gafamilies.com

Issued by R3

About this certificate

This digital certificate with serial number 03:42:26:28:c8:4a:0b:73:6f:3b:01:89:50:40:b8:e9:17:bf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gafamilies.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:26:28:c8:4a:0b:73:6f:3b:01:89:50:40:b8:e9:17:bf
Serial Number (int): 283846216430125195367967992942506323548095
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:2a:f4:fd:21:70:db:a4:be:7e:9e:76:72:1f:5d:cf:1e:a7:9d:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:d0:28:0f:91:46:30:dd:fd:02:58:c5:05:0a:ed:a8:95:14:96:c1
Fingerprint (sha256): 69:13:3b:77:26:23:6c:5b:c1:6a:04:08:e5:2c:71:b8:d0:bb:d3:8e:a1:fd:80:11:18:3c:01:30:48:bd:03:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gafamilies.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gafamilies.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.9rz.me
*.adblokultimate.net
*.alamedasresearch.com
*.alihsanusedcars.com
*.altraruning.com
*.apkraja.com
*.arpelandvancleef.com
*.auburninsulationusa.com
*.azucares.com
*.bellesahouse.co
*.bruandet.com
*.by-ajy.com
*.checkoutcmd.com
*.christma.com
*.ckhbcfoxir.com
*.coindesk.cm
*.collagequilteracademyteacher.com
*.comarchmanager.com
*.cumedcine.us
*.cytotec-paraiba-citotec.xyz
*.darkmaterials.com
*.delivering.online
*.descargatecnologica.com
*.dictionary.cam
*.expainpaper.com
*.extremecleaningservices.com
*.first-capital.online
*.g9v.uk
*.gafamilies.com
*.gamehackr.com
*.garenaslot.info
*.goltown.com
*.greenwaymazada.com
*.haverickmeatstoyou.com.au
*.hawke.cm
*.hubviews.com
*.indeedjobs.org
*.juliarocco.com
*.lilyluxuries.com
*.luelua.com
*.nordex.us
*.obrizo.com
*.oikosorganic.com
*.parentguidecordblood.com
*.plfence24.pl
*.riader.io
*.shoedepot.us
*.tat8g.shop
*.toolaccessories.com
*.workhorsestaff.com.au
9rz.me
adblokultimate.net
alamedasresearch.com
alihsanusedcars.com
altraruning.com
apkraja.com
arpelandvancleef.com
auburninsulationusa.com
azucares.com
bellesahouse.co
bruandet.com
by-ajy.com
checkoutcmd.com
christma.com
ckhbcfoxir.com
coindesk.cm
collagequilteracademyteacher.com
comarchmanager.com
cumedcine.us
cytotec-paraiba-citotec.xyz
darkmaterials.com
delivering.online
descargatecnologica.com
dictionary.cam
expainpaper.com
extremecleaningservices.com
first-capital.online
g9v.uk
gafamilies.com
gamehackr.com
garenaslot.info
goltown.com
greenwaymazada.com
haverickmeatstoyou.com.au
hawke.cm
hubviews.com
indeedjobs.org
juliarocco.com
lilyluxuries.com
luelua.com
nordex.us
obrizo.com
oikosorganic.com
parentguidecordblood.com
plfence24.pl
riader.io
shoedepot.us
tat8g.shop
toolaccessories.com
workhorsestaff.com.au

Other certificates including the domain name gafamilies.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gafamilies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtrH/DqD6zbLlnXCkvYSS
iRCSVZibUiIVmYr6Hq+h/4vX9K3WXAOOFz+YE8+DRtztMsvMG3b4qZkGPwRcxjfq
QwEgvGo0ImweBHchjFpEtMX7cGG0u6uWHrel7WwjnWlU1cox8Hix2wX5akuol0aZ
QxcEXcHNSfcJKICIFDc2jeemn6GBB5v9RM4z4cZ2t+UHtkK4utok2ZMR8/jfG0zf
Ehb3n0M6/NUU777K+zues3802uqG/5PjL+/IS/izvTnqsXYNAlFhfiRbdkI0rrCF
Th2Lj6r5NoswA2IYVQHoamOpc2O9/3uoI/qDEO6uMiE9vRd6Mefhc1jfR4AOntJ9
m1PgymHBRKsDLS3Q8PfcarY0MauYO6WGCE01fHFaFYHDv5Iuerp/ZwDzO8Fpa2bu
uD/8RljUpp3qPDc00io27/tSYJN7F80bET6dmVOhwSVnc5kF46B56VeEnnTe3r3L
FsjhBULdkw1i0chtTj0/rfLUGHuGqm1cp8Kj75qs7gaAefEUifm2qb4oFqO7bqeo
LXvHvOMXH6I0jAv17GNyVLFmykuH1IGcdXo2UAqWKbwU+Wz9VI3BaLCJxozG01KA
sfFsK6hIi32JyPm64Uyq75Af1INTUSca1K+2vB0S/ZNhI+ese1OuMmoaKKrDF1B1
m7sNPCxyNPyR9a9jI+Q7mSECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283846216430125195367967992942506323548095
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 10:04:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 10:04:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gafamilies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 745331789202509537252064039634939180396874860013399088345714922181654585314226621446228603352173074881258447829339381088504306387426858782748517675457568742727700913570124373378565709270821108244314940307222504237908037110079530324533363798480529946255680640329527607109374139398407403072772984970265974431296468407177195775681058940400550814019790156843363780505266058214996804460625212846137687297871301458719738969452285051605562235397306378242243561830009069887156251833201602185292377955461887931978537840612066816979334921241381259255315220782226873665361649659882518868877428229726063651688946708514102045600255213602733175133274036026018774801808946225599195128931437732991317290942081870870029836882589274862540422374279242700412772715263604492927383536357147719483019328392612292214350746353945595114614370885786696370748918883599281820375366740576433327786069357593345904900184971791679462447561470555818260359496285519172022379597241979262138375033713618384522521213557600794284863221537440916873651226726979736030973532510612105836237075631703201410030772298643467901734697747235815764899631003611146794934596775530851465910302685893908174585419565319447821926356441994271696371327102909097374202251859066206747841239329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b2af4fd2170dba4be7e9e76721f5dcf1ea79d51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9rz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adblokultimate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alamedasresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alihsanusedcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altraruning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apkraja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arpelandvancleef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auburninsulationusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.azucares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bellesahouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bruandet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.by-ajy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.checkoutcmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ckhbcfoxir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coindesk.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collagequilteracademyteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comarchmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cumedcine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cytotec-paraiba-citotec.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darkmaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delivering.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.descargatecnologica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dictionary.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.expainpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extremecleaningservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.first-capital.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g9v.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gafamilies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamehackr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.garenaslot.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goltown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greenwaymazada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haverickmeatstoyou.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawke.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hubviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.indeedjobs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.juliarocco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lilyluxuries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luelua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oikosorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parentguidecordblood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plfence24.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.riader.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shoedepot.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tat8g.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toolaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.workhorsestaff.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9rz.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adblokultimate.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alamedasresearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alihsanusedcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altraruning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apkraja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arpelandvancleef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auburninsulationusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azucares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellesahouse.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bruandet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'by-ajy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkoutcmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckhbcfoxir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coindesk.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collagequilteracademyteacher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comarchmanager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumedcine.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cytotec-paraiba-citotec.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darkmaterials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivering.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'descargatecnologica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dictionary.cam'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expainpaper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremecleaningservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'first-capital.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g9v.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gafamilies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamehackr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garenaslot.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goltown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenwaymazada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haverickmeatstoyou.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawke.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubviews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indeedjobs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juliarocco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilyluxuries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luelua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obrizo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oikosorganic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentguidecordblood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plfence24.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riader.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoedepot.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tat8g.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toolaccessories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workhorsestaff.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be7408cd30000040300473045022021c92e051433ada0f88c9a50606abeab4d27ac96b10ac25dc9246cd7a115be5a0221008d5b7f6308b3bc55806dbb43f06805c2b26d5e384eca3981d0a7971112c15639007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018be7408d9600000403004630440220250929bec69aac7cba021a2aba8195f57538227ae16a1226c5139e24bfce41e6022076f7af4ce7c47c5d46e79bf5f938ffe38b779d82196966d7337430564dc29459
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0048054278e9d47b168b205705667c2b2b2df6df684b9f2542b5d89c1dabf1d319972b992f751dacfa6d45eb313828d4fc1f9107abae7daff189587c145f1eb370f4659911d89a44ecfefc21161c49fdf761e195a54c8ce8a21a720a5e37dbe1af72647079c6b95a4e2f7fb5b97b3c59d026210052c2c425a6f2b2410574a33cd306c4f612a09c515dca3b60fc19d8b5fa2581fc6d4e1090ce3e954056525ef02bab8191e0971efea0eb25850e9a2acccea46e0c233aee0efe198290d59dc3495cd2af1eaddedd818121f47db1e3072afa1fd32d4394104f052226ead149a303d72dd5d1236d04dac287aec5d577e11ebce31f477ece5c86cf40bb197a47b9e17c