columbiasheriff.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:ba:7d:63:f8:1e:65:5e:6f:da:05:2a:f8:61:a1:f6:67 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=columbiasheriff.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:ba:7d:63:f8:1e:65:5e:6f:da:05:2a:f8:61:a1:f6:67
Serial Number (int): 293231005390867870410600308539640732841575
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:68:7d:99:61:1c:a3:ac:5a:f7:7c:4c:4a:b6:0b:55:ea:e9:47:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:da:2a:50:60:15:c7:47:a1:87:33:35:34:9b:af:b7:e3:a5:be:dc
Fingerprint (sha256): 4c:bf:0d:22:0c:67:23:7f:88:00:4a:83:c0:4a:ef:e4:b9:66:f8:ab:e3:f2:28:83:73:52:cb:ba:81:e1:51:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate columbiasheriff.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for columbiasheriff.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adultfriendster.com
*.aerotraining.com
*.ajcroofingnm.com
*.amappliancema.com
*.anthropolgies.com
*.asrssystem.com
*.barkstalephoto.com
*.bayareafountains.com
*.bfbs-tv.com
*.browardcountyjail.com
*.calemontecorp.com
*.californiataxdata.us
*.citibanbk.com
*.cobatate.com
*.columbiasheriff.com
*.corncribhomes.com
*.e30world.com
*.fifostream.cc
*.gelblasterfrontier.com.au
*.gofitu.com
*.harrisgasservice.com
*.holdco.cc
*.kcbed.com
*.lakenormanpuppyplanet.com
*.lombok.com.au
*.markesandspencer.com
*.moneygrahm.com
*.mopedwarehouse.com
*.morrisonmotor.com
*.mortgageratesdaily.com
*.mortgagetakeover.com
*.mysunwaycard.com
*.naughty69play.com
*.novodworski-lampy.pl
*.nutritionsystem.com
*.onesteptutoring.com.au
*.passwordmonter.com
*.pmdl.info
*.propertysellers.com.au
*.randomchessboards.com
*.revzillz.com
*.roamens.com
*.sevenlifepath.com
*.teraju.com
*.threedigitauto.com
*.truenudits.com
*.unzanat.ru
*.westernreuters.com
*.wizzardpuff.com
*.xnnxporn.com
adultfriendster.com
aerotraining.com
ajcroofingnm.com
amappliancema.com
anthropolgies.com
asrssystem.com
barkstalephoto.com
bayareafountains.com
bfbs-tv.com
browardcountyjail.com
calemontecorp.com
californiataxdata.us
citibanbk.com
cobatate.com
columbiasheriff.com
corncribhomes.com
e30world.com
fifostream.cc
gelblasterfrontier.com.au
gofitu.com
harrisgasservice.com
holdco.cc
kcbed.com
lakenormanpuppyplanet.com
lombok.com.au
markesandspencer.com
moneygrahm.com
mopedwarehouse.com
morrisonmotor.com
mortgageratesdaily.com
mortgagetakeover.com
mysunwaycard.com
naughty69play.com
novodworski-lampy.pl
nutritionsystem.com
onesteptutoring.com.au
passwordmonter.com
pmdl.info
propertysellers.com.au
randomchessboards.com
revzillz.com
roamens.com
sevenlifepath.com
teraju.com
threedigitauto.com
truenudits.com
unzanat.ru
westernreuters.com
wizzardpuff.com
xnnxporn.com

Other certificates including the domain name columbiasheriff.com

(limited to 100 certificates)
movetoireland.com
hccu.online
columbiasheriff.com
*.5502.au
columbiasheriff.com
columbiasheriff.com
columbiasheriff.com
nananenem.com
donsjohsn.com
uvlayer.com
movetoireland.com
columbiasheriff.com

Certificate

The complete raw certificate details for columbiasheriff.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuuF/ZC9P60sgM2H9418r
bATvK9FCoqGwuhdFu9Tme1VGiXLbzaL/z8Z9eZNeJkAiioilRnSBspxKAG4PSxEZ
bdQNs/X3o701ZRulheP/yZbEEySqlxR3jyIkjRBDONzt9FP5TnRKROV9f2j3y0QZ
GJ3yzWDhBbsa5SPVuyeE/nkyUxnDMwYgcF9hkNMy6TbvQhRCZ4wWoFMsbMup0jm+
+8U1uVAUrtuE/Rpx+kFBZEx5BchQ8fIaX2xBXdBjySEEuw0HGFyY+QWBTO5N/jWS
/bd9RSNCTn2pNPfG1lZMkGeho5yjKLJiMe2maNND9w5XFRiOnJj3gQLIEPjJQc72
1gzfaNJ+45KzKu3MJ8AUwDNjWlA//k4yGWZqazwVbTwDY9hOAOKC/mij2pa4bcv9
rCIXjmTa91wkjtKya2Nalv8b8LQ8kgxb4uxaBQrgHJUpvuaWJHlZpNJJH7O7WKrK
rIMfGnGdP5s7FZur8CEA1SUkEAvfX5bONzgsivgUGFjRAVwO3NnfgJYMjAbalEF8
WwXWrIpv06CD0WyjM9P2QXE7VbTp3yFOyyelY+0gDw6WJc/t4Y5yoaN1q93PTVud
iLRxL2PRBf4BlO9dOzLEoBR1YZ9W3vQ8hZ7Pdw5cYxMbOxAh0aG41J1XirCit7O7
FFhjWJSLFnwn5QJZN/qOu70CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293231005390867870410600308539640732841575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 08:56:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 08:56:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'columbiasheriff.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762407351486807791425687578469645729272987977325668225745385632658065595423754473751776062357880195810400290790018970120752650439915934217823625751805913961710125597612323839103119695117557361008685525323853802904625406664916305640203335088716017088998782004640934609967545481068561543399900760081097777053281407447575328255832607380097722426924747828114103765939477515082236812293095122532026043321491777521971212158799374149159435894132569255978480310406514169707525171601545983543082200133915230711403216431442034011334266027910122414373358084980539246501151083597832419169580234939373911306712430665542618735014797996238097257321177053541884994953414582671136289324732504510550068613205104503105952558116871103676152509838516478313238592154025756127801848785639119732531482689293661504230340618768854382200171436641040788954225684717959178300668304506668225985532483241882184152870428238843206587298579401832760378238977280044920792417568683416686009359267809045338209921925258250537333695113043238200465070338423696885288163571769776209235190790181562220085055069152218668283340716230104942055875160983479640305143721239417207208724061178719437272965033567216337105341387575184329425423542123052001319292326976475868346106952637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86687d99611ca3ac5af77c4c4ab60b55eae94764
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1934 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adultfriendster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aerotraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ajcroofingnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amappliancema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anthropolgies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asrssystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barkstalephoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayareafountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bfbs-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.browardcountyjail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.calemontecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiataxdata.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citibanbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cobatate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.columbiasheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corncribhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e30world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fifostream.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gelblasterfrontier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gofitu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrisgasservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.holdco.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lakenormanpuppyplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lombok.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markesandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moneygrahm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mopedwarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morrisonmotor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgageratesdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mortgagetakeover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysunwaycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naughty69play.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novodworski-lampy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nutritionsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onesteptutoring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.passwordmonter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pmdl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.propertysellers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randomchessboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.revzillz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roamens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sevenlifepath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teraju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.threedigitauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.truenudits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unzanat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westernreuters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wizzardpuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xnnxporn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adultfriendster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aerotraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajcroofingnm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amappliancema.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anthropolgies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asrssystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barkstalephoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayareafountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfbs-tv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'browardcountyjail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calemontecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiataxdata.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citibanbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobatate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbiasheriff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corncribhomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e30world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifostream.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelblasterfrontier.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gofitu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisgasservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdco.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcbed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakenormanpuppyplanet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lombok.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markesandspencer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneygrahm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mopedwarehouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morrisonmotor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgageratesdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagetakeover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysunwaycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naughty69play.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novodworski-lampy.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutritionsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onesteptutoring.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passwordmonter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmdl.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertysellers.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'randomchessboards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revzillz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roamens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenlifepath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teraju.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threedigitauto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truenudits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unzanat.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernreuters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizzardpuff.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xnnxporn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3ae5f0670000040300483046022100e9b874b49ecf96c411e1c6b218b747e8da181f3addc7f39ce93203aac4a7d94202210096b0a46a8611ba65df991a961c0045054181ea195626e3d8a0897462f93ac3dc007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d3ae5f04d0000040300463044022033ee301e35cdbda6ffc3abf3e3535c554166662d046c595468ac8ab3def9722502202823a5741b05285eeaad72ebe87da550651fa641ffb3dd3324d853cb38fa716b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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