theministry.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:de:57:e5:ee:bc:b0:a3:d4:3f:9d:e2:5d:8d:24:99:17:a7 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=theministry.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:57:e5:ee:bc:b0:a3:d4:3f:9d:e2:5d:8d:24:99:17:a7
Serial Number (int): 336996379965506018625942052342515382163367
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:d4:6d:a0:c5:e6:76:5e:f4:5e:d4:3c:ed:c1:1b:97:58:f6:69:c6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 54:a2:ff:22:56:e3:af:da:c8:44:c1:3e:b7:c3:2c:3f:e2:55:0c:b0
Fingerprint (sha256): 7e:a7:db:01:1e:4f:60:c5:fd:d2:27:ab:35:fa:79:24:29:fb:eb:d3:f7:06:9d:fd:e7:a7:9c:50:21:f6:72:58

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate theministry.com.au

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theministry.com.au

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.12xc.us
*.2712.com.au
*.28th-infantry-division.us
*.3250.com.au
*.3352.com.au
*.3670.com.au
*.4230.com.au
*.4717.com.au
*.6109.com.au
*.6182.com.au
*.7020.com.au
*.a2online.us
*.aaahomeinspections.us
*.beaconhealthsystems.org
*.bitcoinex.ca
*.bookcine.com
*.btcdolls.com
*.cerosenberg.com
*.citykonditoriet.com
*.compactdiscovery.net
*.covid19uttarakhand.org
*.dlinkapp-local.com
*.dogparks.com.au
*.fezaiplik.com
*.ffa.in
*.fmovis.to
*.gamehackers.org
*.hcocm.org
*.instafollowes.co
*.krissanainter.com
*.kuobing.com
*.liveact.me
*.livethrivebalance.org
*.mairfcooking.com
*.margaretatwood.com
*.marsaninmobiliaria.com
*.nba2kcapbreakers.com
*.offgridskoolie.com
*.philippineembassyusa.org
*.plazaarthurbuies.com
*.rbux.net
*.strin.com
*.symanttec.com
*.themeatmen.org
*.theministry.com.au
*.wwwbit.ly
*.xiumm.org
*.xn--standboxscke-ocb.de
*.xxxvideostubes.com
*.zoooom.net
12xc.us
2712.com.au
28th-infantry-division.us
3250.com.au
3352.com.au
3670.com.au
4230.com.au
4717.com.au
6109.com.au
6182.com.au
7020.com.au
a2online.us
aaahomeinspections.us
beaconhealthsystems.org
bitcoinex.ca
bookcine.com
btcdolls.com
cerosenberg.com
citykonditoriet.com
compactdiscovery.net
covid19uttarakhand.org
dlinkapp-local.com
dogparks.com.au
fezaiplik.com
ffa.in
fmovis.to
gamehackers.org
hcocm.org
instafollowes.co
krissanainter.com
kuobing.com
liveact.me
livethrivebalance.org
mairfcooking.com
margaretatwood.com
marsaninmobiliaria.com
nba2kcapbreakers.com
offgridskoolie.com
philippineembassyusa.org
plazaarthurbuies.com
rbux.net
strin.com
symanttec.com
themeatmen.org
theministry.com.au
wwwbit.ly
xiumm.org
xn--standboxscke-ocb.de
xxxvideostubes.com
zoooom.net

Other certificates including the domain name theministry.com.au

(limited to 100 certificates)
cateringtrucks.com.au
myemailsrvr.com
rlg.us
theministry.com.au
theministry.com.au
theministry.com.au
theministry.com.au
batepapogratis.net
theministry.com.au
theministry.com.au
wwwcitapreviadni.es

Certificate

The complete raw certificate details for theministry.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336996379965506018625942052342515382163367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 14:52:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 14:52:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theministry.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810502355264958703918562878139112617417421986994427264641046814069324730574707658252812647472344768650345232229110023853591016965411049927158278151894125794341277555111748637280419448941205408380354131334112796855845950453096932278317124488344790186302165426808214358458360920404366347334570900206932469133097040034433402196026686118735908783441629979563025936594342516445104579242993277176744100458136740668556518159362561544354717717052425273268385845061879120619757719609652389477544496034930526041071324496192645288719350886658823433657808300039746431419684440387629755200864156822839740610587775793631602047455960471759005186149999950807592295770585068432839352411813710529430145311869022167979560319379933240539763633537028465457660037497765741303107313543890066469515917346753666119583789032254636295391779978407037420498313662977221763828570760732267284968962296417679137800983055443197142068111328294494037614502280847900981196612018022160976837564077183533909683030260932422943529092946163276173610206804649920061500206675261370754816045680446126466236699786608831531918610424600518039012625894065333951242499912324104944221007824898774324595511006479921142882348133109110355907060565189293001145286785634587222966451378111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							efd46da0c5e6765ef45ed43cedc11b9758f669c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1758 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.12xc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.2712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.28th-infantry-division.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3250.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3352.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.3670.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4230.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.4717.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6109.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.6182.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.7020.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a2online.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aaahomeinspections.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beaconhealthsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bookcine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cerosenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citykonditoriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.compactdiscovery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.covid19uttarakhand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dlinkapp-local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dogparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fezaiplik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ffa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fmovis.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gamehackers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hcocm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.instafollowes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.krissanainter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuobing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveact.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livethrivebalance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mairfcooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margaretatwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marsaninmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nba2kcapbreakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.offgridskoolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.philippineembassyusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plazaarthurbuies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rbux.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.strin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.symanttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themeatmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theministry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwbit.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiumm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--standboxscke-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xxxvideostubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zoooom.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12xc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2712.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '28th-infantry-division.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3250.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3352.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3670.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4230.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4717.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6109.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6182.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7020.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2online.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaahomeinspections.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaconhealthsystems.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinex.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookcine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btcdolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cerosenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citykonditoriet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compactdiscovery.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covid19uttarakhand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlinkapp-local.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogparks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fezaiplik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ffa.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmovis.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gamehackers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcocm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instafollowes.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krissanainter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuobing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveact.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livethrivebalance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mairfcooking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margaretatwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsaninmobiliaria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nba2kcapbreakers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offgridskoolie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'philippineembassyusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plazaarthurbuies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbux.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symanttec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themeatmen.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theministry.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbit.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiumm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--standboxscke-ocb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xxxvideostubes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoooom.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3409f5b80000040300473045022100b1b7e9f5372fb28b84067bbb1a64d7c607f251f6b8c775933a71c35c446d398f02205295d224123eabd9b0b2640a5e0af2d549c36ba744908bbeab25be61a65b264900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b3409f61500000403004730450220399291bb79f5ed10acf41d953ec0f61aca5bbbca0dd0b45b1a2a50c2742fe875022100eed48ef425f1398e198a8b871cc7da05786bf39c1f3dee754ac48cff8dc6b48a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a2b9a292b9b7e6ccd5fedf8e7c0cde84c19fa7a2bd2b55f9cf7da535395a443fc6657a98611eb23d9320da92d837fc1a393962d45db71ffc1b62cd11401035e9297cf1e5893505bb9c080e7d34694b318cbd21cd6498aabb3618b3e4f99c5e73e47c1cf515e7c8e55b0300664adf29337b59b739068fbbca962ed27bb688a500815390b7d66067e6a7fc7079a42511a79ddfe772bf12aa5c0250f196a9eea5214616c7d768463e9d21a52c425e529f27a60ee62ead28270f31ec51998d328b81de3a1f521e1429aaa49d2c5bbb8a091845e4cfab8bba4318a74314a37061c2818a353581b9b3705e519dff50c971a5e00aec85abfaa36a56636ff4583734eede