bringyourown.com

Issued by R10

About this certificate

This digital certificate with serial number 04:de:9b:2f:16:96:98:5b:11:90:5d:50:87:73:f4:68:e2:32 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bringyourown.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:de:9b:2f:16:96:98:5b:11:90:5d:50:87:73:f4:68:e2:32
Serial Number (int): 424198104018932726046725506613800203772466
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:2d:bb:03:d7:ca:38:96:86:0c:a1:d4:6e:71:19:98:07:06:ce:4b
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 21:18:5f:9f:28:44:53:9b:d0:b3:74:74:08:d8:61:88:32:52:7b:e5
Fingerprint (sha256): 4e:45:62:73:8f:40:03:20:ef:41:87:c8:1c:5b:42:ed:1e:e2:a3:8b:93:5d:c9:5a:5c:36:cb:34:b7:ee:c3:7a

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate bringyourown.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bringyourown.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2stopsmokingtips.com
*.3600training.com
*.acuityscheding.com
*.amaricangirlideas.com
*.anyvan.co
*.bbqdd.com
*.bloomstheflowershop.com
*.bluebellcarts.com
*.bondageparade.com
*.bringyourown.com
*.carpro-ashida.info
*.dollarforglobelife-32.com
*.duette.com.au
*.facetbiotech.com
*.filmyhit.co.uk
*.fishingstool.com.au
*.galeriafotocreativa.com
*.georgedingwall.co.uk
*.giteo.com
*.gptbjovhgng.info
*.granitetile.info
*.grimaldi.net
*.inblockit.biz
*.jaylapageofficial.com
*.jmclaughln.com
*.keierezy.info
*.kiwzgqeoya.info
*.liod.info
*.lkiterotica.com
*.mandolab.com
*.montageoverseas.com
*.mymycase.com
*.myswarovski.com
*.opitech.co.uk
*.ownhouse.com
*.petandbird.com
*.pottlat.co.uk
*.sironabeauty.co.uk
*.soloclub.com
*.specialoffer.com.au
*.spotifyupgrader.me
*.staplesaddvantage.com
*.tarotschool.online
*.thehempbotanist.co.uk
*.vulkan-official.info
*.webstaurantstoore.com
*.whitechalkkitchens.com.au
*.whpluse.eu
*.yesstyke.com
2stopsmokingtips.com
3600training.com
acuityscheding.com
amaricangirlideas.com
anyvan.co
bbqdd.com
bloomstheflowershop.com
bluebellcarts.com
bondageparade.com
bringyourown.com
carpro-ashida.info
dollarforglobelife-32.com
duette.com.au
facetbiotech.com
filmyhit.co.uk
fishingstool.com.au
galeriafotocreativa.com
georgedingwall.co.uk
giteo.com
gptbjovhgng.info
granitetile.info
grimaldi.net
inblockit.biz
jaylapageofficial.com
jmclaughln.com
keierezy.info
kiwzgqeoya.info
liod.info
lkiterotica.com
mandolab.com
montageoverseas.com
mymycase.com
myswarovski.com
opitech.co.uk
ownhouse.com
petandbird.com
pottlat.co.uk
sironabeauty.co.uk
soloclub.com
specialoffer.com.au
spotifyupgrader.me
staplesaddvantage.com
tarotschool.online
thehempbotanist.co.uk
vulkan-official.info
webstaurantstoore.com
whitechalkkitchens.com.au
whpluse.eu
yesstyke.com

Other certificates including the domain name bringyourown.com

(limited to 100 certificates)
cnctexas.com
cnctexas.com
wikifeetx.co
bringyourown.com
hometoho.com
hometoho.com
baskino3.club
hometoho.com
bringyourown.com
aljadidah.com
baskino3.club
bigwardrobe.com
championkennels.com

Certificate

The complete raw certificate details for bringyourown.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvP2uYvcl5fG9lSg/igOF
bXxQyzq+iJvlD2rObmzKFpWt2U0rAYgKYTmQYrRKvnT6tyP71ZIpbJ63gfI44hIU
2B2llAUIhJdLKStZADJEFSLlP/OmfBIpQE6IWD1DAo5EycWSS83akIAbP3HS8Jh1
LoFFOp8Jy0k7Zm37sf26IqCl3tgk+kSw2j+DCv5q2HT3mM55bLL7qtCSZcIj+8ks
YdRELadZjbWrFxDhMyiC3MszgzZSzGNuhBaxk5UFkVZ3ObS2MtUwwVOe/LdLpudG
9MMIy/L5D7eJauVMYPaD3zDtszn2XUDLXPU5UN6uusJxDhZ8Z9c/vTSxD7DQjKkw
NA3Te8/gxkLkwcX7PJcwONrvJal7d9pBhQgORvnWf8hvP2RmDIcmwQgje+ZxFOKI
rA3jBCV2pSXslMXTL22f77Lji7vwKGAj9TyVaayN6vzM4PEzPh+AZnhMmqwj4Suy
My7ezwlN0JF3pNjwWdspmFaPBV7nbIIyZ/llwOiPLR8lucD9jAVnwMd2d2bEYWI1
WyI2j1FtyGOUdLht+JcnkkCE4GW+WK6IUAyhBWIA9BlQS5StHxqzESjqlDjB4/2c
kYnQbW6MrfUuPoVoOuCk2GtkAw8gQJbrv0dHiFO9t1S9maZidPFcyGbGV5+3BmT6
XF4/PhlaJ01Tfq8rewkr2HECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424198104018932726046725506613800203772466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 13:51:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-22 13:51:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bringyourown.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771015776166402939635780697406566649411986397351849497164148389485520529152049241271046457228383228856155104252295413269093835564433795406148177853331775641936452665195388686659327343813498254364544074415322969029149453067271670336265772860577257688936356975916830335213184177019524544732108092629620671610749503758503341193851941851133615844047321127254369350298598632726276842946760392602630802423008531085361133244974240998585509347860304309334635236545203098435410016605623378924955867556074697469556391036060087137966881065689537169357868985860514134464402703805876793325384590266376403974383544899411719917595779799667524078538694538081889358872666965674303278917799636720213908409268085825090542983465970614989064210004612482047943443944985249151504545136810881203219390448899491736543573611381767875380289761987936745225503945226883498476418211497206598811603714672454405804923005003731862957070834762586838041729278494925347071700698889828966824912693501336378033016981211885928553464144622000571497929357146958071820958054316399584355674823508596023052291403226754686812248912279118347283228909019372324099052718755609849864636700887217494555129873004222273766910347754670682343116756928316959372341599613734481914795645041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a12dbb03d7ca3896860ca1d46e7119980706ce4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1882 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2stopsmokingtips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3600training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acuityscheding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amaricangirlideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anyvan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbqdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloomstheflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluebellcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bondageparade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bringyourown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carpro-ashida.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dollarforglobelife-32.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duette.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.facetbiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmyhit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishingstool.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galeriafotocreativa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.georgedingwall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gptbjovhgng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.granitetile.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grimaldi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inblockit.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jaylapageofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jmclaughln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keierezy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiwzgqeoya.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liod.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lkiterotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mandolab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montageoverseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mymycase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myswarovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opitech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ownhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petandbird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pottlat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sironabeauty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soloclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.specialoffer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotifyupgrader.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staplesaddvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tarotschool.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thehempbotanist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vulkan-official.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webstaurantstoore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitechalkkitchens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whpluse.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yesstyke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2stopsmokingtips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3600training.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acuityscheding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amaricangirlideas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anyvan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbqdd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomstheflowershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebellcarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bondageparade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bringyourown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carpro-ashida.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dollarforglobelife-32.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duette.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facetbiotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmyhit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingstool.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galeriafotocreativa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'georgedingwall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giteo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gptbjovhgng.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granitetile.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grimaldi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inblockit.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaylapageofficial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jmclaughln.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keierezy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwzgqeoya.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liod.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lkiterotica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandolab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montageoverseas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymycase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myswarovski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opitech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ownhouse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petandbird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottlat.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sironabeauty.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soloclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'specialoffer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotifyupgrader.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staplesaddvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarotschool.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thehempbotanist.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vulkan-official.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstaurantstoore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitechalkkitchens.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whpluse.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yesstyke.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e000001904abb667c000004030046304402207403948dd1e12212672673f0d66f1524869fbbc948f9da5d905f82350bf7268b022021374509e6b72b1267a42373e07011f67023132dae23af19431fdb2db5aaeba400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001904abb667f0000040300473045022100e0f01a3d304852fc6ffd04cb1c491563996780015c9ce53ef454ac9beb049f020220284216b14bf9c05415cc38ae2775c45fc584a82ef858e436ce887d190a973b87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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