ningfit.com

Issued by R3

About this certificate

This digital certificate with serial number 03:31:23:93:a3:9c:0e:6a:6a:f6:79:b1:87:81:61:a8:28:65 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ningfit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:23:93:a3:9c:0e:6a:6a:f6:79:b1:87:81:61:a8:28:65
Serial Number (int): 278057983340294221513629490416728486193253
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 82:a6:91:e8:f6:de:4d:81:5c:b8:fb:09:15:f7:36:d1:7b:f6:40:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:83:4d:48:08:2e:99:98:01:2b:1a:ef:2e:7e:40:95:33:f2:46:7b
Fingerprint (sha256): 6b:6e:05:e9:af:25:18:f1:ee:ec:7f:1a:c1:50:f6:12:56:8b:29:57:0b:c6:0f:ac:b6:e8:87:5a:44:37:44:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ningfit.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ningfit.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.118.adult
*.18indo.com
*.abdulhadihairan.com
*.abiterrion.com
*.afkarenapc.com
*.antss016.com
*.artichokedairy.com
*.blackgirlsaremagic.com
*.bleedingheartlandrollerderby.com
*.blueridgedigital.net
*.bmstores.co
*.chlamjam.com
*.clubambiance.net
*.das-moskau.com
*.desireewestxxx.com
*.dothanhentertainment.com
*.dynamiteglove.org
*.e9e676a3a56db74f.xyz
*.elevatedradiofm.com
*.fanpage.tv
*.fantasyfiction.com
*.fine-digest-to-discover-today.info
*.gofishdating.com
*.gugeedata.com
*.hawkifybooks.com
*.jesustattoos.com
*.kanbawu.com
*.kanchuumimai.com
*.kcqpon.com
*.khoobqoxrxid.com
*.lexoakshoa.com
*.liztum.com
*.market55.net
*.methodistmychart.org
*.mfshowmen.com
*.ningfit.com
*.nippon-smartpay.com
*.nordquistsign.com
*.nydollsclub.com
*.panierturf.com
*.pobedilovo.com
*.robloxhack.co
*.shrovetuesday.org
*.spyuser.com
*.sygnas.tv
*.t-dora.com
*.taxminimisation.com.au
*.terranatio.com
*.thekitchentablepatriots.org
*.zjz190.top
118.adult
18indo.com
abdulhadihairan.com
abiterrion.com
afkarenapc.com
antss016.com
artichokedairy.com
blackgirlsaremagic.com
bleedingheartlandrollerderby.com
blueridgedigital.net
bmstores.co
chlamjam.com
clubambiance.net
das-moskau.com
desireewestxxx.com
dothanhentertainment.com
dynamiteglove.org
e9e676a3a56db74f.xyz
elevatedradiofm.com
fanpage.tv
fantasyfiction.com
fine-digest-to-discover-today.info
gofishdating.com
gugeedata.com
hawkifybooks.com
jesustattoos.com
kanbawu.com
kanchuumimai.com
kcqpon.com
khoobqoxrxid.com
lexoakshoa.com
liztum.com
market55.net
methodistmychart.org
mfshowmen.com
ningfit.com
nippon-smartpay.com
nordquistsign.com
nydollsclub.com
panierturf.com
pobedilovo.com
robloxhack.co
shrovetuesday.org
spyuser.com
sygnas.tv
t-dora.com
taxminimisation.com.au
terranatio.com
thekitchentablepatriots.org
zjz190.top

Other certificates including the domain name ningfit.com

(limited to 100 certificates)
ningfit.com
ningfit.com
ningfit.com
ningfit.com
ningfit.com
ningfit.com

Certificate

The complete raw certificate details for ningfit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278057983340294221513629490416728486193253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-16 21:46:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 21:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ningfit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667262581474854066405675893169817246574898463451980396951665785426029091478287919358274874735436160629406017922432118561090838417164510959672114216794221889231275748887678679735652168855835467058716528957887518699247996232636006083472679902909034106665178365342170662988503682651793820609475327202717569621275714194880887498139501091913587250203945425743904289213942503321075644937952739344196549370429600569477853648504434131440431421636816638177933825099184009765008382722069776029553051028451632463369534163345032279395796083430722587416232855102165952147823153054316307402329668579737587735260283394541201163433245668545963005662712488409196506516756757345952218518618816754740457392629148090363508514724623104548745028817510695129282055187147263430275911636240969832608745126159850206446727586075115752600374689872801834148558111950559182461431824545095528223514375940731544096303368081998897962283900484169077948975383084814333173082367609179160721956736535033265525593468750611661436076230834380710604138308153569099538439212050906810504059438549400876790489154423108120185789678309974141386186547130777822632973900218912539265806189210587636309365367679508204766320494097744208172721674928592757333188468776620686359718638289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82a691e8f6de4d815cb8fb0915f736d17bf64086
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1882 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.118.adult'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.18indo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abdulhadihairan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abiterrion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afkarenapc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antss016.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.artichokedairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackgirlsaremagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bleedingheartlandrollerderby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blueridgedigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bmstores.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chlamjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clubambiance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.das-moskau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.desireewestxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dothanhentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dynamiteglove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e9e676a3a56db74f.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elevatedradiofm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fanpage.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fantasyfiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fine-digest-to-discover-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gofishdating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gugeedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hawkifybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jesustattoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanbawu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kanchuumimai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kcqpon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khoobqoxrxid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexoakshoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liztum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.market55.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.methodistmychart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfshowmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ningfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nippon-smartpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordquistsign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nydollsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.panierturf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pobedilovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.robloxhack.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shrovetuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spyuser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sygnas.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t-dora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taxminimisation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terranatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thekitchentablepatriots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zjz190.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '118.adult'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '18indo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abdulhadihairan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abiterrion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afkarenapc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antss016.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artichokedairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackgirlsaremagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bleedingheartlandrollerderby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueridgedigital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmstores.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chlamjam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubambiance.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'das-moskau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desireewestxxx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dothanhentertainment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamiteglove.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e9e676a3a56db74f.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevatedradiofm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanpage.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasyfiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fine-digest-to-discover-today.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gofishdating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gugeedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkifybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jesustattoos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanbawu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanchuumimai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcqpon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khoobqoxrxid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexoakshoa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liztum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'market55.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'methodistmychart.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfshowmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ningfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nippon-smartpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordquistsign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nydollsclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panierturf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pobedilovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robloxhack.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shrovetuesday.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spyuser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygnas.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-dora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taxminimisation.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terranatio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekitchentablepatriots.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zjz190.top'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e497185480000040300463044022040a09422da03831f9d9c0509dea2ca388a94a8979c0ad52fd2c553198b0bf4f3022056716b249c843d03beaa0b6d402514bbc2c8477b4853c8bb7b1357ebd483e2c100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e497184f70000040300473045022053abe05dce9718e5099f101b16b2860e64d10c5c5af2b37f0f5ebd1cbd7ccbb8022100aafd231e230e5015a4134c8a22660ea861d376bca3051018a76be2a784be0638
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b825d759aedfc8f760bf4b344e2d8fffc787fcdb4029b2842856703cce0ac0e42c4b2d904b0cc182bf8517fe8cdf7a136482d20d64c0c3cf4f6532e07ba05f379ebd5ec57ddf04c34fe43aa526841b44757a0de321ef76aeb4ea35c01a343a552306603ad89a10d707d5190a326c5514003bdb288bea2e4f25e031ad9b0869c91fffc46afbdbd6a59d3696be5a14982cbdf8f9ed25fa657c283bc9b3c7d14bb1e0bb3da30723e82ac12e7f4b17de747aefe0b0ffd945d92246db027b1a113d5494d1789f668a8b9ba7dcdcc29d65bb286084339fc2023b743a90621bed84e722dba48663f954cc482d95c6faaa450a31d0a938e06f2f829f0a3270c5f7b473c3