cukstudio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0f:f7:e8:c3:1d:1e:86:35:53:6e:95:6e:ab:76:23:af:ba was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cukstudio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0f:f7:e8:c3:1d:1e:86:35:53:6e:95:6e:ab:76:23:af:ba
Serial Number (int): 266770621184301807415607715957417554718650
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:ad:51:ff:9c:b7:93:7a:91:17:f7:6e:cb:5f:51:c6:67:8e:6c:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:fc:8f:f9:13:ec:a6:64:11:d2:c9:85:06:d7:14:52:eb:a4:4b:c1
Fingerprint (sha256): 60:42:c6:36:42:4c:ea:76:c2:e4:65:c5:e1:31:bb:07:43:5d:43:82:92:06:a5:0c:81:57:2a:1f:df:13:30:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cukstudio.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cukstudio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.activatemyircs.com
*.agennasalampung.com
*.baronvonbalsiger.com
*.borsadenemehesabi.com
*.bumbumnanuca.fitness
*.c-vinenewsnetwork.com
*.cenbachs.com
*.clilabim.com
*.consumercellulsr.com
*.cukstudio.com
*.d5ys.net
*.daniliph.com
*.deecatie.com
*.deproeld.com
*.developingpersonalgrowth.com
*.dorsifia.com
*.druproto.com
*.elevatonscu.com
*.fastbux.cf
*.fiftyshadesfreeds.com
*.flightradar23.com
*.florplaner.com
*.freshringtone.com
*.fristcommunity.com
*.frivage.com
*.gzlzxd.com
*.heyblossom.com
*.karachivideo.com
*.keyprogramminginstructions.com
*.leaderfitness.com
*.listerse.com
*.markzuckerberg.biz
*.mepmindz.com
*.mobicarz.com
*.muchiomega.com
*.myboyfriend.net
*.mysongspk.com
*.nontondewasa.cc
*.pwavs.com
*.russiaaddo.com
*.salaviet.com
*.salon844.com
*.skidrogames.net
*.superdietformula.com
*.theexchangenj.com
*.unlocknetwork.com
*.viurl.com
*.wenxuecitu.com
*.wiredpod.com
*.womensshelterofhope.com
activatemyircs.com
agennasalampung.com
baronvonbalsiger.com
borsadenemehesabi.com
bumbumnanuca.fitness
c-vinenewsnetwork.com
cenbachs.com
clilabim.com
consumercellulsr.com
cukstudio.com
d5ys.net
daniliph.com
deecatie.com
deproeld.com
developingpersonalgrowth.com
dorsifia.com
druproto.com
elevatonscu.com
fastbux.cf
fiftyshadesfreeds.com
flightradar23.com
florplaner.com
freshringtone.com
fristcommunity.com
frivage.com
gzlzxd.com
heyblossom.com
karachivideo.com
keyprogramminginstructions.com
leaderfitness.com
listerse.com
markzuckerberg.biz
mepmindz.com
mobicarz.com
muchiomega.com
myboyfriend.net
mysongspk.com
nontondewasa.cc
pwavs.com
russiaaddo.com
salaviet.com
salon844.com
skidrogames.net
superdietformula.com
theexchangenj.com
unlocknetwork.com
viurl.com
wenxuecitu.com
wiredpod.com
womensshelterofhope.com

Other certificates including the domain name cukstudio.com

(limited to 100 certificates)
fanshare.cukstudio.com
cukstudio.com
cukstudio.com
yuristories.me
pandamoviez.com
demo1.cukstudio.com
cukstudio.com
demo1.cukstudio.com
fanshare.cukstudio.com
cukstudio.com
cukstudio.com
cukstudio.com
cukstudio.com
cukstudio.com
cukstudio.com
turnofffox.com
pandamoviez.cukstudio.com
yuristories.me
yuristories.me
pandamoviez.cukstudio.com
cukstudio.com
cukstudio.com
cukstudio.com
cukstudio.com
demo1.cukstudio.com

Certificate

The complete raw certificate details for cukstudio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266770621184301807415607715957417554718650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 19:16:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 19:16:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cukstudio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716735594786349624647257826760080400755332446655058157472304629983390923191367876271908960616370264385208118680956820110751119869985411206786361306598885885664593119369181024236845881237994461207678306177362183321184179955741254160636245286443350856343851654429241039902557347762523108472815787425231139644245705991172365592639441063133783599069618757199157472030236390299810567066490277061177843299053186481582758757406090502547061718584778941518767083856436371213274431833246875782831343321142944716567600038696029631542573685163742792739910628895403237869719995334414729132334518612052069111176434735303179517707551283628479051445972322815435973223694022784181526904702943007475993473036396859697985228186550513053871270772767577270404844932128410758021464759564925876005475911756624514817413852253605362067911924735235864471631426654232271160717253096307536966811599041050834444509771999585522619911343883709574589632690727904466849397134364046870686172078263461108159062507422047138804236651808586477615900385893107718262736341247543990966105464997384660888462569670353388395452636652213511297688888337357707455576730943783415571078504147308422453239134970152544712374996264421204397449523062505548618048334173971060934011072149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24ad51ff9cb7937a9117f76ecb5f51c6678e6c37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1838 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.activatemyircs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agennasalampung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baronvonbalsiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.borsadenemehesabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bumbumnanuca.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-vinenewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cenbachs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clilabim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consumercellulsr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cukstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.d5ys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daniliph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deecatie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deproeld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developingpersonalgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dorsifia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.druproto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elevatonscu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fastbux.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiftyshadesfreeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flightradar23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.florplaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freshringtone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fristcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frivage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gzlzxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heyblossom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karachivideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.keyprogramminginstructions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leaderfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.listerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.markzuckerberg.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mepmindz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mobicarz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muchiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myboyfriend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysongspk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nontondewasa.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pwavs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.russiaaddo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salaviet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salon844.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skidrogames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superdietformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theexchangenj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unlocknetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wenxuecitu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wiredpod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.womensshelterofhope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activatemyircs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agennasalampung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baronvonbalsiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borsadenemehesabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bumbumnanuca.fitness'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-vinenewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cenbachs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clilabim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumercellulsr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cukstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd5ys.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daniliph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deecatie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deproeld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developingpersonalgrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dorsifia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druproto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevatonscu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastbux.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiftyshadesfreeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightradar23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florplaner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshringtone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fristcommunity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frivage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gzlzxd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heyblossom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karachivideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyprogramminginstructions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaderfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listerse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markzuckerberg.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mepmindz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobicarz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muchiomega.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myboyfriend.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysongspk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nontondewasa.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwavs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'russiaaddo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salaviet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salon844.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skidrogames.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superdietformula.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theexchangenj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unlocknetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viurl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wenxuecitu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiredpod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'womensshelterofhope.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3bb865e80000040300483046022100daea2ccaac3f492b01e68d677e2d464b5176d8ffa9fd5dc6d82dda347828a3b4022100e5be31ddbd3e19f3d0140e1ff3ff8207bcb4889a028697ac52098cc673f413e6007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3bb867bc0000040300473045022100f9e213e285c9afe7bf198b22c118ea6e82699ee18fae7318ed75a6e06e28c66102207cabfbc01dac852ce957b41d8a0b2248363994b860ccadfac1cab3ed55965671
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006afe6bba2b7ed9aa84f330be4529ed97a2020096f5d65a426bf05c533f883cdf4be127828ebd92e0c8a2ff462ec0ce0302174b9fc4f068b931d2a757d69241acb151c2140032caced8d7450331bee2523e000213aad9500ecd01dd95a7c8e4c986d7acf0fbf882fac92707da390fda4199aa830e01aaae1f632a776918354a490b9942e6935440cd60ea0469fa7a4862e472439098ee798d21f28a728ea393d4d2203d78f3b386cae4ecd6f4a41f83a1c7d2ae0777a7a14d5d8e07bae6c1c1a74b34bcf49dbb27f34ff9dd8bad93a8862cd5ef7616f238e0fbfb8c3f50b7560391408394212c7ea56536ff4b3b0f2864ced2d5e372b78045f3c8123e049b768e