abekah.com

Issued by R3

About this certificate

This digital certificate with serial number 03:60:78:60:7f:e1:25:ca:4a:2e:b5:9f:ef:dc:77:8b:7f:03 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=abekah.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:78:60:7f:e1:25:ca:4a:2e:b5:9f:ef:dc:77:8b:7f:03
Serial Number (int): 294163973433387493408723785720930115485443
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:a5:c8:b2:1e:93:d3:ed:57:9f:13:c0:fe:18:41:f8:43:fa:a9:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1b:97:e7:3d:b9:f1:3c:68:a1:d8:be:9e:02:c1:cc:86:28:ed:91:60
Fingerprint (sha256): 5e:da:f3:4b:7d:dc:55:25:94:2a:85:e1:3a:2a:b2:60:ce:4c:f0:20:f0:20:f2:a4:2e:47:b5:16:a2:73:b3:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate abekah.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abekah.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abekah.com
*.ablixt.us
*.aulasdeviolino.com
*.banknegara.com
*.bioskopkeren.asia
*.bit-torrent.bz
*.climatdata.org
*.cmfglifeinsurance.com
*.cridetkrama.com
*.cukiernia-stachurski.pl
*.cwryjpfrdr.com
*.dineroseguro.com
*.dyrut.org
*.eagleaudibonclubflorida.org
*.edscontractors.com
*.financebrokers.com
*.first-class.me
*.girls69x.com
*.gopro.asia
*.gposaakkge.com
*.gunbloodcheats.info
*.id6f2xbjn14nv.com
*.ifjqzzu.cn
*.inetresource.net
*.joangie.me
*.michaelsrestaurant.com
*.new-tv.co
*.parletre.org
*.poolsafetysupplies.com
*.puleointernational.com
*.purena.com
*.rbrezzy.org
*.renisannce.com
*.reple.co
*.rockartranchaz.com
*.sexworkers.online
*.siruisxm.com
*.solarpanelforsale.com
*.startribuine.com
*.unexpectedprices.com
*.uppabernaliz.ga
*.vetransfer.com
*.vitalscource.com
*.walmartguft.com
*.wwwaeppaperless.com
*.wwwwalmartmoneycard.com
*.xivj.com
*.xn--wgbi2b.com
*.xn--whrunsrechner-bfb.com
*.zelispayments.co
abekah.com
ablixt.us
aulasdeviolino.com
banknegara.com
bioskopkeren.asia
bit-torrent.bz
climatdata.org
cmfglifeinsurance.com
cridetkrama.com
cukiernia-stachurski.pl
cwryjpfrdr.com
dineroseguro.com
dyrut.org
eagleaudibonclubflorida.org
edscontractors.com
financebrokers.com
first-class.me
girls69x.com
gopro.asia
gposaakkge.com
gunbloodcheats.info
id6f2xbjn14nv.com
ifjqzzu.cn
inetresource.net
joangie.me
michaelsrestaurant.com
new-tv.co
parletre.org
poolsafetysupplies.com
puleointernational.com
purena.com
rbrezzy.org
renisannce.com
reple.co
rockartranchaz.com
sexworkers.online
siruisxm.com
solarpanelforsale.com
startribuine.com
unexpectedprices.com
uppabernaliz.ga
vetransfer.com
vitalscource.com
walmartguft.com
wwwaeppaperless.com
wwwwalmartmoneycard.com
xivj.com
xn--wgbi2b.com
xn--whrunsrechner-bfb.com
zelispayments.co

Other certificates including the domain name abekah.com

(limited to 100 certificates)
abekah.com
abekah.com
stopem.cz
medicinainterna.com
*.abekah.com
abekah.com
campislandlake.com
abekah.com
ewingcpa.com
grestwestlife.com
yalexfs.cn
abekah.com
solarmoviex.com

Certificate

The complete raw certificate details for abekah.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294163973433387493408723785720930115485443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 11:41:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 11:41:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abekah.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854884656209727378818672782829136635624072230567022367506170787453399340273394920851734022139503586786497751040509901994664589702220732600682059192045610213339728458504044562603266671735669418503730506561075771976760986388396771304211145013552602392472189064435978455197929231395430411019051557166393214155700655868982911528149534385483137832146976680224396523645796354005907954573010497072299557734911817681592026882491149930266400584047251424113738900129563782658094553611075246841628518966384760451489762522288947660841629770565718762113619076514850544844449255348122242350852497818317729019824874650151365042873179487147107923776534331899883044628520328560669958341558503172034648521727553434430364532871792454623998081546125426992455748347441404620536308968430129079677794475961416613286240411402762079590658526035541020980048403126870840519011572548286394056995311100428500185131478156495502410440011846066130190814918909653211061878882732649147071479778681467388200481213793434862677041334982553078228471789978923101962105198220721130040629826933431115713794465134491117813501171970101828561828006105509921366267726661831305108838850262231325016421159905639890489459222756694932958080625594341767593578120900592454835316969869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4a5c8b21e93d3ed579f13c0fe1841f843faa927
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1860 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abekah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ablixt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aulasdeviolino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banknegara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bioskopkeren.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bit-torrent.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climatdata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cmfglifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cridetkrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cukiernia-stachurski.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwryjpfrdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dineroseguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyrut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eagleaudibonclubflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edscontractors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.financebrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.first-class.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.girls69x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gopro.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gposaakkge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gunbloodcheats.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.id6f2xbjn14nv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifjqzzu.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inetresource.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joangie.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.michaelsrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.new-tv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parletre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poolsafetysupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.puleointernational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbrezzy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renisannce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reple.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rockartranchaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexworkers.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siruisxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.solarpanelforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.startribuine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unexpectedprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uppabernaliz.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vetransfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vitalscource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.walmartguft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwaeppaperless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwwalmartmoneycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xivj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wgbi2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--whrunsrechner-bfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zelispayments.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abekah.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ablixt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aulasdeviolino.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banknegara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bioskopkeren.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bit-torrent.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climatdata.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmfglifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cridetkrama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cukiernia-stachurski.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwryjpfrdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dineroseguro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyrut.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eagleaudibonclubflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edscontractors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financebrokers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'first-class.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'girls69x.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gopro.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gposaakkge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gunbloodcheats.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id6f2xbjn14nv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifjqzzu.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inetresource.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joangie.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'michaelsrestaurant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new-tv.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parletre.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolsafetysupplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puleointernational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purena.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbrezzy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renisannce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reple.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockartranchaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexworkers.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siruisxm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarpanelforsale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'startribuine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unexpectedprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uppabernaliz.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetransfer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalscource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walmartguft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwaeppaperless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwalmartmoneycard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xivj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wgbi2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--whrunsrechner-bfb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zelispayments.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3657395d0000040300483046022100f6f5c1357b950079f825f93d5e54b8fd085a29a7814177d146af72606bd5f626022100df2beb39930cc3eca2e708e7c5880bdc57bded8dc212ae470278b3b5acd6c58700770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d365739ae000004030048304602210080fe46420ece907c53623a955d874818577bdc648b55f8f3c9d3ba2a3b500621022100da44198dbc9857253d738efe45e4eb8fefa44d798c51412ad2d405a6ef3990b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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