grug.nl

Issued by R3

About this certificate

This digital certificate with serial number 03:aa:88:dc:2a:16:4d:e8:a2:e3:62:db:49:ef:45:e5:f6:f6 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=grug.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:88:dc:2a:16:4d:e8:a2:e3:62:db:49:ef:45:e5:f6:f6
Serial Number (int): 319366778338204239463886848135634226640630
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:9e:82:28:3b:8f:e2:0e:30:f4:4d:1b:47:ce:f7:17:5f:0d:ef:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 16:9f:88:3f:98:28:ee:ba:f7:2b:af:65:e1:b2:63:11:3f:96:8f:e2
Fingerprint (sha256): 79:22:9f:f6:9f:8b:37:ab:69:6d:87:85:73:21:18:fc:35:ee:26:34:d5:02:cd:af:8a:67:5b:6d:a1:78:12:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate grug.nl

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grug.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1stdayschoolsuplies.com
*.adovatehealth.com
*.afobe.com
*.ancestryna.com
*.apesuits.com
*.bluepilmen.com
*.coolershop.com
*.cricketwirrless.com
*.davienda.com
*.ebaumbsworld.com
*.ebaumsowrld.com
*.eddysappliances.com
*.fashionnoova.com
*.fodnetworkmag.com
*.grug.nl
*.gwir.com
*.herfjonestampabay.com
*.kuznec.biz
*.lunasa.us
*.marccherubini.com
*.midwestflooring.com
*.netlife.com.au
*.novelaligera.net
*.offlibery.com
*.olcv.com
*.olivegardentogo.com
*.onlinecasinospiele.co
*.onlineleggingsstore.com
*.openinglishjunior.com
*.pavisol.com
*.pipeingrock.com
*.purplehouse.link
*.rocketmirtgage.com
*.ronhainer.com
*.rovene.com
*.runaustralia.com.au
*.sbbi.co.in
*.spical.com
*.stephues.au
*.suitable.com.au
*.sukket.com
*.titacoffee.com
*.tjxreawrds.com
*.topreviews.au
*.torents.com
*.visitacit.com
*.wouldyoubelievethat.com
*.xn--mkru45i.com
*.xn--tor623fp4z.com
1stdayschoolsuplies.com
adovatehealth.com
afobe.com
ancestryna.com
apesuits.com
bluepilmen.com
coolershop.com
cricketwirrless.com
davienda.com
ebaumbsworld.com
ebaumsowrld.com
eddysappliances.com
fashionnoova.com
fodnetworkmag.com
grug.nl
gwir.com
herfjonestampabay.com
kuznec.biz
lunasa.us
marccherubini.com
midwestflooring.com
netlife.com.au
novelaligera.net
offlibery.com
olcv.com
olivegardentogo.com
onlinecasinospiele.co
onlineleggingsstore.com
openinglishjunior.com
pavisol.com
pipeingrock.com
purplehouse.link
rocketmirtgage.com
ronhainer.com
rovene.com
runaustralia.com.au
sbbi.co.in
spical.com
stephues.au
suitable.com.au
sukket.com
titacoffee.com
tjxreawrds.com
topreviews.au
torents.com
visitacit.com
wouldyoubelievethat.com
xn--mkru45i.com
xn--tor623fp4z.com

Other certificates including the domain name grug.nl

(limited to 100 certificates)
erdalelektronik.net
grug.nl
grug.nl

Certificate

The complete raw certificate details for grug.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319366778338204239463886848135634226640630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 03:43:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 03:43:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grug.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831789308882944169364177481756779200300475258497216426212042131324616073006233168305484792443361776694874672757663715416767577413479180178322803010926834173435609556726396507212725065350670574517220604677022923218643640110677174275307549661259198662058390962833899599943964036750409434746423834324660415914949880956161927686524848644137931655344499260713398888437270399769052076331386391970698399044368647321247802246342679762346089367590226711158430857242015801208271089514014031290276398617187840464205222238075152896377916059596008506041199485493808153206738954964854305072395200406238820391425526018687069110137705062656831598357370439635966740465172258508363289600526499194001709287033721955850197318382107745466608914693378531196929838219991940006389096647352675442767824196648743796915060429087125103740517336978517429948979363212391140205067658632276256087542252913869650568756751155078861546488081165563807422860292666891602716840932197882487155453872608228391857590658387379682132254763810425402113032073269281056733514242298150313814952225267896964810143541651271953993480409821795126911627014006647525824985060470529289206835625151502213131849525007117921058462856772975139816059985647288991930412856939184913100054277741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c49e82283b8fe20e30f44d1b47cef7175f0def71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1742 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1stdayschoolsuplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adovatehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ancestryna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apesuits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluepilmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coolershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cricketwirrless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.davienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaumbsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebaumsowrld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eddysappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionnoova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fodnetworkmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grug.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gwir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.herfjonestampabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuznec.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lunasa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marccherubini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.midwestflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netlife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novelaligera.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offlibery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.olivegardentogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlinecasinospiele.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onlineleggingsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openinglishjunior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pavisol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pipeingrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.purplehouse.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rocketmirtgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ronhainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rovene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.runaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbbi.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stephues.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suitable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sukket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.titacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjxreawrds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.topreviews.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.visitacit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wouldyoubelievethat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--mkru45i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tor623fp4z.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1stdayschoolsuplies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adovatehealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancestryna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apesuits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluepilmen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolershop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwirrless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davienda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaumbsworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebaumsowrld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eddysappliances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionnoova.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fodnetworkmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grug.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'herfjonestampabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuznec.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunasa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marccherubini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midwestflooring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netlife.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novelaligera.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offlibery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olcv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivegardentogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinecasinospiele.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineleggingsstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openinglishjunior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavisol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipeingrock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purplehouse.link'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocketmirtgage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ronhainer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbbi.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephues.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suitable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titacoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjxreawrds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topreviews.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitacit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wouldyoubelievethat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mkru45i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tor623fp4z.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c09f0c1510000040300463044022004c10216d57537e3a4b262e47a790e7d005826bef759093e584790470b5cf5d802204a8cfd497979ecce7d21f1722d6a5b3b1630b76a90e873abff5f5df5a730c6a4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c09f0c1500000040300473045022002c8ff3591cef43351be3b4ba17c8bf23ab334b426936dfd903861813e0ef50602210083f22cf4dd9f511ccaf8083c5a2f6a82ba81ee2d1e06ec19532ee53227816059
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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