spiritanimal.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:50:3d:76:39:45:38:7d:9a:89:c7:4e:06:88:7d:41:f0:64 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spiritanimal.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:50:3d:76:39:45:38:7d:9a:89:c7:4e:06:88:7d:41:f0:64
Serial Number (int): 375753429841069824269165769768827925688420
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bb:29:43:6c:78:9b:07:ea:68:74:4c:ce:3e:3a:20:dc:c0:59:7a:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 56:6b:de:b9:b6:d5:9c:f8:44:bb:4e:76:fe:a2:8d:41:27:ee:14:6f
Fingerprint (sha256): 5b:4d:a8:de:99:d0:3a:97:ed:c4:66:22:7a:04:13:84:fe:65:6b:78:80:c6:6c:58:ab:3d:bf:f9:c5:6c:69:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spiritanimal.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spiritanimal.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.alcosto.online
*.bet4u.club
*.buildingsite.com.au
*.businessservice.info
*.carbohydrate.com.au
*.cempakaslot3.club
*.chanh.club
*.daddyissuescarrd.co
*.displaydeals.com.au
*.drurable.co
*.firstpagerank.com.au
*.fitsclimbing.com
*.genxo.co
*.gnt.com.au
*.hvacshoppers.co
*.infkation.uk
*.infobd.com
*.jujutips.me
*.karino.online
*.laroofingmaterials.co
*.linkefin.co
*.manskin.com.au
*.mcetropcs.mobi
*.minnesotabass.com
*.motaz.co
*.motociclismo.online
*.nanostore.info
*.orchards.com.au
*.ourstand.co
*.peakology.com.au
*.photocushions.com.au
*.r-e-w.co
*.reversecycleairconditioners.com.au
*.ruralinternet.com.au
*.ryt.com.au
*.scrip.com.au
*.shoptechbfd.com
*.slot-cuan.xyz
*.soccertraining.com.au
*.spiritanimal.com.au
*.stringskills.co
*.tailormadesuits.com.au
*.telbright.com
*.thecomedian.co
*.thegoodsmart.co
*.totalsportik.com
*.tradesing.net
*.urbanministryconference.org
*.vafestivalofindia.co
*.wwwinstarem.com
alcosto.online
bet4u.club
buildingsite.com.au
businessservice.info
carbohydrate.com.au
cempakaslot3.club
chanh.club
daddyissuescarrd.co
displaydeals.com.au
drurable.co
firstpagerank.com.au
fitsclimbing.com
genxo.co
gnt.com.au
hvacshoppers.co
infkation.uk
infobd.com
jujutips.me
karino.online
laroofingmaterials.co
linkefin.co
manskin.com.au
mcetropcs.mobi
minnesotabass.com
motaz.co
motociclismo.online
nanostore.info
orchards.com.au
ourstand.co
peakology.com.au
photocushions.com.au
r-e-w.co
reversecycleairconditioners.com.au
ruralinternet.com.au
ryt.com.au
scrip.com.au
shoptechbfd.com
slot-cuan.xyz
soccertraining.com.au
spiritanimal.com.au
stringskills.co
tailormadesuits.com.au
telbright.com
thecomedian.co
thegoodsmart.co
totalsportik.com
tradesing.net
urbanministryconference.org
vafestivalofindia.co
wwwinstarem.com

Other certificates including the domain name spiritanimal.com.au

(limited to 100 certificates)
downunderepoxy.com.au
spiritanimal.com.au
downunderepoxy.com.au
spiritanimal.com.au
roost.us
spiritanimal.com.au
spiritanimal.com.au

Certificate

The complete raw certificate details for spiritanimal.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz44Vg+J0bMR8WRHFz6yJ
pfJssTTyxWxUOTDgSfoxcHToDgCK08OoA4uY8dENYfon1ec7d50nbynEatn6XGpR
zfolpxlglB0bpSfV9Tv1kMf+RNOs2aIwRh7kjXqSWVcgM3saZ7UkRffbfgvUnUwd
m33808rM/h8oYTMMCIFwpnsHk0A86sngsVGNHZAPH2ybYbU+lYI4lj3/QNRjKPoM
eXIgxcShlVYTHeQwtPMbgDGzZrtPEB2CzBVskBp85TL8TsPvvvPSyhgY6FF+yW40
DWlyEoPRcbZcD00DG1gWkdbo7ObQ1HAs88+vue9YFvSBGGI2ZCWy/f7rtYcZ/FMY
sJYtEPN9AQQ23E9W+889R15BNIaBxvPpVS8ucryGTfCMrz4vETffzAzpvOpn3Dkk
ULL7Twumy9xUKhQ5jzomnIfQ5qGRH5zcBiRiy0vfc9WdY2F5mAKOG0CJGyjbWcko
/yvN72lzXEJJyQy4fw3Drgyr2HVYVzdOoaKp0oH9ObgCD96NoWwSdPvYrZL3P2at
qKkfpqrOB8n6ncvbQ6oZzOyx/cMOJq3GnH3Ftu3pSla7Jim7qunJYKqVJmtct86p
YaeAgWmiuOVW6Afwt+tpG02LobotNqQvuf32HGKau+29qke6fNL31GB58EmtLSmP
OvvonkgdNdTThjXk+bR+IaECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375753429841069824269165769768827925688420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 00:47:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 00:47:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spiritanimal.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846750588977953246726815257504654991547998998910884598548353648145556333265474535351596403259977801142671361807519428790946215753176013522912471095704612640343903665267724657209081232877524183221714412624773938482373286079629133912970569683184987282088631561465539042870308581961296319626683038390641932545048146591508488420212178757074060697808438943137918217665371559995749579029333498733775432095747243303066298696490785885260733535486721920175205451526974635655850140900814877919861089915750537749863812338829793828929753397513375292937070290225083461971739145112993072526375866526642654942117361726044100084310342367652029879573110015594691610500444595933672595170756525669989898349074271116272447881488606608433590208838920053341046582474158755523013744966594594256208554664802599606165784252110073120717323253183544350985663388632663919591699583614621286411406232745122645805673375018726188524536130871455004474779686630248564905842132443007537937355316332385108366388934294972485184312896981877253511971609965589883251342491555810754884804759252918587421260847805980555515928615892840925449787902945926240098171494696426980084995952056502139728891166047676827630361032624505226234505261184267498559216715797450506643810689441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb29436c789b07ea68744cce3e3a20dcc0597a7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alcosto.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bet4u.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildingsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.businessservice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbohydrate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cempakaslot3.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chanh.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daddyissuescarrd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.displaydeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drurable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstpagerank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitsclimbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.genxo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gnt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hvacshoppers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infkation.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infobd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jujutips.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karino.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laroofingmaterials.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.linkefin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcetropcs.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minnesotabass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motaz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motociclismo.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanostore.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orchards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourstand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peakology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.photocushions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.r-e-w.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reversecycleairconditioners.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ruralinternet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ryt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scrip.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoptechbfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.slot-cuan.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.soccertraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spiritanimal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stringskills.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tailormadesuits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecomedian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegoodsmart.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.totalsportik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tradesing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.urbanministryconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vafestivalofindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwinstarem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alcosto.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bet4u.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildingsite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessservice.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbohydrate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cempakaslot3.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chanh.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daddyissuescarrd.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'displaydeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drurable.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstpagerank.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitsclimbing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genxo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacshoppers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infkation.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infobd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jujutips.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karino.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laroofingmaterials.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkefin.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manskin.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcetropcs.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minnesotabass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motaz.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motociclismo.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanostore.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orchards.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourstand.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peakology.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocushions.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r-e-w.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reversecycleairconditioners.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruralinternet.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ryt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrip.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoptechbfd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-cuan.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soccertraining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiritanimal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stringskills.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tailormadesuits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telbright.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecomedian.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegoodsmart.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalsportik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradesing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanministryconference.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vafestivalofindia.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwinstarem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f602f5f5f0000040300473045022100f21428305ad166d4d4fbd0cfb8fbe62727b02292aca50912bbbe2d75c26cf1e502205fc52825611249dff7ac9f95a2ae54842a18a20e12bc337b1a68a60ac3e4060400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f602f5f1b0000040300473045022100cfd6919e75593a4eea7273e9c39fb22cd9355486d2f2ed9acc614fb2c2eeaebe02202a1bcb5b7355d74482dc9c9fd41d91c5e69cfd54754774362156eb693daba1f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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