jwkijq.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9e:e8:ce:cf:2b:2d:80:5d:1f:21:a6:35:bd:61:49:04:59 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jwkijq.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:e8:ce:cf:2b:2d:80:5d:1f:21:a6:35:bd:61:49:04:59
Serial Number (int): 315410926478843656775800419133975490528345
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:fc:24:8a:96:f2:06:92:fe:aa:64:59:f0:36:82:e8:d4:21:ec:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e8:31:9b:4e:8a:e0:6a:7e:b0:9b:32:78:b9:19:69:00:83:80:93:78
Fingerprint (sha256): 59:1a:a5:85:c6:8e:11:bd:ee:d1:58:10:d9:4f:9a:fd:d9:19:82:d6:b5:f1:28:66:86:5d:00:e7:e8:64:52:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jwkijq.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jwkijq.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.197box.com
*.acacares.com
*.acarthatechpartners.com
*.accasofware.com
*.boxvirtualsummit.com
*.busandal77.net
*.candlplumbingsolutions.com
*.daleyswarriors.com
*.distinction-cars.com
*.donandgino.com
*.ecoecho.co
*.fragranceservice.com
*.hoedspruitfm.com
*.homeinsures.com
*.ignitionau.org
*.ihateyouniggas.com
*.julianamanske.com
*.jwkijq.com
*.lafiestashows.com
*.markladyshau.me
*.millionsofstitches.com
*.mountaintechliving.com
*.mudou.eu
*.mybestbuyaccount.com
*.myindianstickets.com
*.naijacut.com
*.neckbeardia.com
*.nnack.top
*.providersmtp.com
*.pslocum.com
*.qlo7uyjy.com
*.qubig-on.com
*.radioramamichoacan.com
*.ragamrubrik.com
*.rvinformed.com
*.scotlandkiltcompany.com
*.service-public-amendes.com
*.siamsticker.net
*.stefanobernini.com
*.studentnotontask.com
*.sumermarketing.com
*.sungersehirler.com
*.symbolic-app.com
*.tdictionary.com
*.traiteur-couffe.com
*.travelerguideonline.com
*.ttdyb.cc
*.tucsonautoinsurance.co
*.tuozhan22.com
*.vacacionescheckin.com
197box.com
acacares.com
acarthatechpartners.com
accasofware.com
boxvirtualsummit.com
busandal77.net
candlplumbingsolutions.com
daleyswarriors.com
distinction-cars.com
donandgino.com
ecoecho.co
fragranceservice.com
hoedspruitfm.com
homeinsures.com
ignitionau.org
ihateyouniggas.com
julianamanske.com
jwkijq.com
lafiestashows.com
markladyshau.me
millionsofstitches.com
mountaintechliving.com
mudou.eu
mybestbuyaccount.com
myindianstickets.com
naijacut.com
neckbeardia.com
nnack.top
providersmtp.com
pslocum.com
qlo7uyjy.com
qubig-on.com
radioramamichoacan.com
ragamrubrik.com
rvinformed.com
scotlandkiltcompany.com
service-public-amendes.com
siamsticker.net
stefanobernini.com
studentnotontask.com
sumermarketing.com
sungersehirler.com
symbolic-app.com
tdictionary.com
traiteur-couffe.com
travelerguideonline.com
ttdyb.cc
tucsonautoinsurance.co
tuozhan22.com
vacacionescheckin.com

Other certificates including the domain name jwkijq.com

(limited to 100 certificates)
jwkijq.com
jwkijq.com
jwkijq.com
jwkijq.com
science.degree

Certificate

The complete raw certificate details for jwkijq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315410926478843656775800419133975490528345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 17:09:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 17:09:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jwkijq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 604588003165410793297435948297521333250170752493759021482557101660301591775525621766939814876394845015220054111906607741140306842320494725034264172019707627744524465281568006973935672043586351913746467821435745714512309769660197796616189217507418559571211738993686909974079406848369348703575875204012301992201835492378180905527064893161657141664144011044380428346259634253988947461814679033629338137631765014234249669777022186840525715130439980483652317577858276721792702138726142747269450450541856676410883600131706085840023892428184415600466193603884151003695054779076924729408545301535198823752430004212692378514582317616900162311881609432362074361854060058094901645683557001260086896677711922524423224227581237882653512125077866910684392300972163139028700595291223468222954672360160660888239554233680355268109556361683728976832363074981633800322088893254301128902543608541296357657082181486863451229864987503951003255172388050287414788051611159980733195534010078381820004418748024153268987279577178348616699487880053457586450315508008771500992801932081743248453623946839220895088246366071666111984580378203770406066488807535181232494436549167095278002637661860937634761560134930506323449368773769493834285433020456499853824013157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44fc248a96f20692feaa6459f03682e8d421ec47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1962 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.197box.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acacares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acarthatechpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accasofware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boxvirtualsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.busandal77.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.candlplumbingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daleyswarriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.distinction-cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.donandgino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecoecho.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fragranceservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoedspruitfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homeinsures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ignitionau.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihateyouniggas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.julianamanske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwkijq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lafiestashows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markladyshau.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.millionsofstitches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mountaintechliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mudou.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybestbuyaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myindianstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naijacut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.neckbeardia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nnack.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.providersmtp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pslocum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qlo7uyjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qubig-on.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.radioramamichoacan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ragamrubrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rvinformed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scotlandkiltcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.service-public-amendes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siamsticker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stefanobernini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studentnotontask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sumermarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sungersehirler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symbolic-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traiteur-couffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelerguideonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttdyb.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tucsonautoinsurance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tuozhan22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacacionescheckin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '197box.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acacares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acarthatechpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accasofware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxvirtualsummit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'busandal77.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candlplumbingsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daleyswarriors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distinction-cars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donandgino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecoecho.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fragranceservice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoedspruitfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeinsures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ignitionau.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihateyouniggas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'julianamanske.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwkijq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafiestashows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markladyshau.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'millionsofstitches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountaintechliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mudou.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybestbuyaccount.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myindianstickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naijacut.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neckbeardia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnack.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'providersmtp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pslocum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlo7uyjy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qubig-on.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioramamichoacan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ragamrubrik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvinformed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotlandkiltcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-public-amendes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siamsticker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefanobernini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentnotontask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumermarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sungersehirler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symbolic-app.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdictionary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traiteur-couffe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelerguideonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttdyb.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tucsonautoinsurance.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuozhan22.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacacionescheckin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d3ca9724300000403004730450220792cb141f29bd44e1d90d1b992b249c6a1e8df4dacaff4b11d477dba72aa51c5022100e68902fafa879d192e4b1823ffb40c4b60d162ce4c273be216aa96c32c9efc4b007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d3ca972700000040300473045022100818f109b580fd078e0c74720ea3cd29f8548b778890c27e3231926cb630b2a8802207e021c93620b457f73f99bb3d6888cac0a2d4de7a083dac4b163b2e5d255e127
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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