universalnaaticcl.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:dd:89:e2:0e:4f:66:2e:fd:66:5d:eb:59:31:18:be:25:8a was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=universalnaaticcl.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:89:e2:0e:4f:66:2e:fd:66:5d:eb:59:31:18:be:25:8a
Serial Number (int): 336722538869565086278896159947022097327498
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:0c:01:68:3e:3b:8a:7f:c0:2f:7b:63:0f:4f:88:d1:6d:b8:f0:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:03:b8:6e:70:10:ca:e8:05:19:30:7d:89:15:12:dc:63:bc:52:d5
Fingerprint (sha256): 6f:e5:a7:a3:1c:b7:fe:24:11:93:c1:f3:2a:50:4d:46:89:62:36:d7:66:b1:00:e5:94:a7:32:22:bc:21:f0:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate universalnaaticcl.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for universalnaaticcl.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.2020109.icu
*.addas.com
*.adtalentos.com
*.apartmentguy.com
*.appone.co
*.atroventhfa.com
*.b2s-share.com
*.bayfullcrystal.com
*.bresnyder.com
*.cbssoapnet.com
*.channelprograms.com
*.chickendelighthillsdale.com
*.cleverbabies.com.au
*.computeractive.com
*.computermarket.com.au
*.conveyancingsolicitorsbrisbane.com.au
*.dainatoken.com
*.exampple.org
*.gametemplates.org
*.geylangclaypot.com
*.imini.in
*.jkw2znyku1.top
*.justpananball.com
*.jwpepper.cm
*.kaniz.in
*.legalquotes.com.au
*.lorrainesmagichilllourdas.com
*.marggi.com
*.masterpods.ca
*.mistressveravirgo.com
*.mybritishbicycle.me
*.nationalhouseholdtravelsurvey.com
*.naughtyamerlca.com
*.nnmodels.site
*.phonesystemsbrisbane.com.au
*.qatarrail.com
*.quitsugar.com.au
*.regeddit.com
*.restraintbondage.com
*.rolandmusik.com
*.sternos.org
*.surfcharters.com.au
*.tshirtshappy.com
*.universalnaaticcl.com.au
*.unrealops.com
*.usinq.com
*.vaunt.com.au
*.windowsandsiding.com
*.wz4.in
*.zhanbei.com
2020109.icu
addas.com
adtalentos.com
apartmentguy.com
appone.co
atroventhfa.com
b2s-share.com
bayfullcrystal.com
bresnyder.com
cbssoapnet.com
channelprograms.com
chickendelighthillsdale.com
cleverbabies.com.au
computeractive.com
computermarket.com.au
conveyancingsolicitorsbrisbane.com.au
dainatoken.com
exampple.org
gametemplates.org
geylangclaypot.com
imini.in
jkw2znyku1.top
justpananball.com
jwpepper.cm
kaniz.in
legalquotes.com.au
lorrainesmagichilllourdas.com
marggi.com
masterpods.ca
mistressveravirgo.com
mybritishbicycle.me
nationalhouseholdtravelsurvey.com
naughtyamerlca.com
nnmodels.site
phonesystemsbrisbane.com.au
qatarrail.com
quitsugar.com.au
regeddit.com
restraintbondage.com
rolandmusik.com
sternos.org
surfcharters.com.au
tshirtshappy.com
universalnaaticcl.com.au
unrealops.com
usinq.com
vaunt.com.au
windowsandsiding.com
wz4.in
zhanbei.com

Other certificates including the domain name universalnaaticcl.com.au

(limited to 100 certificates)
enlightthephotobook.com
closefriendslisa.com.br
universalnaaticcl.com.au
black-in-asia.com
universalnaaticcl.com.au
universalnaaticcl.com.au
universalnaaticcl.com.au
universalnaaticcl.com.au
universalnaaticcl.com.au
universalnaaticcl.com.au
universalnaaticcl.com.au
closefriendslisa.com.br
black-in-asia.com
lomegle.com

Certificate

The complete raw certificate details for universalnaaticcl.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336722538869565086278896159947022097327498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 15:21:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 15:21:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'universalnaaticcl.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796083389584329439943374491020383174255701166770924678000726308973375377123041776207925305052714692737599383359070910893796510863449847582665694469137881552717274092333561066644980474125743234141129054880749876775099264090182752561498681349514332998512133037811410173883875223734640772440636286409574427331325637131987866986066487998366732664996685649155425741979394128706116666942612319670718647961974591607549870049772154953260299904201248180200850887234474948780647261674866491766907275286799476513731812239969809225569956307347147108401737369364411360028521679919540790184408146973794846353543128823023562625400746148069576264626380508851982621953389525539114539596158658074007220244654368418941488339101668016725558320841535540633208537247757099422786467133967930294484086381268881698593339986810988740230389658150967014115661666798748451972574656287249282456576914966223682157664262555326733072053248348169713441400659002434525050861781137091058006577926931481366701351927551850770897472528031361278452508403886203638123691280585815406177668306313852028361120338359307837012341249731764136915595698567801316824637175860221377632981589293345865751207221149791222523684432167037791830378516620032201821203272864474343576696180801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc0c01683e3b8a7fc02f7b630f4f88d16db8f0f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1924 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2020109.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.addas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adtalentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apartmentguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.appone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atroventhfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b2s-share.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bayfullcrystal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bresnyder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbssoapnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.channelprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chickendelighthillsdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cleverbabies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computeractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.computermarket.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.conveyancingsolicitorsbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dainatoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.exampple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gametemplates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geylangclaypot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imini.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jkw2znyku1.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justpananball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwpepper.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaniz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legalquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lorrainesmagichilllourdas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marggi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.masterpods.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mistressveravirgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybritishbicycle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nationalhouseholdtravelsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naughtyamerlca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nnmodels.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phonesystemsbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qatarrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quitsugar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regeddit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.restraintbondage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rolandmusik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sternos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.surfcharters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tshirtshappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalnaaticcl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unrealops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usinq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vaunt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windowsandsiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wz4.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zhanbei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2020109.icu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adtalentos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apartmentguy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appone.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atroventhfa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2s-share.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayfullcrystal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bresnyder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbssoapnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channelprograms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chickendelighthillsdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleverbabies.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computeractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computermarket.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conveyancingsolicitorsbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dainatoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exampple.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gametemplates.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geylangclaypot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imini.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jkw2znyku1.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justpananball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwpepper.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaniz.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalquotes.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorrainesmagichilllourdas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marggi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterpods.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mistressveravirgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybritishbicycle.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalhouseholdtravelsurvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naughtyamerlca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nnmodels.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonesystemsbrisbane.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qatarrail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quitsugar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regeddit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'restraintbondage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rolandmusik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sternos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfcharters.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tshirtshappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalnaaticcl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unrealops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usinq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaunt.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windowsandsiding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wz4.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhanbei.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d0ded3ded0000040300463044022032bbf1caabda48f08a9fada8d31976302a04b95e47a4fd40d6b79d8a97814b1302206d7377ec67e8bc2d6cc80a9f7a24d535f767bd2d4f38fb69eb0b97d9f69adc2f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d0ded41d400000403004730450220080bab36a6a95e5b8d6e49b7aa35fee4b8651e1d51ce6ecc32c8959cf44bb0fe022100f770240a441754ed805fdffd1b3fa7025b0ca04aa6355e0adc1f0ae299fd3309
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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