goldenroad.net

Issued by R3

About this certificate

This digital certificate with serial number 04:08:f8:7e:de:db:ab:47:78:7b:7d:ca:98:8c:ea:ea:32:bf was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=goldenroad.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:08:f8:7e:de:db:ab:47:78:7b:7d:ca:98:8c:ea:ea:32:bf
Serial Number (int): 351501709954866236759633292248125794824895
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 40:6e:df:4e:b5:8a:97:d5:3b:03:ec:30:90:17:14:56:f9:d2:4c:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 82:f3:b5:1e:67:d2:11:e8:84:f9:5b:7a:80:92:c5:26:b2:97:ed:2f
Fingerprint (sha256): 7f:31:06:30:1a:41:e2:a8:73:a5:5c:2b:82:bf:6b:c4:bd:9e:35:52:84:57:8c:61:be:08:42:a7:f4:6c:26:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate goldenroad.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goldenroad.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.afdahtv.com
*.alakeview.com
*.alliantenegy.com
*.ameay.com
*.americabas.com
*.amydesk.com
*.anhamguera.com
*.arstehnica.com
*.bazarobrecho.com
*.benzcy-enterprises.com
*.braunabilty.com
*.christianmusic.au
*.comicnaver.com
*.crucifixion.au
*.ctriq.org
*.ctwitter.com
*.dallorgeneral.com
*.dealerconenct.com
*.delegacia.eu
*.dimplips.com
*.doculibery.com
*.dodge31.com
*.earthingyou.com
*.gmaaiil.com
*.gnh.au
*.goldenroad.net
*.grammarily.com
*.hugesnetsurfing.com
*.inutuit.com
*.ipchcicken.com
*.katvondlosangeles.com
*.lesbes.com
*.miamistrawberries.com
*.minecra.net
*.mtbobs.com
*.mycsudh.com
*.mysistagirl.com
*.pawabet.com
*.performancemanager4successfactors.com
*.plytex.com
*.roulettebot.org
*.sexmodernbull.com
*.smartweb-com.com
*.sounddation.com
*.sqlitedog.com
*.thecanhub.com
*.theworkingpaent.com
*.tweamviewer.com
*.whatsappwebb.com
*.ytsmovies.com
afdahtv.com
alakeview.com
alliantenegy.com
ameay.com
americabas.com
amydesk.com
anhamguera.com
arstehnica.com
bazarobrecho.com
benzcy-enterprises.com
braunabilty.com
christianmusic.au
comicnaver.com
crucifixion.au
ctriq.org
ctwitter.com
dallorgeneral.com
dealerconenct.com
delegacia.eu
dimplips.com
doculibery.com
dodge31.com
earthingyou.com
gmaaiil.com
gnh.au
goldenroad.net
grammarily.com
hugesnetsurfing.com
inutuit.com
ipchcicken.com
katvondlosangeles.com
lesbes.com
miamistrawberries.com
minecra.net
mtbobs.com
mycsudh.com
mysistagirl.com
pawabet.com
performancemanager4successfactors.com
plytex.com
roulettebot.org
sexmodernbull.com
smartweb-com.com
sounddation.com
sqlitedog.com
thecanhub.com
theworkingpaent.com
tweamviewer.com
whatsappwebb.com
ytsmovies.com

Other certificates including the domain name goldenroad.net

(limited to 100 certificates)
comtmz.com
amazonprimemembershipamzn.com
aldoshhoes.com
amudi-ee.com
goldenroad.net
goldenroad.net
ipchcicken.com
achevie3000.com
goldenroad.net
softunit.com

Certificate

The complete raw certificate details for goldenroad.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351501709954866236759633292248125794824895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 06:38:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-10 06:38:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goldenroad.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835627179221406966702877997684872227302186642149058898659150750115823053031112208153824162716487071666363172804739065389408137498158769401905467248195535743650647451956185424178004518557682471136487771652178648814313107412603531115064573983311850533593954936556269644257623647202528395429431877250067866319164958520850985584934261805421629554517537880563394911024095806579996203885661329219452871412080662883818391054945228131071168084963153912453654266611910578972507281872152973230905196929497045579948677001573054244069937423062741403315558690511154385254232089102600666217620274719098195986783156695728904288542105568797396297928138474283406074908567918644476027853172754838512991066455967686297374227326119088177205056551268900571994186907861938897055091974485435280244550323785127938901291071958726184464418623192755253350335466339302081055591650111220419576796151315160313237747362253144514118422001212575588215274983735760570005268592222081147506147450400303878011539713199709290003298363148338431256319172408690248696935932731735842711449064365401692245524936665838228823101577119241880763883067036449255377682296105801074341955125600885798345774585394063347380137185793082778281904478571945724984979831211165466722363797197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							406edf4eb58a97d53b03ec3090171456f9d24c52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1738 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afdahtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alakeview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alliantenegy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ameay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.americabas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amydesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anhamguera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arstehnica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazarobrecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.benzcy-enterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braunabilty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.christianmusic.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comicnaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.crucifixion.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctriq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ctwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dallorgeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dealerconenct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delegacia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dimplips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doculibery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dodge31.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.earthingyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmaaiil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gnh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldenroad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grammarily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hugesnetsurfing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inutuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipchcicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.katvondlosangeles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lesbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.miamistrawberries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.minecra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mtbobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mycsudh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mysistagirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pawabet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.performancemanager4successfactors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plytex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roulettebot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sexmodernbull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smartweb-com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sounddation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sqlitedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theworkingpaent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tweamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whatsappwebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ytsmovies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdahtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alakeview.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliantenegy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ameay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'americabas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amydesk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anhamguera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arstehnica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazarobrecho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benzcy-enterprises.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braunabilty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christianmusic.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comicnaver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crucifixion.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctriq.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctwitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallorgeneral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerconenct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delegacia.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dimplips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doculibery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dodge31.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earthingyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmaaiil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnh.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldenroad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hugesnetsurfing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inutuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipchcicken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katvondlosangeles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lesbes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miamistrawberries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minecra.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycsudh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysistagirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pawabet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancemanager4successfactors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plytex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roulettebot.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexmodernbull.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartweb-com.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sounddation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sqlitedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecanhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theworkingpaent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tweamviewer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsappwebb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytsmovies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f6bbcd44b000004030046304402200c8abe79681d7ff15b151cfa923b5ecc14731409450a60fa2e0de32b3608c2b8022003280a7f6c17c9037faea197d9ab38fcb37f6af901ecde7d959a83a81c0d39550076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f6bbcdac50000040300473045022050f6566d6d77c0cd5b89a1a4114315a10399388e3308a0325c6c0e5865704bc1022100805810f32ef019ad6cb992d66b7107531e5b4854db58c3475b84e9b6b73f4523
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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