fishingreports.com.au

Issued by R3

About this certificate

This digital certificate with serial number 04:de:75:55:5b:3e:f1:a5:b2:df:54:96:a6:a8:a9:b1:43:a2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fishingreports.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:75:55:5b:3e:f1:a5:b2:df:54:96:a6:a8:a9:b1:43:a2
Serial Number (int): 424147792054915342305857462585223168476066
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:82:b7:8a:d2:a3:14:d1:3e:e5:9d:78:87:c0:14:60:64:59:ec:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:59:9f:65:f7:99:92:58:5c:a6:d7:a5:b2:10:ff:b2:5c:5d:35:3f
Fingerprint (sha256): 72:a5:10:b6:39:79:01:f5:5b:f8:33:21:88:0a:f2:ac:ed:a1:e0:56:15:14:2b:6a:62:ac:8f:1e:df:85:d3:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fishingreports.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fishingreports.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.advanceanerica.net
*.almahmoud.com
*.bdenusa.com
*.bluetrustoans.com
*.californiaautos.com
*.cardboardbike.com
*.cheapcigarettesonline.com.au
*.citad.cn
*.corel-tipp-clips.de
*.daiilywire.com
*.deadliest.com.cn
*.deadliest1.cn
*.deadliest1.com.cn
*.dietadetox.com
*.familyphoto.com.au
*.fishingreports.com.au
*.graphict.com
*.hangingtents.com
*.hap.com.au
*.httpstaobao.com
*.hydie.com
*.intagam.com
*.invisiblewig.com
*.invoicefinancing.com
*.jclaughlin.com
*.konyha.com
*.maingau-ernergie.de
*.menangleparkrealestate.com.au
*.movietube.me
*.opelocasion.es
*.pokemin.com
*.reebokclassic99.top
*.renewablematerial.com
*.ringtoneten.com
*.rubteen.com
*.sambasiva.com
*.servicearizona.co
*.skateramp.com.au
*.sqlmagazine.net
*.stingerworl.com
*.susansummer.com
*.tazchurchcollective.org
*.textwheel.com
*.thepennyhorder.com
*.tichyseinblicke.de
*.ticketverkoop.com
*.ttwinner.co
*.usabbva.com
*.usaleans.org
*.wwgmx.de
advanceanerica.net
almahmoud.com
bdenusa.com
bluetrustoans.com
californiaautos.com
cardboardbike.com
cheapcigarettesonline.com.au
citad.cn
corel-tipp-clips.de
daiilywire.com
deadliest.com.cn
deadliest1.cn
deadliest1.com.cn
dietadetox.com
familyphoto.com.au
fishingreports.com.au
graphict.com
hangingtents.com
hap.com.au
httpstaobao.com
hydie.com
intagam.com
invisiblewig.com
invoicefinancing.com
jclaughlin.com
konyha.com
maingau-ernergie.de
menangleparkrealestate.com.au
movietube.me
opelocasion.es
pokemin.com
reebokclassic99.top
renewablematerial.com
ringtoneten.com
rubteen.com
sambasiva.com
servicearizona.co
skateramp.com.au
sqlmagazine.net
stingerworl.com
susansummer.com
tazchurchcollective.org
textwheel.com
thepennyhorder.com
tichyseinblicke.de
ticketverkoop.com
ttwinner.co
usabbva.com
usaleans.org
wwgmx.de

Other certificates including the domain name fishingreports.com.au

(limited to 100 certificates)
webkeywordsdvd.com
stocktwis.com
fishingreports.com.au
rtp.eu
gloalindustrial.com
fishingreports.com.au
stocktwis.com
billger-fluege.de
fishingreports.com.au
jclaughlin.com
fishingreports.com.au
qle.nl
wsvtv.com
jclaughlin.com

Certificate

The complete raw certificate details for fishingreports.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424147792054915342305857462585223168476066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 18:28:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 18:28:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fishingreports.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912545339620832325809130086684638549035309183497118385682587531209748411023101738408295963489490657850691082265612215296393955378596292097154152306305987720924578977950129986481955339817607523373169897271100308471049902946929778112392763943850041937136549818257137939820159541554974394190152497501252394518659507992517790119458741982011002581692092610948982757798261100969868030101361347122497996745714965066287617633119704158595807509216077388762314575096172075070855695419542776066258719776783333320466652852165857517932936683184478090603125786148917004372607392501441382886241091588156337662240746088503423551143308785651387445970165434151980729376893713790560112175675208304889647818843128794662416750437034108807940755916470423076446492449273101168276624296317842018847113113124451297382994985336153092607467907957473794583782814297478922173202903490946720922380904044709968964363615567858417153591390102275351706872568828558156256910757474104188335896867820472999087383733303087535748088946870407503769577908903923881992684689725648580265326620994729751340288254668117040318300136408973782676665841731739235153696314945177519264311705660621764398608820853923246314934906289905342848648819277102272036731069986680754225807398467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b082b78ad2a314d13ee59d7887c014606459ec6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advanceanerica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.almahmoud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bdenusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluetrustoans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.californiaautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cardboardbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheapcigarettesonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citad.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.corel-tipp-clips.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.daiilywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadliest.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadliest1.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.deadliest1.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dietadetox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.familyphoto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishingreports.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.graphict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hangingtents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.httpstaobao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hydie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.intagam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invisiblewig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invoicefinancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jclaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.konyha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maingau-ernergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menangleparkrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movietube.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opelocasion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pokemin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reebokclassic99.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renewablematerial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ringtoneten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rubteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sambasiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.servicearizona.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.skateramp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqlmagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stingerworl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.susansummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tazchurchcollective.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.textwheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thepennyhorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tichyseinblicke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketverkoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ttwinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usabbva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usaleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwgmx.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advanceanerica.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'almahmoud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdenusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluetrustoans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'californiaautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardboardbike.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapcigarettesonline.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citad.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corel-tipp-clips.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiilywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadliest.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadliest1.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deadliest1.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dietadetox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familyphoto.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishingreports.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hangingtents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'httpstaobao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hydie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intagam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invisiblewig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoicefinancing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jclaughlin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konyha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maingau-ernergie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menangleparkrealestate.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movietube.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opelocasion.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pokemin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reebokclassic99.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewablematerial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ringtoneten.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rubteen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sambasiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicearizona.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skateramp.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqlmagazine.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stingerworl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susansummer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tazchurchcollective.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'textwheel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thepennyhorder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tichyseinblicke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketverkoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ttwinner.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usabbva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usaleans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwgmx.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9a5136d70000040300483046022100d510df121f3def71cb1cae44b2d019760c3c6acb81335f2951334d5283f1af74022100d4f49d6abbee4a573eb48e48bceae5eb91e0ae2a45f8f1dfc6132350ec3a747b007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9a5137180000040300483046022100a0ed237bfb5da593a184fa93e27c0ac201d511f647a441ae3727d737edd7bd7f022100e4e3fc3f7e7d93cd8951c67588451633e6d9cc816a503b041276017ceeda43f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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