gitas.com

Issued by R3

About this certificate

This digital certificate with serial number 04:08:3e:53:42:fd:aa:3e:b5:2c:2a:5b:98:51:b3:ec:fd:78 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gitas.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:3e:53:42:fd:aa:3e:b5:2c:2a:5b:98:51:b3:ec:fd:78
Serial Number (int): 351254247117522864686768411438192905747832
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f7:d7:79:e4:b9:90:4f:ac:16:11:46:59:b5:9b:7f:5e:3d:19:01:1b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:2b:90:ee:0d:1a:4b:73:6c:f4:ef:07:b2:57:52:66:78:4d:2b:64
Fingerprint (sha256): 75:ac:99:7e:4f:61:2b:3f:ff:3f:0f:00:0f:85:9b:72:4f:dd:31:ec:92:86:7b:83:54:64:ef:a4:e2:b2:e5:e0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gitas.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitas.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.0cn.com
*.6packfactory.com
*.adyge.com
*.aksolar.com
*.blinza.com
*.botanic.live
*.bubblemap.io
*.buyteeshirt.com
*.consent.au
*.darji.com
*.decat.live
*.fingerontheapp.live
*.flagstaar.com
*.fortron.com
*.futrono.com
*.gitas.com
*.hogaza.com
*.ilnord.com
*.jerwin.com
*.jolibridal.com
*.jonathanmcreynolds.live
*.kahooy.live
*.khoudary.com
*.kidscoding.live
*.laguterbaru.com
*.longplay.live
*.macneils.com
*.maricopa.live
*.mormonguys.com
*.mxpays.me
*.myndomain.info
*.nyage.live
*.pages-suite-business.live
*.plusalpha.info
*.pornogonzo.com
*.psyllid.info
*.purecn.com
*.qbeleza.com
*.rftb.com
*.showdebola.com
*.siggno.com
*.sodade.com
*.songlio.io
*.spytechno.com
*.sweetcheeksgeelong.com.au
*.thefolly.com
*.thelovecompany.com
*.weduk.com
*.zinmanga.live
0cn.com
6packfactory.com
adyge.com
aksolar.com
blinza.com
botanic.live
bubblemap.io
buyteeshirt.com
consent.au
darji.com
decat.live
fingerontheapp.live
flagstaar.com
fortron.com
futrono.com
gitas.com
hogaza.com
ilnord.com
jerwin.com
jolibridal.com
jonathanmcreynolds.live
kahooy.live
khoudary.com
kidscoding.live
laguterbaru.com
longplay.live
macneils.com
maricopa.live
mormonguys.com
mxpays.me
myndomain.info
nyage.live
pages-suite-business.live
plusalpha.info
pornogonzo.com
psyllid.info
purecn.com
qbeleza.com
rftb.com
showdebola.com
siggno.com
sodade.com
songlio.io
spytechno.com
sweetcheeksgeelong.com.au
thefolly.com
thelovecompany.com
weduk.com
zinmanga.live

Other certificates including the domain name gitas.com

(limited to 100 certificates)
romeria.com
karamanda.com
scholaticnews.com
cichly.co
mojave.org
pornotubesexy.co
gitas.com
gitas.com
gitas.com
gitas.com
pornotubesexy.co

Certificate

The complete raw certificate details for gitas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351254247117522864686768411438192905747832
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 17:06:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 17:06:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1005037318703343394147741099824819209589143981374535495844183556535679130896138931928040770462064663771178921669364916041190982513171877123523374846521022725554534696714873798902126505847465129066588484038993055087458010242080823133367407378339309327422284840277657701221534118032573178531257544311124224322686194427908042622545994902714635665053293329149652788771960594725119533883705299471201911167750706443030977662064056651773939624570524525367406607153855663895513740608809590545231198081174414149488772701070699326114483025366254207890962539584586398430530838474580637414993429730775068381925773215349567006094029228446741826112959496606989502946649146926296407057562323515377213410414858232679098399518625455063222269185351989527377431442222506780748190605609762394149574234666505127589491393656590487054768655686254961913713235409151207649397819411829141263359451113533270872839238931682207506513174587193733437179929640272357744032491250489907558795163907966953554399926297298017284507350237076055196234449193395928071656491072521854325893315852487341606285646086208017790778162348944674000695093712716908809463492051810806484172829372685190643450987297283178310867498845677002281707377544543997568178856218758939118334249163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7d779e4b9904fac16114659b59b7f5e3d19011b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.0cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6packfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adyge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aksolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blinza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.botanic.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bubblemap.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buyteeshirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.consent.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.decat.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fingerontheapp.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flagstaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fortron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.futrono.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hogaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilnord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jerwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jolibridal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jonathanmcreynolds.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kahooy.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.khoudary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kidscoding.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.laguterbaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longplay.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macneils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maricopa.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mormonguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mxpays.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myndomain.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nyage.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pages-suite-business.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plusalpha.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pornogonzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.psyllid.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purecn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qbeleza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rftb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showdebola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.siggno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sodade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.songlio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spytechno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sweetcheeksgeelong.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thefolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thelovecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weduk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zinmanga.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6packfactory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adyge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aksolar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blinza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanic.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bubblemap.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyteeshirt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decat.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fingerontheapp.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flagstaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futrono.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hogaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilnord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerwin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jolibridal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonathanmcreynolds.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahooy.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khoudary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kidscoding.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laguterbaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longplay.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macneils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maricopa.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mormonguys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxpays.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myndomain.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyage.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages-suite-business.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusalpha.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pornogonzo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyllid.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purecn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbeleza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rftb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showdebola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siggno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sodade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songlio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spytechno.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sweetcheeksgeelong.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefolly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelovecompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weduk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zinmanga.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1c42e49f0000040300483046022100bb0674df00791c83a7ce48f13062c96010c91b8c47f339e6b85f14b717d450fe022100a4014761b8b6368125a06e2cf6756530c84910425731b6641b8e7276f3bef401007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1c42e4a20000040300483046022100a0b358400321e2dd62a372db6570c57423132b0383dd72c319538169b1bc435c0221009bd709532dc5f62e4ec73f0d123191571b7323f4de0ab95a1f1b5ceef4dbeb35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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