knc1.com

Issued by R3

About this certificate

This digital certificate with serial number 03:c6:9a:82:21:1b:7a:b3:85:cf:15:fb:90:66:cf:b1:9a:d8 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=knc1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:9a:82:21:1b:7a:b3:85:cf:15:fb:90:66:cf:b1:9a:d8
Serial Number (int): 328918143227065693786843744516571625790168
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:3f:88:73:bd:ba:b3:bf:cf:d9:b6:d0:51:44:1b:2a:26:7e:c7:a3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:5b:26:6d:a3:6e:a5:c6:c1:55:96:ac:9f:6b:e5:3f:d6:af:11:96
Fingerprint (sha256): 51:57:6d:f8:c0:00:30:fb:28:81:dd:0d:03:8c:33:c6:6f:c4:e6:84:be:fd:57:a5:38:b3:9e:e2:c6:78:c5:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate knc1.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knc1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.americastestkitchem.com
*.arcgs.com
*.bloomingsdale.com
*.cinnemax.com
*.clubcarslon.com
*.dezeer.com
*.diligentsearch.com
*.electroslut.com
*.everycoincounts.com
*.fedilty.com
*.globalsalud.com
*.grafandsons.com
*.hairyminx.com
*.harrborfreight.com
*.homerepo.com
*.impr-data2.com
*.iptvsmarters.tv
*.keycodes.us
*.knc1.com
*.mainstreettrading.com
*.milesplitmd.com
*.nextbookstores.com
*.nzsotherbysrealty.com
*.oudhitsquad.com
*.outofbreath.com
*.overniteprints.com
*.pizzeriaspluga.com
*.puresaftey.com
*.safewithdental.com
*.savewithdentel.com
*.secure-smartcu.com
*.social-event.com
*.sporteast.top
*.squirrelstreams.com
*.stgeorgespringbreak.com
*.stretking.com
*.studycorner.com
*.teeniesluts.com
*.teenjailbait.com
*.texasflourescents.com
*.texassupperfood.com
*.thefloridatimesunion.com
*.totadefense.com
*.towncentermortgage.com
*.tripaadvisor.com
*.tscoks.com
*.vicodine.com
*.video4gays.com
*.weighmyself.com
*.whatsyourclaimworth.com.au
americastestkitchem.com
arcgs.com
bloomingsdale.com
cinnemax.com
clubcarslon.com
dezeer.com
diligentsearch.com
electroslut.com
everycoincounts.com
fedilty.com
globalsalud.com
grafandsons.com
hairyminx.com
harrborfreight.com
homerepo.com
impr-data2.com
iptvsmarters.tv
keycodes.us
knc1.com
mainstreettrading.com
milesplitmd.com
nextbookstores.com
nzsotherbysrealty.com
oudhitsquad.com
outofbreath.com
overniteprints.com
pizzeriaspluga.com
puresaftey.com
safewithdental.com
savewithdentel.com
secure-smartcu.com
social-event.com
sporteast.top
squirrelstreams.com
stgeorgespringbreak.com
stretking.com
studycorner.com
teeniesluts.com
teenjailbait.com
texasflourescents.com
texassupperfood.com
thefloridatimesunion.com
totadefense.com
towncentermortgage.com
tripaadvisor.com
tscoks.com
vicodine.com
video4gays.com
weighmyself.com
whatsyourclaimworth.com.au

Other certificates including the domain name knc1.com

(limited to 100 certificates)
saglikmuzeciligi.com
windowmasterscleaning.com
knc1.com
knc1.com
schiumadi.me
schiumadi.me
knc1.com
knc1.com
knc1.com
madthumds.com
knc1.com
knc1.com

Certificate

The complete raw certificate details for knc1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328918143227065693786843744516571625790168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 11:08:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 11:08:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knc1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807723820040562415039110719390125609599956916964627064287600919483169539517380879658767255869196066748113336014032609566277175042293680076464720869419979358177763074990851733211502163809904782481067447379974963125424065894864706581677260512444209326422308595661421449823602677874936420030868027897536842485984290739698211116675909779342213389177399995406985633774483086558962030641668719752296110496490399654359338606368631676253209112573337696186428623064944847204338631225947791968386519541101797961304008435086775266161317617020920636963780767368072948998285695211226198763294816742024398645797536287262273683834653249966049512053767303329127483322945146035129660219853589427928155260414580551653484648987199902201814997382758548455712634364578813472544216492755706566689123829657056416013331373152970743825698497661127348473970417693497394499943478060032357647655661125655995614101233721274015754541625862576363746245633984686033853670289525548964416399112544658571115927418884697499974945835759004374464301863157584766935825368669541923947285838010408546440301599079163469081282249381115676845217766943643568441856872947403416380435639572490394416942350310008539651152272060966801353815186299918803674864256660166824483973515299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c63f8873bdbab3bfcfd9b6d051441b2a267ec7a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americastestkitchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arcgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bloomingsdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cinnemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubcarslon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dezeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diligentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.electroslut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.everycoincounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fedilty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalsalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grafandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hairyminx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harrborfreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homerepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.impr-data2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iptvsmarters.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keycodes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.knc1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainstreettrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.milesplitmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nextbookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nzsotherbysrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oudhitsquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.outofbreath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overniteprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pizzeriaspluga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puresaftey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safewithdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.savewithdentel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure-smartcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.social-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sporteast.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.squirrelstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stgeorgespringbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stretking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studycorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teeniesluts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.teenjailbait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texasflourescents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.texassupperfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefloridatimesunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totadefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.towncentermortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tripaadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tscoks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vicodine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video4gays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weighmyself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatsyourclaimworth.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americastestkitchem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcgs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloomingsdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinnemax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubcarslon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dezeer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diligentsearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'electroslut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everycoincounts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fedilty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsalud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafandsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hairyminx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrborfreight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homerepo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impr-data2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iptvsmarters.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keycodes.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knc1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainstreettrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milesplitmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextbookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsotherbysrealty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oudhitsquad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outofbreath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overniteprints.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pizzeriaspluga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puresaftey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safewithdental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savewithdentel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-smartcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social-event.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporteast.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squirrelstreams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgeorgespringbreak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stretking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studycorner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeniesluts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teenjailbait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasflourescents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texassupperfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefloridatimesunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totadefense.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'towncentermortgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripaadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tscoks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vicodine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video4gays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weighmyself.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsyourclaimworth.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d3638b8780000040300473045022100d96a5e0124c183b7b782a8be3dfaa60d3f99b365a89049456dfe75971bb287f302200dd94bd9c8beb177b2ae0b50befb0a886efa9c87dca91c8ed44f9e53cca885ba007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d3638b922000004030046304402204105df75b11852def7d78a1f20d8f35d8cb30bccd1010637ec6c6d048569ceb802206061621a4971e09f1dabed1a1825272dfee2333e6a1cd9ffc3991152aaa0d395
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088e94c972310b2bfba7946f402a14a535c09c4dcce01da159d9efd09b0558035c46bd00cd8208d37bddc970b5be6e249f99073792d5417e6040fd905cf4233218f0fe06419f6929a512be03ffe60609ae8e16b526102df9c613f85db4a18a3b2bd16fb88edac4100a02798cd95ebe27f0309f05b385b6d74ca871c132c958ad036debf8e4ec87780fd54553cecd992e8bc216571cc0c0a8f6f43b8b2bac1c80d7a9b98e83a7a89bf8aaa3015c6ea5bcc0b83e7c67eb5851599ba7ce407a42efdfbbd13133b8f334ea888b5f941796d2f2463cc2344096bb06e9762bec64f2435c15bb536f2060fdba461da0f7e90730c577db77c6a7b00ccb993cc9dacd9807b