diyana.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d2:ce:ce:1c:18:6f:bc:b5:5e:cd:87:5b:b0:2f:ba:a8:f2 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=diyana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:ce:ce:1c:18:6f:bc:b5:5e:cd:87:5b:b0:2f:ba:a8:f2
Serial Number (int): 333071045998805893884720537679658653231346
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:f4:c1:38:16:2d:00:fc:ee:ef:32:08:27:74:c6:92:17:e5:65:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:7e:ad:a6:7a:b1:82:2b:73:ae:ce:52:64:c8:bc:43:ce:0a:da:eb
Fingerprint (sha256): 78:5c:b2:56:e7:c1:38:3c:ac:4a:0d:fc:32:c3:e6:3d:34:02:3e:57:10:39:9f:c0:08:4f:40:eb:f2:df:a1:86

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate diyana.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diyana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.99n5.com
*.alibuda.com
*.apornoflv.cc
*.avirohotel.com
*.barberini.com
*.beyondcypto.com
*.biggirlgames.us
*.brillianceschool.com
*.buildco.com.au
*.cistit.com
*.cloudmeal.io
*.cocinamesta.com
*.dejung.com
*.developpeurs.net
*.diyana.com
*.ebaybooks.com
*.fabricadebanderas.club
*.ffekkai.com
*.fio.au
*.gelirgarantisi.com
*.glenn52.com
*.globalpaddler.com
*.globeapts.com
*.gorodovoy.com
*.higefive.com
*.iamteekee.com
*.ijijiji.com
*.jsonfree.com
*.katem.com
*.kookjewelry.com
*.krupin.com
*.lescahiers.com
*.lestview.com
*.mainardi.com
*.mineathon.com
*.nanditastbz.com
*.pathinvestmentsplc.com
*.recusant.com
*.rinalai.com
*.screenshoter.live
*.shessociety.com
*.tatevik.com
*.tdapahalgam.org
*.tvcchorseproduction.com
*.txranchconnection.com
*.unholy.us
*.usr.au
*.vanguardtattoostudios.com
*.wehelpyouhere.com
*.xcxc111.com
99n5.com
alibuda.com
apornoflv.cc
avirohotel.com
barberini.com
beyondcypto.com
biggirlgames.us
brillianceschool.com
buildco.com.au
cistit.com
cloudmeal.io
cocinamesta.com
dejung.com
developpeurs.net
diyana.com
ebaybooks.com
fabricadebanderas.club
ffekkai.com
fio.au
gelirgarantisi.com
glenn52.com
globalpaddler.com
globeapts.com
gorodovoy.com
higefive.com
iamteekee.com
ijijiji.com
jsonfree.com
katem.com
kookjewelry.com
krupin.com
lescahiers.com
lestview.com
mainardi.com
mineathon.com
nanditastbz.com
pathinvestmentsplc.com
recusant.com
rinalai.com
screenshoter.live
shessociety.com
tatevik.com
tdapahalgam.org
tvcchorseproduction.com
txranchconnection.com
unholy.us
usr.au
vanguardtattoostudios.com
wehelpyouhere.com
xcxc111.com

Other certificates including the domain name diyana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for diyana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333071045998805893884720537679658653231346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-30 20:05:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 20:05:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diyana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732444768956944262964414852801165869198371774033867860756557316766606235895465349183764817065053167759648884324114768739547821055514269108070508282430001802233555856269399891268745426293908980354038598315588171661880702036389101876929375937486967977104628640332065730739131621704963314230460192015092515398161759149822515225703239348626612201538491205307836761610308782195479320642381536541252523336254798049496512429787286911178931959981489858348970266903635155808455747768783784694844486774888389403450385314313235226569681796923925490493851594948199445115864763871050083956331325494517746358356774300946695275154097873058422640311915580174214966737574198235293163401736703681463494392303429259810182004652984331757594553298533249720888619515977430685114951067465209201405132382850706210079038814752354215672740872483182298382878627065270427704516764761944751198607379965426403200802354604026534310499991241267504868728684933656519644575539314111599317020469669904799511247575045310157198586446258185255402218133168714540623615764937101629182014830734156174732696715917185216539067615471206095029962847568329489675040113360410272588988877586621402151615705293033759760340122547569822655194881117315678209539296502403610012089299039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57f4c138162d00fceeef32082774c69217e565d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1668 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.99n5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apornoflv.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avirohotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barberini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beyondcypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biggirlgames.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cistit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloudmeal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cocinamesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.developpeurs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fabricadebanderas.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fio.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gelirgarantisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.glenn52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalpaddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.higefive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iamteekee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jsonfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kookjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krupin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lescahiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lestview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mainardi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mineathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nanditastbz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pathinvestmentsplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recusant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rinalai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.screenshoter.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shessociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tdapahalgam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvcchorseproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.txranchconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unholy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usr.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vanguardtattoostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wehelpyouhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xcxc111.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '99n5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alibuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apornoflv.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avirohotel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barberini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beyondcypto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biggirlgames.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brillianceschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildco.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cistit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmeal.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocinamesta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dejung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developpeurs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diyana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabricadebanderas.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffekkai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fio.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gelirgarantisi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenn52.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpaddler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globeapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorodovoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'higefive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iamteekee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijijiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jsonfree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kookjewelry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krupin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lescahiers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lestview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainardi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineathon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nanditastbz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pathinvestmentsplc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recusant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rinalai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'screenshoter.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shessociety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tatevik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdapahalgam.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvcchorseproduction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txranchconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unholy.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usr.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanguardtattoostudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wehelpyouhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcxc111.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ae7e97b3a000004030048304602210092f442eeaccbe7758c2fa1bb18bb0ed4cb193bf6a3fd5772e56507a9f578eee3022100ef8ca0ac4e4d16ce5abb0e2c36735b03b4538f1fb898553d4e326dc3e6c96713007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ae7e97b1d00000403004830460221008684c7e7ba616511d5d8c2cd59d0f83c6ac713099c2a08acfbd7fe2966459b75022100a44a4ccd89a989c15610c50bdd26c200d479ca0cc904760401c0f48299d866c1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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