266370309094421830905744389734
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 11:55:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 11:55:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lofot.shop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887287911780092312024341388760731937105459072734409159308097247274473235549640728353588341132686165996177711335312708595153334743941743647263116590452503202150540703482623921483751410013906774718974007725222107395772758916809405522052394856453025356898782878845349323296675750283636757468819856711610421037060133091071216440619117982525489942619193623242940018056018013318931021524198331553032791361204103998442124870779992219976088409467941810175556299526235642407389812633983862974918418719559181561420143207292202060547809592202978777898958215249451260710619173300200058833727159411746298667749725664733427557481063813221824936867440446554702401970629076938266966727119988971010691255871008086624844405163251715866138944442857406372015425275736248675349348285162730429845351983203340257709763205587625095950900272643946686597298393623001253089208644481781644710870893423897114983354922063279518095597121451451219522363212487065287520567475038492613443589491342292106692985969417273345286724234445605630833701604918110312823727771834213114789697645844119469350126575108027628142825352144240888159153485280177140296700925374077252648660035349683047461713650278518668642502784782806968545585975328535358439772044611928150328605436857
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a170830d04d01d7c5908e3901fdfcca8870945bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1866 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altosdelbonito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bboscovs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluedartexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bobword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bodycoaches.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.celiacos.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chsttijd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cirdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.codigosancho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.craigslisst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daovies2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duzal.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamatotv3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruporecovery.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heathershultzphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holidaylettingsco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsalyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.idontwant.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.industrynet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islamska-biblioteka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jedpho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.komeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.labrijafilosofica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latesthdmovies.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lofot.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnolialanebywhitney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.megacineuhd.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mein-endered.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movieswood.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nxtgens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.patientconect365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelisplu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.precisioncarpentrync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prizedraw.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sitesappvideo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studioalfaghi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stygg.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.switzerlandairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sydspetcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegoodkarma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoldbrewery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tkconstructionltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turnurearchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.victorraulr.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vtrmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walking-britain.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchfreemoviesnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wzfenghu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5mobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altosdelbonito.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bboscovs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluedartexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bobword.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodycoaches.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celiacos.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chsttijd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cirdown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codigosancho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craigslisst.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daovies2.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duzal.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamatotv3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goalservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruporecovery.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heathershultzphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidaylettingsco.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsalyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idontwant.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrynet.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islamska-biblioteka.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jedpho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'komeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labrijafilosofica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latesthdmovies.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lofot.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnolialanebywhitney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'megacineuhd.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-endered.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movieswood.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nxtgens.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patientconect365.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelisplu.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precisioncarpentrync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prizedraw.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitesappvideo.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studioalfaghi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stygg.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'switzerlandairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydspetcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoodkarma.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoldbrewery.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkconstructionltd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turnurearchitecture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victorraulr.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtrmail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walking-britain.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchfreemoviesnow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wzfenghu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c82258cff0000040300473045022006283f350e57ce5de6515424ff74b48287ce74d53825373b545e1b1d74e5eb43022100c15eed867a9628c336343735727f390890d9e7c31577df666874dfeee04d3d48007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c82258eaf0000040300473045022100b78664f93dd131cafb4acd735814c3f45a50b6451559b9f7637cb02b3b65e44e02203284869a2bcd64a69f4187055902563e8f7aabb2833d849639afeb887a08dfb6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b48e643f9c12f0466e4294f74d0ca76e3109471bc582c781b2fcbe32c89e1a31d29759dc1019c355e7348a490baa0a14817876043db2aac970b2fd1ccc8dd9549f70e64e672f14c9e957cd998453e58dcd937312fc980dd1e3da7d82b9208e860fa795daca494e7fc4a2460e93270c85c491428eefbb33e0b7c491fde837e383071784073436bcb9173199b924a408f9364c1c2b97cd1ca47164f1a4d5900b149a097c8ccc966ac2f496066a0df4786f94dcae2df9b48981b117a45b37ae971ae1e84fb196d55bd47fe1ec9cf04ad16d292e86051f68b60c205e42e572a64ef79f718b0b3319f23c08d69e185ce038d64a1aa133163c1f600bda6a0b4c0365eb