copywatches.net

Issued by R3

About this certificate

This digital certificate with serial number 04:4b:06:a8:f8:19:38:17:04:8f:94:cf:d1:60:ee:36:34:18 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=copywatches.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4b:06:a8:f8:19:38:17:04:8f:94:cf:d1:60:ee:36:34:18
Serial Number (int): 373979173951993959448380502925805861876760
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 61:f0:4a:06:b9:db:a8:a1:2c:16:a6:1f:43:9b:3f:7e:a5:1f:f9:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b4:5c:50:77:0b:2e:8f:5f:ec:67:fd:c6:8c:74:4d:3f:24:6d:2a:b7
Fingerprint (sha256): 4e:3c:0b:ad:fd:e6:17:33:24:ab:83:9f:e7:41:2e:00:dd:c7:ff:4c:e7:99:f2:9d:f8:7d:b7:0f:87:80:c6:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate copywatches.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for copywatches.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.99aip.com
*.accessdane.com
*.agriturismolepiagge.com
*.alewyn.com
*.astoldbybex.com
*.biblicaltimestheatre.com
*.bitcoincruises.com
*.bitcoincup.com
*.bitcointaxlawyer.com
*.bitcointaxlawyers.com
*.bitcorporate.com
*.bossy-girls.net
*.briarbeauty.co
*.cookingschool.au
*.copywatches.net
*.deuttrade.com
*.dizzim.tv
*.e-edim.co
*.flaws.me
*.flynn.au
*.gadget-pratique.com
*.grandpashabet1113.com
*.gurita4dx1.com
*.harvestgeneraltrading.com
*.hassansaid.me
*.houseofpomegranates.com
*.kcom-shares.com
*.ledlightstrips.com.au
*.maryky.com
*.mydailydose.org
*.nghiakk.com
*.niche-empire.fr
*.oceanawellness.co
*.okunola.com
*.pomahame.com
*.proyectoguadalupe.com
*.ps3iplayer.com
*.qiuxia77.com
*.recumbent-bikes-truth-for-you.com
*.rinconchivoradio.com
*.russia-vulcan.com
*.santefx-eva.com
*.selcuksportshd174.xyz
*.share-a-story-shape-a-future.net
*.spicemeridian.com
*.suying000.com
*.tc88883.cc
*.themodernmomsclub.com
*.wemine.com
*.whichliposuction.com.au
99aip.com
accessdane.com
agriturismolepiagge.com
alewyn.com
astoldbybex.com
biblicaltimestheatre.com
bitcoincruises.com
bitcoincup.com
bitcointaxlawyer.com
bitcointaxlawyers.com
bitcorporate.com
bossy-girls.net
briarbeauty.co
cookingschool.au
copywatches.net
deuttrade.com
dizzim.tv
e-edim.co
flaws.me
flynn.au
gadget-pratique.com
grandpashabet1113.com
gurita4dx1.com
harvestgeneraltrading.com
hassansaid.me
houseofpomegranates.com
kcom-shares.com
ledlightstrips.com.au
maryky.com
mydailydose.org
nghiakk.com
niche-empire.fr
oceanawellness.co
okunola.com
pomahame.com
proyectoguadalupe.com
ps3iplayer.com
qiuxia77.com
recumbent-bikes-truth-for-you.com
rinconchivoradio.com
russia-vulcan.com
santefx-eva.com
selcuksportshd174.xyz
share-a-story-shape-a-future.net
spicemeridian.com
suying000.com
tc88883.cc
themodernmomsclub.com
wemine.com
whichliposuction.com.au

Other certificates including the domain name copywatches.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for copywatches.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwecZLdyAYPZ+YtN4kmb4
Fm5E1wKPNNn3PfrjzN0clKeASgV3boqpOvNC8p1WQLMqWUH6dUIgwq13doU3nAPg
R2dYlwjrZbEA9GjhToiqs3A//A5ROImu4SIfkxd+0Ql7lHV1cuVOJ8cLart4/Xn9
rxswGYhh7gPBh811E6PP2Rbb2TC2LCCVBK/B6EfiKglayNJwVTN0EQqAU02YiPdg
CGCpIcmwpUu9s973+zStlGpP2A2OrVj8gLCAQag+J/Adh+NC3kzR1Zoj5HoIiA0o
/9WJ80v3a7yD2K8eADr0UXcYTQOSeSNSyisjIoVFXRxdHdE85HjFXjnQDZ5q3kur
UOHtZZu/K1nGb1hpNOTZTzVqZ6Hu85c/WHHjGe+lcH+gVk8JjtkjiJjUVR+EcGCr
gEx+IlKbmt900PaVeygLbzH2YuWM1DvDDSTY69xRUaaigOXz5y3ye6E0WdjRPvZf
jWEXN7MRhOMdtAkghxbOkFlJtYcAtzzBmyYW3Y4fcq/NV2cHzc7rlAm9Yvjjp8/s
68Kz/06L5nGr63uZsH3b7qKV1nG7LLw+0EirDacdnYt8cFBN1ORg4DjYHKV5jqrA
Sx9QbVizgXzvpi1ASTeHx3AsbabXpDqXv6wN708wPAUil0/NqrzOyv/yF2VxWOdf
PhpwTtv3r/HLBapSefBI2zsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373979173951993959448380502925805861876760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 18:45:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 18:45:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'copywatches.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791054113867499132581720622050135895910037738202053466571236705893949288091415174146740852178362276333629822662245386405849655133928442662199855828301849093881793192623877424903278383075141533773122498800009573300391088233468890507868131850656021026044854054332446246044761096037987782441364495641902865430587234485448841152372560791169972501614701196395179399337584728766488219433731833413677874724872208104864825782364748632750937323163664002726445372123699868753310109897260166038845771636008407541385871325502319389308754226371019351557499237082424058554423479039626223071590862567028412536143266114876925341756497273891386853977334012828472937039099137698696942060667624869395401699803905411811100403436104894499004630896639415560116316969448291997406101373170166516531066395124705747954033335361971658002140544384530499484062220890100426620342531407608966722050127054766026284796129218417134545888746978248401140664541952467706225967541269546815800194994279163070342248963427899199717602326397720175789256672115939713552812511109069965132447204212171495501131351306861438587773994403102326094545917211009695813219922444573978349524024811859064028985854681677379928184121100398905388792392785249360267261566324681173432640527163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61f04a06b9dba8a12c16a61f439b3f7ea51ff968
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1928 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99aip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accessdane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agriturismolepiagge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alewyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astoldbybex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biblicaltimestheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoincruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoincup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcointaxlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcointaxlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bossy-girls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.briarbeauty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cookingschool.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.copywatches.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deuttrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dizzim.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-edim.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flaws.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flynn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gadget-pratique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grandpashabet1113.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gurita4dx1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harvestgeneraltrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hassansaid.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.houseofpomegranates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcom-shares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ledlightstrips.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maryky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mydailydose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nghiakk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.niche-empire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oceanawellness.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.okunola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pomahame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proyectoguadalupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ps3iplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qiuxia77.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recumbent-bikes-truth-for-you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinconchivoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russia-vulcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santefx-eva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selcuksportshd174.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.share-a-story-shape-a-future.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spicemeridian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suying000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tc88883.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themodernmomsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wemine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whichliposuction.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99aip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accessdane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriturismolepiagge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alewyn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astoldbybex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biblicaltimestheatre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoincruises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoincup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcointaxlawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcointaxlawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossy-girls.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'briarbeauty.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cookingschool.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'copywatches.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deuttrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dizzim.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-edim.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaws.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flynn.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadget-pratique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandpashabet1113.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gurita4dx1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harvestgeneraltrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hassansaid.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseofpomegranates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcom-shares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ledlightstrips.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maryky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydailydose.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghiakk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niche-empire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanawellness.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okunola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pomahame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proyectoguadalupe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps3iplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiuxia77.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recumbent-bikes-truth-for-you.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinconchivoradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russia-vulcan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santefx-eva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selcuksportshd174.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share-a-story-shape-a-future.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicemeridian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suying000.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tc88883.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themodernmomsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wemine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whichliposuction.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e43a61e08000004030047304502200b7226ed0ddf18e6041793bf5823dc0d3a6646f963cb510a3ff15bb7c2ab6f77022100ae5a2a44226a36a104bc3eb1680fe0e14e5d42b72c06f8d8dc51b1779dfeb865007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e43a61e610000040300483046022100f124dad367618cb6620bdb3d582db103d91e2ada93c13218e728529a54473ce9022100a9cdf03be7f0058fb8fdfd46775e740d30afe1c469700171fc36ac02ad1f69fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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