wafyair.co

Issued by R3

About this certificate

This digital certificate with serial number 03:ff:c0:d5:c7:ef:da:d2:cd:f1:52:2d:2e:7a:9c:07:a0:d2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=wafyair.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:c0:d5:c7:ef:da:d2:cd:f1:52:2d:2e:7a:9c:07:a0:d2
Serial Number (int): 348365183149744384435606110451690002424018
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:89:9b:b5:01:5b:38:ac:2c:20:3d:81:7f:59:67:3d:ca:0d:39:25
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f6:94:b5:40:4d:6e:42:f3:d0:61:bc:d4:4c:67:16:9d:23:3b:54:82
Fingerprint (sha256): 4a:2f:c5:82:3d:7b:1d:4e:5b:f2:c0:b9:86:44:04:9c:b5:12:c3:29:ea:8d:bc:4f:43:3f:96:d6:8c:53:c5:b2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate wafyair.co

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wafyair.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1live.us
*.albarakat.ru
*.athleticclearance.co
*.blogsileman.com
*.charnwood-landscaping.co.uk
*.dadongjiazu.com
*.deepdiscont.com
*.dwac.me
*.firsnet.com
*.firstnotchtech.online
*.gap-hafc.com
*.i676.tv
*.iconsofspeed.com.au
*.indigo9jewelry.com
*.ivpoke.com
*.jiacpr.net
*.liz.com.au
*.lmayatecum.com
*.lojapoky.com
*.lonestarsportsmemorabilia.com
*.medicalytics.net
*.mflxu.me
*.neurobet.net
*.nflsteams.tv
*.nutrientraws.com
*.ofans.party
*.oranje.site
*.paramountfx.co
*.policiacia.com
*.ponebee.com
*.possessionmovie.com
*.poundersseafoodmarket.com
*.preprally.com
*.qbmoney.xyz
*.redditsports.live
*.rephaul.com
*.restoranvidikovac.me
*.ribbonbazzar.com
*.rollpi.info
*.sodaclubs.com
*.tellcitybbq.co
*.thebestof.com.au
*.thesausrus.com
*.thezencircus.com
*.vbuckify.com
*.veksha.co
*.venderfilm.co
*.vrsportsnews.com
*.wafyair.co
*.zvezdnoe.net
1live.us
albarakat.ru
athleticclearance.co
blogsileman.com
charnwood-landscaping.co.uk
dadongjiazu.com
deepdiscont.com
dwac.me
firsnet.com
firstnotchtech.online
gap-hafc.com
i676.tv
iconsofspeed.com.au
indigo9jewelry.com
ivpoke.com
jiacpr.net
liz.com.au
lmayatecum.com
lojapoky.com
lonestarsportsmemorabilia.com
medicalytics.net
mflxu.me
neurobet.net
nflsteams.tv
nutrientraws.com
ofans.party
oranje.site
paramountfx.co
policiacia.com
ponebee.com
possessionmovie.com
poundersseafoodmarket.com
preprally.com
qbmoney.xyz
redditsports.live
rephaul.com
restoranvidikovac.me
ribbonbazzar.com
rollpi.info
sodaclubs.com
tellcitybbq.co
thebestof.com.au
thesausrus.com
thezencircus.com
vbuckify.com
veksha.co
venderfilm.co
vrsportsnews.com
wafyair.co
zvezdnoe.net

Other certificates including the domain name wafyair.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for wafyair.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348365183149744384435606110451690002424018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 10:13:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 10:13:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wafyair.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934723290158496854698252302084075155839072613762272088719896268509243608326920523667731566804679720375768637788788070015251620103595789227056217630904650311462494564327165977694185939860287019624687527324082337622049737930638139489345871894772514813937619140121292826399382011879702190140899655146577446336668521351420600322226602173031644343998112216764019115797881716250770768568837227012864777667365237351051741381031865983199074260306092658310708087225220618628120207239035936654205069072728493859430551692795828264626162473535594691538040099550434328277089663712119445301337330871542311509354302884640918220359240037369697128684701089552282509665658606304989174668044814015409789612952169198519179081635112771075628790694288991312490852007938554449263410494621104583392926289218027136443288372899403608875337232072406113874581937120908455505272338074474427424370938281293692999883085338976155112551505403508656911161956387274943581268198518418079926217215156308291481623768256916858022440378393288894516152877796284515700534520433326119528316213550245190627875808097157497394172110848341278235056410396385681647576289045603153039394499950861568920548681198703471035455831950679148180225639950054783910514246443572336147402923367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0899bb5015b38ac2c203d817f59673dca0d3925
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1live.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albarakat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.athleticclearance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogsileman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.charnwood-landscaping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dadongjiazu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deepdiscont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dwac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstnotchtech.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gap-hafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.i676.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iconsofspeed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indigo9jewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ivpoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jiacpr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lmayatecum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojapoky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lonestarsportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medicalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mflxu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neurobet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nflsteams.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutrientraws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ofans.party'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oranje.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paramountfx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policiacia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ponebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.possessionmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poundersseafoodmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qbmoney.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redditsports.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rephaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restoranvidikovac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ribbonbazzar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollpi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodaclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tellcitybbq.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thebestof.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesausrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thezencircus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vbuckify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veksha.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.venderfilm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrsportsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wafyair.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zvezdnoe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1live.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albarakat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticclearance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogsileman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charnwood-landscaping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dadongjiazu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deepdiscont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firsnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstnotchtech.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gap-hafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i676.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iconsofspeed.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigo9jewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivpoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiacpr.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liz.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmayatecum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojapoky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lonestarsportsmemorabilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mflxu.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neurobet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflsteams.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutrientraws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofans.party'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oranje.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paramountfx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policiacia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponebee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'possessionmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poundersseafoodmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbmoney.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redditsports.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rephaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restoranvidikovac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ribbonbazzar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollpi.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodaclubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tellcitybbq.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebestof.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesausrus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thezencircus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vbuckify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veksha.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venderfilm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vrsportsnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wafyair.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zvezdnoe.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dea45646e0000040300473045022050f2896cb0a7a941bc2f96102dbfbb25d6a37802c25ba5c8ef0cdf69c205bea2022100bf5a397b1ebeb823a5c3e6061cf51c4d4870ac4b172f1199f1626601200eefec00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dea4564c3000004030048304602210092faece59eb707137c08bb88b25728b924ef48f6bac7c24a0fae5b5d0741850e0221009bb5bd11990fae35fd3f5a00d5c56ee092338d1919553ff37a22350523652276
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0097a727e5d41501645a9bb0bd8821c4a382ff606cf79f25946406cf680d3fd51e6baaf3a400cac2b39f6557e2cd2818c4b7e445cf7748f80a05cf9a471b5ba3d1fd8f82934b6ed09603fb614da3fb58e2bd89d71c8662d972adb4768ba494cff4d9e9de0ebcfbe54f762181c5ff6898bb8b1cab937a6be55ec008ca59aa0f0a52a6d7b84ea37b97d62debfda2dffccdd9352a36713255d8f8d584b5676a6a779f0c838b99e9d454a94cc0038d1badf57b29531af882e63df54ab3de019600e05c924ad9b6f6c67f20040a467f00d2f5ff3868524698894b5081016d7246e5d3c2537c1c8a2fbcabfed0a43f887bb91152c9609552727d273d08299a6b3480cc99