light-city.club

Issued by R3

About this certificate

This digital certificate with serial number 04:9e:fd:71:63:fd:e3:f4:a8:da:43:3a:25:53:9e:3d:4d:6d was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=light-city.club

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9e:fd:71:63:fd:e3:f4:a8:da:43:3a:25:53:9e:3d:4d:6d
Serial Number (int): 402550641141101686715212957354309141220717
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:49:01:1f:82:48:aa:b6:9d:c2:f6:bb:f1:fa:12:d4:83:72:68:84
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:66:cf:cf:f2:fd:4d:6a:70:7d:59:a4:29:a8:1d:7a:2d:bf:a8:9a
Fingerprint (sha256): 5d:97:2d:eb:1b:d8:0c:39:76:dc:77:f1:8b:05:af:90:4f:26:c2:51:d5:35:f7:f4:0f:87:5d:90:89:66:05:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate light-city.club

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for light-city.club

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.adjets.com
*.alharmainassociates.com
*.apple4theteacher.com
*.ashlefurniture.com
*.ashoksom.com
*.atikaboutique.com
*.aurakingdom.online
*.baliforkids.com
*.bay247.pro
*.bbclearnenglish.com
*.beabyte.com
*.brownsautosales.com
*.cexioinvestment.com
*.churcill.com
*.csmonitor.co
*.dh4567.com
*.dmv-writen-test.com
*.dubdiezdesign.ru
*.filmazone.co
*.flightadar24.com
*.forbiddenarea.sbs
*.gudangnomor.co
*.herogfx.com
*.homedecor.au
*.hopelink.com
*.indianriverkeeper.org
*.iwdbb.co
*.janiejack.com
*.jizzmobi.com
*.leszno.de
*.light-city.club
*.longclipstube.com
*.mackarbag.com
*.molerski.com
*.myobsaidwhat.com
*.myoldfords.com
*.myziphius.com
*.oc0-video.xyz
*.olenademydenko.xyz
*.sapporo-black-white.com
*.selu8888.xyz
*.si4p666.top
*.sixgod.shop
*.studentsreview.me
*.the-fanboy-perspective.com
*.tiendademascotas.org
*.tonyhoangle.com
*.wwwrxmedicareplans.com
*.xansph.info
*.yosoyelrealoviedo.com
adjets.com
alharmainassociates.com
apple4theteacher.com
ashlefurniture.com
ashoksom.com
atikaboutique.com
aurakingdom.online
baliforkids.com
bay247.pro
bbclearnenglish.com
beabyte.com
brownsautosales.com
cexioinvestment.com
churcill.com
csmonitor.co
dh4567.com
dmv-writen-test.com
dubdiezdesign.ru
filmazone.co
flightadar24.com
forbiddenarea.sbs
gudangnomor.co
herogfx.com
homedecor.au
hopelink.com
indianriverkeeper.org
iwdbb.co
janiejack.com
jizzmobi.com
leszno.de
light-city.club
longclipstube.com
mackarbag.com
molerski.com
myobsaidwhat.com
myoldfords.com
myziphius.com
oc0-video.xyz
olenademydenko.xyz
sapporo-black-white.com
selu8888.xyz
si4p666.top
sixgod.shop
studentsreview.me
the-fanboy-perspective.com
tiendademascotas.org
tonyhoangle.com
wwwrxmedicareplans.com
xansph.info
yosoyelrealoviedo.com

Other certificates including the domain name light-city.club

(limited to 100 certificates)
getgrounded.net
light-city.club
light-city.club
light-city.club
light-city.club
tonyhoangle.com
light-city.club
getgrounded.net
sycnrectification.com
light-city.club
light-city.club
light-city.club

Certificate

The complete raw certificate details for light-city.club in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402550641141101686715212957354309141220717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 18:05:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 18:05:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'light-city.club'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702643809175899134732958535140179443552256491100634335122310321978514418022861603646717938656100169627519824689604283361589970329278665945641886617251825403681843903537100989735552390105743083261638518844289601919454812120527679627943006614222795236343257129415514027214256272785468700693455418737372605133449395827626474615844061751756820667913181528493050117660863404417764869512831257297714578394675083670608002899618842121703335971343802419574174372325996493775389691379724637994508339618256921079418159929702809032262450570881697414939093222648857967156793893835032486329204521733612863621749871461430581107276468220462367091000370417941591962120085786842022089443269005709068474378172620701347191624591931771972400612998070291145094500361248295693886604646407708654591941058522345581522459862085370371970597519685050755207538462997927310315765533599532736849068904076019530748854604479270517485759850960427877055008926561300612791774067377033031877314988956063836070103303923264288329738736189381003122418865600388925010087399591081190497481027828890303558748840519257696889752360280054599653006002578097979910879690626595714187380715258647013032954436230568045995622581213771075839745203645295932294448576036730108495990636993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae49011f8248aab69dc2f6bbf1fa12d483726884
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1818 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alharmainassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apple4theteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashlefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashoksom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atikaboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aurakingdom.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baliforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bay247.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bbclearnenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beabyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brownsautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cexioinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.churcill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csmonitor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dh4567.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dmv-writen-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dubdiezdesign.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.filmazone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightadar24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.forbiddenarea.sbs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gudangnomor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herogfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homedecor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hopelink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indianriverkeeper.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwdbb.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.janiejack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jizzmobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leszno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.light-city.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longclipstube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mackarbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.molerski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myobsaidwhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myoldfords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myziphius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oc0-video.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olenademydenko.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sapporo-black-white.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selu8888.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.si4p666.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sixgod.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studentsreview.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.the-fanboy-perspective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiendademascotas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tonyhoangle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwrxmedicareplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xansph.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yosoyelrealoviedo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adjets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alharmainassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple4theteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlefurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashoksom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atikaboutique.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurakingdom.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baliforkids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bay247.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbclearnenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beabyte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsautosales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cexioinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'churcill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmonitor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dh4567.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmv-writen-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubdiezdesign.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmazone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightadar24.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forbiddenarea.sbs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gudangnomor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herogfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedecor.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopelink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indianriverkeeper.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwdbb.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janiejack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jizzmobi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leszno.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'light-city.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longclipstube.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mackarbag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molerski.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myobsaidwhat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myoldfords.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myziphius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oc0-video.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olenademydenko.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapporo-black-white.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selu8888.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'si4p666.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sixgod.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentsreview.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-fanboy-perspective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiendademascotas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonyhoangle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwrxmedicareplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xansph.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yosoyelrealoviedo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e1001cf58000004030047304502202d9eb2f62a5440384e706fa046d00984883ce7aedc36173ce041b6e452feedec02210093e35953dd9b779ee6c579297223b8409731bd7661798658cce28314393a421f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e1001cf810000040300473045022100a8b59a699ead09400fa220bb0828b7897d569d0d5b475fafdaa489ea8617a1c702205f857d20f9c6305a70feb7f58b86f289cb27c898626059c476da30d09688e05f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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