birkensock.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c0:ca:17:84:2f:3a:86:3b:4d:13:65:92:e2:6d:d6:25:bf was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=birkensock.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:ca:17:84:2f:3a:86:3b:4d:13:65:92:e2:6d:d6:25:bf
Serial Number (int): 414051984334857374605687353534596804650431
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 60:63:d3:8b:d7:9b:f8:1e:fa:24:d7:05:a3:09:a0:bc:99:f3:a7:08
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e4:a8:1a:5b:47:07:4d:06:cd:76:5c:a9:14:76:a8:26:f5:2f:0e:58
Fingerprint (sha256): 47:fa:b5:27:fc:92:56:16:b4:25:ea:7f:80:a4:88:bc:fd:42:31:06:04:f6:a7:f9:ae:4d:8f:d4:cf:b6:af:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate birkensock.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for birkensock.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5151se.com
*.altrarunningshoes.com
*.andrewjpage.com
*.birkensock.com
*.bluesshieldca.com
*.boatingbc.com
*.bugmonitoring.com
*.buildingworxconstruction.com
*.buongustocloster.com
*.butget.com
*.cnptir.com
*.cooki.com
*.cxk.com.au
*.deathinvegas.com
*.dentalsolutionshvt.com
*.divyupsocks.com
*.easydrawingtutorial.com
*.eloa-concept.com
*.elsevierperformancemanger.com
*.epidemio.com
*.gensiscredit.com
*.grugstore.com
*.helio.au
*.inkagame.com
*.kitchenzero.com
*.lifetouc.com
*.mahattanprep.com
*.marchvisoncare.com
*.minkycoutour.com
*.mnczincsteel.com
*.myafricanmangodiet.com
*.mylovelibrary.online
*.nbcnws.com
*.pqyer.com
*.prply.com
*.psremoteplay.com
*.qualityinnwestmemphis.com
*.ridgetowngolf.com
*.rirerack.com
*.roamhere.com
*.sdg2mastercard.com
*.shareyourexperience.com
*.sxfj.net
*.tireravk.com
*.trrowe.com
*.umantis.co
*.weekendtailgating.com
*.wmix.com
*.ymyfreecams.com
5151se.com
altrarunningshoes.com
andrewjpage.com
birkensock.com
bluesshieldca.com
boatingbc.com
bugmonitoring.com
buildingworxconstruction.com
buongustocloster.com
butget.com
cnptir.com
cooki.com
cxk.com.au
deathinvegas.com
dentalsolutionshvt.com
divyupsocks.com
easydrawingtutorial.com
eloa-concept.com
elsevierperformancemanger.com
epidemio.com
gensiscredit.com
grugstore.com
helio.au
inkagame.com
kitchenzero.com
lifetouc.com
mahattanprep.com
marchvisoncare.com
minkycoutour.com
mnczincsteel.com
myafricanmangodiet.com
mylovelibrary.online
nbcnws.com
pqyer.com
prply.com
psremoteplay.com
qualityinnwestmemphis.com
ridgetowngolf.com
rirerack.com
roamhere.com
sdg2mastercard.com
shareyourexperience.com
sxfj.net
tireravk.com
trrowe.com
umantis.co
weekendtailgating.com
wmix.com
ymyfreecams.com

Other certificates including the domain name birkensock.com

(limited to 100 certificates)
birkensock.com
imaginetravellers.com
birkensock.com
birkensock.com
imaginetravellers.com
birkensock.com
imaginetravellers.com
imaginetravellers.com

Certificate

The complete raw certificate details for birkensock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414051984334857374605687353534596804650431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 12:10:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 12:10:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'birkensock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832685781533589507218350192078791368877952571566611676973863044850943334247256509808409178059771270229688183211474826331277908575807578344434466146782192137443268054025188996416647013116975538055482494364956480767579332088879527040744205118507480429594676194805330475634739310370049118991058203323470556692152537800261341343592917709814283401209326541238092697633682190439665505078866286668308727151457187268754462778403451969880257301367053449737172504359052379659993661737085331704094550505103214163045159320752453370830586578379686258124280356983367060272105368152722605758412628283116363660547092294660148266850929401517183775594657897141976018906683621989659823146569714519496655169598507650877864815915467665960462154137587522399559099502654939862772570682014083053634804277194671341531227605735473003539397905972401837921782350703340372445294689673644623815958996066487103839500264990278909434778310220369532098421970237421154754767442762182130338548080382218163081502216790777258027515425829452510427146106423502769642008735302077356964439815390237489133493400877975095629707111217641548781719736807836932825807358037024103869589231181647281431625953607079093481513283652964800976483780897784990748078358991927750871363836593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6063d38bd79bf81efa24d705a309a0bc99f3a708
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1790 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5151se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altrarunningshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andrewjpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birkensock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluesshieldca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boatingbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bugmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildingworxconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buongustocloster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.butget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cnptir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cooki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cxk.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deathinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalsolutionshvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.divyupsocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easydrawingtutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eloa-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elsevierperformancemanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.epidemio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gensiscredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grugstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helio.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inkagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kitchenzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lifetouc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mahattanprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marchvisoncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minkycoutour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mnczincsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myafricanmangodiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mylovelibrary.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nbcnws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pqyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psremoteplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qualityinnwestmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ridgetowngolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rirerack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roamhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdg2mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shareyourexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sxfj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tireravk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trrowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.umantis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekendtailgating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ymyfreecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5151se.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altrarunningshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andrewjpage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkensock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluesshieldca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatingbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugmonitoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingworxconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buongustocloster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnptir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxk.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deathinvegas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalsolutionshvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'divyupsocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easydrawingtutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eloa-concept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elsevierperformancemanger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epidemio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gensiscredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grugstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helio.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkagame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kitchenzero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifetouc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahattanprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marchvisoncare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minkycoutour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnczincsteel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myafricanmangodiet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylovelibrary.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbcnws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pqyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prply.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psremoteplay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualityinnwestmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridgetowngolf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rirerack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roamhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdg2mastercard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shareyourexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sxfj.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tireravk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trrowe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umantis.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendtailgating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ymyfreecams.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce40c467b0000040300473045022100e38c5051ae9adc64ba70d03aeff0fe333b8b51295e362b917c745817d8eab5ef02201ba661bc48807e5ed4fb97beba48a7ba1d60218c7f546c05b488349f651ce9070077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ce40c46820000040300483046022100b21b43f919b3f634d956b102c2d6f62a48d927bea8aaf4ed02c492ca1d7c6d2802210094dcaa4b2c4eac78afd4a4e621489f04f4980afb6446685d7739f4c0d465a8c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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