hnz.com.pl

Issued by R3

About this certificate

This digital certificate with serial number 03:d4:a6:06:b4:e0:b8:32:27:6a:49:9d:09:7c:dd:1f:b6:d5 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hnz.com.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:a6:06:b4:e0:b8:32:27:6a:49:9d:09:7c:dd:1f:b6:d5
Serial Number (int): 333697406252238984372701866703777909683925
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:ff:85:41:4d:38:c0:c5:4a:a8:25:25:2b:eb:ef:d0:6f:e2:30:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 09:42:b5:d2:09:6b:4b:49:78:4a:19:cc:8e:bf:dd:35:44:98:6f:20
Fingerprint (sha256): 49:95:1d:16:1d:d3:bc:3a:76:1a:9f:67:82:1d:cc:6e:9c:45:e0:b3:17:fe:e1:b8:89:7b:64:ea:01:4d:77:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate hnz.com.pl

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hnz.com.pl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.52qm-1.com
*.ateris.es
*.banyubiru.com
*.basilsmustique.com
*.beeing.me
*.cafpress.com
*.carloanrates.com.au
*.chineshealth.com
*.doujinmo.us
*.femmemoda.com
*.ffuenc.com
*.fkingshoes.com
*.flaigrentalproperties.com
*.flamingtaste.com
*.freecurtisconnernft.com
*.gay-free-videos.com
*.getstampinfo.com
*.goldwingsub.com
*.gpinfomedia.com
*.hnz.com.pl
*.honeymead.com
*.k-phonemenon.com
*.largewomen.co.uk
*.lightedposters.com
*.lipetickalley.com
*.litalia.com
*.lstephenslasallenetwork.com
*.myuhc.co
*.nk8iforocoches.com
*.outofschoolmt.org
*.pc6.org
*.petdiscountph.com
*.plannetmarketing.co
*.prominentnewsletter-toscantoday.info
*.runescapehack.com
*.runnningwild.com
*.sassysoapwax.com
*.solopublishing.org
*.sosiologi.org
*.spouse.com.au
*.spreadingrumours.co
*.streamhls.co
*.tabletopia.co
*.toycars.com.au
*.trofishmate.com
*.vfstreaming.me
*.virtualexport.co
*.wickedcloudsok.com
*.wwwoutlok.com
*.youmgaube.com
52qm-1.com
ateris.es
banyubiru.com
basilsmustique.com
beeing.me
cafpress.com
carloanrates.com.au
chineshealth.com
doujinmo.us
femmemoda.com
ffuenc.com
fkingshoes.com
flaigrentalproperties.com
flamingtaste.com
freecurtisconnernft.com
gay-free-videos.com
getstampinfo.com
goldwingsub.com
gpinfomedia.com
hnz.com.pl
honeymead.com
k-phonemenon.com
largewomen.co.uk
lightedposters.com
lipetickalley.com
litalia.com
lstephenslasallenetwork.com
myuhc.co
nk8iforocoches.com
outofschoolmt.org
pc6.org
petdiscountph.com
plannetmarketing.co
prominentnewsletter-toscantoday.info
runescapehack.com
runnningwild.com
sassysoapwax.com
solopublishing.org
sosiologi.org
spouse.com.au
spreadingrumours.co
streamhls.co
tabletopia.co
toycars.com.au
trofishmate.com
vfstreaming.me
virtualexport.co
wickedcloudsok.com
wwwoutlok.com
youmgaube.com

Other certificates including the domain name hnz.com.pl

(limited to 100 certificates)
hnz.com.pl
ultimatesanitarysupply.com
hnz.com.pl
ultimatesanitarysupply.com
hnz.com.pl
appointed.au

Certificate

The complete raw certificate details for hnz.com.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333697406252238984372701866703777909683925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 10:27:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 10:27:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hnz.com.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877618776636720044630564178546887051501776845122427869926796111242469347364572571378543575488813547636066647221091381308314869134362601551096240990000035513865273695811002933339165872901874166712088540787719967017433801831022908113463718546087850493626712719307681915793200289280187020971725696809497794284028827609563633375861859982720670629087087436414106458450489666382246459306281814498570228865099001198777209821049271593782631703164934182809272894186678488551210353289512594329470185344579758802660462352988610438531920351054524623945597796722544789315875421831899328727577048626286163102997254108371494186145006073636000381462179677002881093327563113616754000585494349956718878083669230038397150382396811935076649816010519237037722302001955880308603517516095995498930346928637345441774950016344585704542917564137023902640453036425494280502915143409425990461707107905944159182899189566749541554546279954236761872894111092550281274111813024917582498633989498328943313396390332542413994177883327811451317216225382273095471356132505522472929160861928918280344955652398573474742088663321787665622948618026938853826545964071485008189063528818604896364348277848155766828937777592178286085655942724703418018119057855731735964498154311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79ff85414d38c0c54aa825252bebefd06fe2309a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.52qm-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ateris.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banyubiru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basilsmustique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beeing.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cafpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carloanrates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chineshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doujinmo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.femmemoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffuenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fkingshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaigrentalproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flamingtaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freecurtisconnernft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gay-free-videos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.getstampinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldwingsub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gpinfomedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hnz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.honeymead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k-phonemenon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.largewomen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lightedposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lipetickalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.litalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lstephenslasallenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myuhc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nk8iforocoches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outofschoolmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pc6.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petdiscountph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plannetmarketing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prominentnewsletter-toscantoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runescapehack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runnningwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sassysoapwax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solopublishing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sosiologi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spreadingrumours.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamhls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tabletopia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toycars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trofishmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vfstreaming.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualexport.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wickedcloudsok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwoutlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youmgaube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '52qm-1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ateris.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banyubiru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basilsmustique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beeing.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carloanrates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chineshealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doujinmo.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'femmemoda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffuenc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fkingshoes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaigrentalproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flamingtaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freecurtisconnernft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gay-free-videos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getstampinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldwingsub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpinfomedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeymead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-phonemenon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'largewomen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightedposters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipetickalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'litalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lstephenslasallenetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myuhc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nk8iforocoches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outofschoolmt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pc6.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petdiscountph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plannetmarketing.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prominentnewsletter-toscantoday.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runescapehack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runnningwild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassysoapwax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solopublishing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosiologi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spouse.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spreadingrumours.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamhls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletopia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toycars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trofishmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vfstreaming.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualexport.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wickedcloudsok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwoutlok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youmgaube.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be756452e00000403004630440220304b86c74f9656bbd1af0daa4b5538455ef1f8ea8c80ae22b5b2fc135470d914022030b945f345b1608ae8170dcbb5f86d0a680f231d75b1e53c020facd3e1095d4900770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be75645280000040300483046022100dc05c73da0918d48ca502ddce2f1564eb415145feaa67511241edc792d45623c022100b4450490f48d875573a5dbeaf033ed2b4747b28ea629b3662e5fceb9f6c346f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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