mx-touch.net

Issued by R3

About this certificate

This digital certificate with serial number 04:de:68:94:9b:66:b7:77:29:28:20:f9:09:3a:58:4a:ed:55 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mx-touch.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:de:68:94:9b:66:b7:77:29:28:20:f9:09:3a:58:4a:ed:55
Serial Number (int): 424130840506897560836426769243551373651285
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: af:ce:28:81:2b:24:38:41:61:c0:03:82:91:1a:d0:9b:db:dc:66:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 50:fb:82:cb:a5:0c:5a:91:8d:7a:c3:fa:09:9c:f5:37:61:96:80:13
Fingerprint (sha256): 72:66:60:70:1c:92:88:48:1e:0b:c4:db:24:82:b7:68:11:4a:44:01:f4:6a:c1:0d:13:fc:20:f0:c9:52:5c:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mx-touch.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx-touch.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.365savip.net
*.72jkiuhnhsjqasfg.com
*.akulagtm.com
*.altitudeutilityoutfitters.com
*.antebellumarabians.com
*.ariclareandco.com
*.batterioegypt.com
*.birmining.com
*.chicanmagazine.com
*.cryptobaggiver.com
*.delangeltree.com
*.discusionjuridica.com
*.edbfeature3.com
*.educationlivebd.com
*.fridayoutfit.com
*.gagnerdesbitcoins.com
*.gedpre.com
*.glooser.com
*.groupeyannick.com
*.habitationsviagere.com
*.heytherefromhere.com
*.huemaker.com
*.itissam.com
*.iwantmypla.net
*.javhotvietsub.com
*.klarenfeldgermanshepherds.com
*.kunyuschool.com
*.londynappliancedeals.net
*.lyh91.com
*.magnatxt.com
*.marsilyabetgiris.com
*.mentalstateclothing.com
*.mwqusa.com
*.mx-touch.net
*.palmerindustrialsupplies.net
*.pompe.us
*.promoregio.com
*.pushkat.com
*.siteape.net
*.socialjuiced.com
*.sofally.com
*.sokitsdigitais.com
*.somavintagestore.com
*.streamentier.com
*.team-rheinlandpfalz.com
*.thestachecycler.com
*.titanknifetech.com
*.uemitogras.com
*.yankee1906.com
*.zbrojarze.com
365savip.net
72jkiuhnhsjqasfg.com
akulagtm.com
altitudeutilityoutfitters.com
antebellumarabians.com
ariclareandco.com
batterioegypt.com
birmining.com
chicanmagazine.com
cryptobaggiver.com
delangeltree.com
discusionjuridica.com
edbfeature3.com
educationlivebd.com
fridayoutfit.com
gagnerdesbitcoins.com
gedpre.com
glooser.com
groupeyannick.com
habitationsviagere.com
heytherefromhere.com
huemaker.com
itissam.com
iwantmypla.net
javhotvietsub.com
klarenfeldgermanshepherds.com
kunyuschool.com
londynappliancedeals.net
lyh91.com
magnatxt.com
marsilyabetgiris.com
mentalstateclothing.com
mwqusa.com
mx-touch.net
palmerindustrialsupplies.net
pompe.us
promoregio.com
pushkat.com
siteape.net
socialjuiced.com
sofally.com
sokitsdigitais.com
somavintagestore.com
streamentier.com
team-rheinlandpfalz.com
thestachecycler.com
titanknifetech.com
uemitogras.com
yankee1906.com
zbrojarze.com

Other certificates including the domain name mx-touch.net

(limited to 100 certificates)
mx-touch.net
mx-touch.net
www.mx-touch.net

Certificate

The complete raw certificate details for mx-touch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo6Ap7djNovXRgxz+z58m
0M4vm3yPwODRkQ82XsoF9a5JSWhZyzxBMn2DXW2EvYt407jjZzdZMa/RstZVHROm
uNR06mERjqEmwNTxCWaiOb9E3oryJsEepaU9cerfxxWGAAnqffe61vi54lOr6g8P
FUV6VEF5mu2pz0HwVcrIaQURdEcpC4xNMIEnr2zyJNfdopHThh4E/FC599e0XXVg
/THO3ButnISuXolTH5OoxiNKs1TDu86vTmUCy3mHSLm5ifSg+SO6CPxT335yQy6Z
EvnvIZv1eFUVtUEEGoOfdW8GRHsujGjKU7vkumFG9q6QI0JgukKXJ7UxjXtw6igJ
qO+sGkV/qtIAr94AoR4PZYyvEMi+KLVtTl4aFli7Hr/MtJOV3iTMj2D/GjqPY41w
L06N2y2uGeqHxYuJV54y/5hcHsHab3SbPeb3u/JoeATKzgVjd20JwaXaNluCPDWa
6gzROJBFfYWnbk5Eg2rWkPAOxQgIKMlMiscWKrxL0mZ0Suj/XMky9nnyuIOaPsEN
Qvt9pk++gpP40R9FEQZ1jGTmEiMkVkOjn5HpvmRUXl5dU1gdgW8va8RRT7NntyVB
e5VC9ANwB3QuDTP7c6RR6/AZNy+x6nD9lUk7mvVx+asmDUDbPqNyX37dCA8LeDop
BY+N2gUDhOi4cZq33WeaDo0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424130840506897560836426769243551373651285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 09:11:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-03 09:11:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mx-touch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 667534370733566316952387258153883686981700357202380989272750091203269943602433216007857878789096217024494940763334599498593651731149454027546918512153567728217138623585141157638019519413532526161109255776413125996184350441148211791657451015933947172754151650567401856526483983572230057312115432800551798182676023972614177030434318634180288561305644665157320616324295678033130178015279889366447050913770600508472509374534428940319757693619468108629955737751086421522146704559268095044763711178369866804870657160209729500680782964067075722234047129436638086395953102600144815136845707372280195608013945715207302945745814149264628400753086054620232929378752620008962062433778095828255878862336431131277780659025618038001122296881452512884190288308123404004798864433482168252938853236668115651708734614222580124170731295584863775331895436489438131085937984481586734454120338977074288291984821919159586393930577425453290060021119616809825235470601000759756861068635554339125345876693071238338353228854650951825839620498404311011452378577955373750500692213808913931661862002362806566836804649628748913523838777452679437684000674776653114474979412902518906220616449971579424850962190725442343052910516288952026305153370483678809190292917901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afce28812b24384161c00382911ad09bdbdc6692
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1960 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.365savip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.72jkiuhnhsjqasfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.akulagtm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altitudeutilityoutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.antebellumarabians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ariclareandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.batterioegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.birmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chicanmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptobaggiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delangeltree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discusionjuridica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edbfeature3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.educationlivebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fridayoutfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gagnerdesbitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gedpre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glooser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupeyannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.habitationsviagere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heytherefromhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huemaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itissam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwantmypla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.javhotvietsub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klarenfeldgermanshepherds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kunyuschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.londynappliancedeals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lyh91.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.magnatxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marsilyabetgiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mentalstateclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mwqusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mx-touch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.palmerindustrialsupplies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pompe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promoregio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pushkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siteape.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.socialjuiced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sofally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sokitsdigitais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.somavintagestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streamentier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.team-rheinlandpfalz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thestachecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titanknifetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uemitogras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yankee1906.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zbrojarze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '365savip.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '72jkiuhnhsjqasfg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akulagtm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altitudeutilityoutfitters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antebellumarabians.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariclareandco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'batterioegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birmining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicanmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptobaggiver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delangeltree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discusionjuridica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edbfeature3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educationlivebd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridayoutfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gagnerdesbitcoins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedpre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glooser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupeyannick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habitationsviagere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heytherefromhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huemaker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itissam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwantmypla.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javhotvietsub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klarenfeldgermanshepherds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kunyuschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'londynappliancedeals.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyh91.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnatxt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsilyabetgiris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalstateclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mwqusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx-touch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmerindustrialsupplies.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pompe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promoregio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushkat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siteape.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialjuiced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sofally.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokitsdigitais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somavintagestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streamentier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team-rheinlandpfalz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thestachecycler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titanknifetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uemitogras.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yankee1906.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zbrojarze.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f483c72aa000004030047304502203a612213e4d4da42c3cad5363f7b2064e4af6eddcc15cdf7f7f90399d717eed5022100c964b9a8ff909bc5e2a409c86e5f0033c6226723979ffd4aae46284d9286e54100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f483c72ad000004030047304502210084bc3e5025d99749f26ccfeecf91bd0d325f3a96f39985e49ff72cd1aa3ed34402207c24002bc1b675413ea3de01aa20054f0af5c2cdf0b4df51ecc2a09056e2c603
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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