bezpecny.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:40:23:d8:dc:3b:cd:b9:0e:35:cf:e5:28:21:e0:68:c9:13 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bezpecny.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:23:d8:dc:3b:cd:b9:0e:35:cf:e5:28:21:e0:68:c9:13
Serial Number (int): 283162578261062959716951951469391473330451
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:91:5b:5c:3f:0c:6b:2c:43:87:97:fb:78:90:b4:74:ed:ae:b8:30
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c4:3c:cd:e0:7d:f6:b7:b2:dd:48:e3:3e:6a:e6:dd:37:49:f6:70:83
Fingerprint (sha256): 80:de:90:7e:b0:2a:2d:56:86:a6:f1:9c:bf:03:d6:fc:11:2c:76:17:6d:33:8c:a7:c1:9e:c4:95:d5:f0:4f:ad

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bezpecny.cz

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bezpecny.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.5959douga.com
*.5vi.cc
*.aefdesigns.com
*.atgfl.top
*.atrashop.com
*.auto-verifier.com
*.bestmeal1.xyz
*.bezpecny.cz
*.biovidria.com
*.bratcheda.com
*.brokar-milano.com
*.bufffstreams.ai
*.casinokorona777.com
*.dentalinsuranceplans.site
*.dllindir.com
*.duckdnc.org
*.easemydebt.co.uk
*.ebonheartkennel.com
*.floristdirectory.com.au
*.galway.pro
*.hoanghaile.com
*.investtwoearn.com
*.larentan.com
*.lastinglongr.com
*.logobuch.de
*.lpcomm.com
*.lpreisvergleich.de
*.mantrads.com
*.nha.es
*.nitrogen.com.au
*.northcliffe.com.au
*.paristhread.com
*.pastorjoanwairimu.com
*.pointfamily.org
*.poslovitsy-pogovorki.com
*.razzak.xyz
*.regalcarrental.com
*.ristorantecosta.net
*.rtpfw77.live
*.schwefelquellen.de
*.sleetbook.com
*.sokany-eg.online
*.srbg.info
*.steepacademy.com
*.t13.online
*.tplinkerepeater.net
*.updaterangpur.com
*.vcrhlq.com
*.wbss.online
*.xiaossdh1.com
5959douga.com
5vi.cc
aefdesigns.com
atgfl.top
atrashop.com
auto-verifier.com
bestmeal1.xyz
bezpecny.cz
biovidria.com
bratcheda.com
brokar-milano.com
bufffstreams.ai
casinokorona777.com
dentalinsuranceplans.site
dllindir.com
duckdnc.org
easemydebt.co.uk
ebonheartkennel.com
floristdirectory.com.au
galway.pro
hoanghaile.com
investtwoearn.com
larentan.com
lastinglongr.com
logobuch.de
lpcomm.com
lpreisvergleich.de
mantrads.com
nha.es
nitrogen.com.au
northcliffe.com.au
paristhread.com
pastorjoanwairimu.com
pointfamily.org
poslovitsy-pogovorki.com
razzak.xyz
regalcarrental.com
ristorantecosta.net
rtpfw77.live
schwefelquellen.de
sleetbook.com
sokany-eg.online
srbg.info
steepacademy.com
t13.online
tplinkerepeater.net
updaterangpur.com
vcrhlq.com
wbss.online
xiaossdh1.com

Other certificates including the domain name bezpecny.cz

(limited to 100 certificates)
1198.icu
cavanaghtimbersupplies.co.uk
nightshiftworker.co.uk
bezpecny.cz
bezpecny.cz
bezpecny.cz
bezpecny.cz
newcarwarranty.com.au
bezpecny.cz
*.5daypouchtest.com
newjersey.com.au
notebooksbiulliger.de
bezpecny.cz
bezpecny.cz

Certificate

The complete raw certificate details for bezpecny.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283162578261062959716951951469391473330451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-05 21:53:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 21:53:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bezpecny.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 985317400726279126464625535055392546811812344165608706225908128724590260832660866451390654172705330970781734377866018411019907373039130344593392653244302557242297632775490801239216863845815938080556979645111576386759011043889123662564857054831298986002584708525644572838683687834680663721448489132264326739062641041508867783450962341986949722207498236791197654748164883637441689291779965045678746074902331501682635605951810407097128225743549873040192561032767321947426849935331325552304873750309044415453030101337128206786136141731122670255645919683994227275284824792632765945277943726752548575850364889402148946584103609355056826934137832149453798346583385135251926554796406390810441264287804630194682485829718884199443651118295101789053540116274803640078158121503831144986591719819802767332890103902532267882150893782304409793988682229111628769692651286098710022599761831606860007443558377185834775340611842457038399417016598792676004912237890516514707246319107567049017899239168497497716172250123087661753576762778152001167611915965351944366589040980444070741243629119065334984998414577014637970844428946279381146523985587267356098597924456583355556612725502077490871949425194427490957316780491386594757945179069409484264037957167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41915b5c3f0c6b2c438797fb7890b474edaeb830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5959douga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.5vi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aefdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atgfl.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atrashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto-verifier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestmeal1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bezpecny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.biovidria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bratcheda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokar-milano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bufffstreams.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.casinokorona777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dentalinsuranceplans.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dllindir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duckdnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.easemydebt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebonheartkennel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.floristdirectory.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.galway.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hoanghaile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investtwoearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.larentan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastinglongr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logobuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpcomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lpreisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mantrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nha.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitrogen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northcliffe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paristhread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pastorjoanwairimu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pointfamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.poslovitsy-pogovorki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.razzak.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.regalcarrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ristorantecosta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rtpfw77.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schwefelquellen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sleetbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sokany-eg.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srbg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.steepacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.t13.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tplinkerepeater.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updaterangpur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vcrhlq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wbss.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xiaossdh1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5959douga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5vi.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aefdesigns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atgfl.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atrashop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-verifier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestmeal1.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bezpecny.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biovidria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bratcheda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokar-milano.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bufffstreams.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casinokorona777.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dentalinsuranceplans.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dllindir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckdnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easemydebt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebonheartkennel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floristdirectory.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galway.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoanghaile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investtwoearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'larentan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastinglongr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logobuch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpcomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpreisvergleich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantrads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nha.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitrogen.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcliffe.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paristhread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastorjoanwairimu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointfamily.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poslovitsy-pogovorki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'razzak.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regalcarrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ristorantecosta.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtpfw77.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schwefelquellen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sleetbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sokany-eg.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srbg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steepacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't13.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tplinkerepeater.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updaterangpur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcrhlq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbss.online'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xiaossdh1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b020bf5890000040300483046022100abe657989c445c80131779a4ad256a4990f39bf8238e3c3c0f39c7169041bd92022100e0ba3ab9dcdfea6daba513a6d4ca0c2425e803f29d2397058eb89ce965181ef6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b020bf6260000040300473045022100d8f553434f16a1a7737e92a952759114745c22f8e07903e1fa1355bc9d73c115022053ac13066100321915c207fcba284af8f4f946987a585947da91d0b9aefefc9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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